{"vulnerability": "2025-83", "sightings": [{"uuid": "7a63c59c-1437-4af7-9139-e14b9e4ef36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8359", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ly56pxhhjz25", "content": "", "creation_timestamp": "2025-09-06T03:01:32.455740Z"}, {"uuid": "af072a88-fb96-4e84-a67e-204be1b4303a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ly57ssrpl62h", "content": "", "creation_timestamp": "2025-09-06T03:21:01.327905Z"}, {"uuid": "91f0a720-62aa-45a7-957c-667a27dff9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8360", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ly5bqrzzxc2r", "content": "", "creation_timestamp": "2025-09-06T03:55:40.641881Z"}, {"uuid": "4c3dacdf-fff3-4af0-a8b4-95ceded18b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8359", "type": "seen", "source": "https://bsky.app/profile/malwarevangelist.com/post/3ly5e4hzq5u2g", "content": "", "creation_timestamp": "2025-09-06T04:38:00.789153Z"}, {"uuid": "dac9356e-59c1-4c31-93b0-141ebfbd9b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyytwamrw42t", "content": "", "creation_timestamp": "2025-09-17T03:02:43.892737Z"}, {"uuid": "3f4556f9-04f5-4668-af5e-47c3e02f1458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyhhbbhzhb2r", "content": "", "creation_timestamp": "2025-09-10T05:00:59.742103Z"}, {"uuid": "7cd54d91-b201-4f0e-8819-32075ace3800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8388", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lyhhc73eyw2y", "content": "", "creation_timestamp": "2025-09-10T05:01:31.632893Z"}, {"uuid": "a628515e-2367-4f51-9001-35e829f35c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8320", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lv5hylkcgh2j", "content": "", "creation_timestamp": "2025-07-30T01:31:50.742865Z"}, {"uuid": "e86c4ad5-82d2-4b28-a748-4ff4b1e8c06b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8320", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv5nlzfyot2z", "content": "", "creation_timestamp": "2025-07-30T03:12:10.764740Z"}, {"uuid": "ec104005-418f-485b-a0a6-849e103e79fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv5oypy4xl2q", "content": "", "creation_timestamp": "2025-07-30T03:37:10.787810Z"}, {"uuid": "36df8750-e849-4798-a650-e24c258a3f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8321", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-712/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "625099b9-3591-4ccb-b1f3-7165179c0670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8320", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-711/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "6893f84d-c044-4829-a969-814cf8470d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8323", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv62hqngao2z", "content": "", "creation_timestamp": "2025-07-30T07:02:26.076798Z"}, {"uuid": "b4bb75e3-6f55-418f-84ca-1295b0fa9510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv62qppgcw2l", "content": "", "creation_timestamp": "2025-07-30T07:07:27.029179Z"}, {"uuid": "1bb1a1ac-41ef-448f-8fea-5c13af5fa604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8353", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv767stkba26", "content": "", "creation_timestamp": "2025-07-30T17:42:14.442855Z"}, {"uuid": "a9a733b8-ef26-4428-bf0f-d0ca64b6186a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8312", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv76irrink2l", "content": "", "creation_timestamp": "2025-07-30T17:47:15.315722Z"}, {"uuid": "84cc84e0-59e2-477a-bdff-aa3d079d929d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8389", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-732/", "content": "", "creation_timestamp": "2025-07-30T03:00:00.000000Z"}, {"uuid": "e2a728f4-44bd-47a4-bf7e-78c3de20f330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv7swbv6kk2q", "content": "", "creation_timestamp": "2025-07-30T23:52:43.208403Z"}, {"uuid": "ed482bb0-7ab5-47ee-8f04-340256fa925b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8343", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lva5s3lftf2n", "content": "", "creation_timestamp": "2025-07-31T03:07:13.680409Z"}, {"uuid": "e4861249-eb08-4a02-aab0-6bf0b3437b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8344", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lva7s3ctfx2p", "content": "", "creation_timestamp": "2025-07-31T03:43:00.748067Z"}, {"uuid": "d09b6551-bab9-4c25-b8f2-8edef60701dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8347", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lvac47k7nz2g", "content": "", "creation_timestamp": "2025-07-31T04:24:28.353099Z"}, {"uuid": "35c65933-01aa-4df5-a8a7-2833fa5056d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvanguhdel2e", "content": "", "creation_timestamp": "2025-07-31T07:47:17.068488Z"}, {"uuid": "a828702d-804b-40f3-b261-803ce348cb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvanptdwil2p", "content": "", "creation_timestamp": "2025-07-31T07:52:17.676407Z"}, {"uuid": "dfea8b03-ee6e-4956-8574-75dcf173bc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8374", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvaxs46ekj26", "content": "", "creation_timestamp": "2025-07-31T10:52:31.584347Z"}, {"uuid": "0e121cd4-63d0-4562-83df-aa0566a2a993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8311", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly734qpyxg2o", "content": "", "creation_timestamp": "2025-09-06T21:02:34.281390Z"}, {"uuid": "c30fd572-0e8f-407e-8e1d-491ede1a97a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvg7zj3t3d2k", "content": "", "creation_timestamp": "2025-08-02T13:03:08.627104Z"}, {"uuid": "38c416ac-e7e4-472d-9bf0-84fcf9d48c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvgbur5y462a", "content": "", "creation_timestamp": "2025-08-02T13:36:16.665952Z"}, {"uuid": "66ef6dbf-263d-4ff8-9c8a-f0ea85640f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvlah2kdg62q", "content": "", "creation_timestamp": "2025-08-04T12:54:01.732529Z"}, {"uuid": "9c873495-1219-4199-97d6-a81479198506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvnlbxbq6t2s", "content": "", "creation_timestamp": "2025-08-05T11:13:21.975318Z"}, {"uuid": "9efcf948-f811-4ec5-80bb-bb548fcee692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8393", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-06", "content": "", "creation_timestamp": "2025-08-07T10:00:00.000000Z"}, {"uuid": "198a19db-dd0d-427f-97cb-8567254bd426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvw352u45y2e", "content": "", "creation_timestamp": "2025-08-08T20:18:14.873521Z"}, {"uuid": "2f376d2c-7509-4f5d-af02-245284f77022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8356", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvx3qbxvse2j", "content": "", "creation_timestamp": "2025-08-09T06:01:40.541080Z"}, {"uuid": "c4140c3b-a44f-4b7d-b73d-8cdb39bb7fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3mu5rz2qc2q", "content": "", "creation_timestamp": "2025-10-20T12:50:35.059619Z"}, {"uuid": "237c2a70-b887-4c62-a98f-02ce6a27aab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8393", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lw23bzezrd2k", "content": "", "creation_timestamp": "2025-08-10T10:31:41.048158Z"}, {"uuid": "67ef530b-fd9c-4d45-beb8-601a75214d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5itfrglgv2s", "content": "", "creation_timestamp": "2025-11-13T09:16:53.775344Z"}, {"uuid": "73673d0f-8df1-4544-ab68-8a8e42b20237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8324", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m5l27l6clb2b", "content": "", "creation_timestamp": "2025-11-14T06:23:59.237436Z"}, {"uuid": "d1b1f060-d18e-483d-a2fc-e6bd860acdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw4okhoabkr2", "content": "", "creation_timestamp": "2025-08-11T11:21:56.556581Z"}, {"uuid": "737fffc2-a7b8-4b37-a2e3-7e51a077cc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw4okhoabkr2", "content": "", "creation_timestamp": "2025-08-11T11:21:56.664401Z"}, {"uuid": "b3522882-11a7-4e34-97db-979add55b9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8355", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lw4plysvmlm2", "content": "", "creation_timestamp": "2025-08-11T11:40:37.388336Z"}, {"uuid": "b45d5b13-7abc-47d9-8aab-d2ecf9101c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lw4plysvmlm2", "content": "", "creation_timestamp": "2025-08-11T11:40:37.663080Z"}, {"uuid": "0f8d45b3-2917-47fb-a259-c96e15b1b39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/paxioncyber.bsky.social/post/3lw4vil66k22m", "content": "", "creation_timestamp": "2025-08-11T13:26:09.410443Z"}, {"uuid": "f98cc4be-533f-4b99-ae76-b1901bf306b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/paxioncyber.bsky.social/post/3lw4vil66k22m", "content": "", "creation_timestamp": "2025-08-11T13:26:09.493747Z"}, {"uuid": "794a1582-cd36-48ff-af72-bc1877c971ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lw5752gqbk2r", "content": "", "creation_timestamp": "2025-08-11T16:18:32.272493Z"}, {"uuid": "826a45a8-649e-41e6-8b9d-973b02cc6fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lw5752gqbk2r", "content": "", "creation_timestamp": "2025-08-11T16:18:32.368255Z"}, {"uuid": "3f90e7b0-2526-4a13-b7a0-1b47aa6a9917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw5jzxslko42", "content": "", "creation_timestamp": "2025-08-11T19:33:58.330167Z"}, {"uuid": "1c05b1f3-0a5d-4480-8189-d06ee6173571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw5jzxslko42", "content": "", "creation_timestamp": "2025-08-11T19:33:58.406197Z"}, {"uuid": "3758d6dc-b4c0-4396-b3f7-61bdd19fb1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115012331032273620", "content": "", "creation_timestamp": "2025-08-11T21:48:19.796604Z"}, {"uuid": "f8989613-844a-4464-b8b1-e81309456ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw6lxy6l7nc2", "content": "", "creation_timestamp": "2025-08-12T05:41:07.007255Z"}, {"uuid": "c45a5d2f-545c-444c-a9a8-787a483d6b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw6lxy6l7nc2", "content": "", "creation_timestamp": "2025-08-12T05:41:07.112083Z"}, {"uuid": "aef10b2a-1132-4b15-8ce8-dae045a0d9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8314", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lw6tshxxzo2z", "content": "", "creation_timestamp": "2025-08-12T08:01:01.060976Z"}, {"uuid": "2c8356f4-5a99-4b45-bd70-af62219e7097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8351", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115645136498784264", "content": "", "creation_timestamp": "2025-12-01T15:59:04.547936Z"}, {"uuid": "15add373-3901-48ee-a5ae-f3f6e9d8f7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw75ythalcp2", "content": "", "creation_timestamp": "2025-08-12T11:05:46.134536Z"}, {"uuid": "916d447a-d989-4603-832e-d430d0bcd74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw75ythalcp2", "content": "", "creation_timestamp": "2025-08-12T11:05:46.232155Z"}, {"uuid": "3733adb9-4e16-4f35-b6a4-0d2a9ad7fc65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8310", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115016338592740347", "content": "", "creation_timestamp": "2025-08-12T14:47:30.398327Z"}, {"uuid": "46f1c42f-0fbd-4944-8a9a-70e9d8833fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw7ylynmne62", "content": "", "creation_timestamp": "2025-08-12T19:01:24.527567Z"}, {"uuid": "8d8d4704-edf1-4f2e-9039-c2afa0baa932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lw7ylynmne62", "content": "", "creation_timestamp": "2025-08-12T19:01:24.611728Z"}, {"uuid": "2da750a1-3d85-44d4-8429-bd1ff6edfd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwabdehiqak2", "content": "", "creation_timestamp": "2025-08-12T21:42:12.993588Z"}, {"uuid": "1d91045f-b20e-4077-ab14-982be8bdba1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwabdehiqak2", "content": "", "creation_timestamp": "2025-08-12T21:42:13.079747Z"}, {"uuid": "86ea92a8-ffb1-4cdc-891b-2c4af6e3ed37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwb7sou6oel2", "content": "", "creation_timestamp": "2025-08-13T06:41:31.237981Z"}, {"uuid": "0b1a8a88-a79f-47b8-8de2-c14449a580ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwb7sou6oel2", "content": "", "creation_timestamp": "2025-08-13T06:41:31.333399Z"}, {"uuid": "644c2610-282e-4b38-8d62-b82df02d7d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbis2guw3f2", "content": "", "creation_timestamp": "2025-08-13T09:23:52.217307Z"}, {"uuid": "29b67541-dedf-4b4d-8a1f-da2f4d964121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbis2guw3f2", "content": "", "creation_timestamp": "2025-08-13T09:23:52.316800Z"}, {"uuid": "f9976856-360e-48fb-87e3-50d536201579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbubqy4xi32", "content": "", "creation_timestamp": "2025-08-13T12:48:23.193191Z"}, {"uuid": "ae38a3ae-9679-486a-bec9-d00caf8200c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwbubqy4xi32", "content": "", "creation_timestamp": "2025-08-13T12:48:23.305420Z"}, {"uuid": "9060e41f-dfd0-485f-9183-840c505159c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lwc37fuqrq2e", "content": "", "creation_timestamp": "2025-08-13T14:51:30.593276Z"}, {"uuid": "20825f44-7de1-4f6e-b927-31f4087397e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lwc37fuqrq2e", "content": "", "creation_timestamp": "2025-08-13T14:51:30.694097Z"}, {"uuid": "eb0bbe7c-a5f3-4f0b-b869-1a9dc4d3f418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwfvbxi7n22k", "content": "", "creation_timestamp": "2025-08-15T03:16:13.561319Z"}, {"uuid": "8f1bb42a-9c02-4804-a250-dc0e21c99818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwfygn22fz2c", "content": "", "creation_timestamp": "2025-08-15T04:12:30.605029Z"}, {"uuid": "e9478c2c-b398-4a20-bd3b-1b91637103bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8385", "type": "seen", "source": "https://gist.github.com/Darkcrai86/38ed2fca672269a2fb08e585bc239c6a", "content": "", "creation_timestamp": "2025-10-31T08:41:59.000000Z"}, {"uuid": "3937f4b2-1a28-41ab-a24e-f58094494b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwmrx6xcns2x", "content": "", "creation_timestamp": "2025-08-17T21:05:13.597888Z"}, {"uuid": "17b79461-5cc3-4104-8bb6-920aad8e18ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwmrx6xcns2x", "content": "", "creation_timestamp": "2025-08-17T21:05:13.719168Z"}, {"uuid": "9ca6d354-4678-470d-a78c-9d9ffe689cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lwnwk7v5n52g", "content": "", "creation_timestamp": "2025-08-18T08:00:01.548328Z"}, {"uuid": "ff58edfd-4dbb-4b9c-86cb-cb856556a135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lwnwk7v5n52g", "content": "", "creation_timestamp": "2025-08-18T08:00:01.665591Z"}, {"uuid": "269106ef-56cb-43a8-99cb-4294d918e1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwpuhvmi2s2i", "content": "", "creation_timestamp": "2025-08-19T02:28:16.209266Z"}, {"uuid": "e038e4b5-a7c9-4cc8-ae07-cb2f0520d097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwti5r2rp22i", "content": "", "creation_timestamp": "2025-08-20T12:58:31.798527Z"}, {"uuid": "7b531479-6ece-4696-89b1-250c91c242db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwti5r2rp22i", "content": "", "creation_timestamp": "2025-08-20T12:58:31.950969Z"}, {"uuid": "ddb805d0-1d31-47ce-9c88-c00c8d65fdbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8309", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115062251535912421", "content": "", "creation_timestamp": "2025-08-20T17:23:46.090172Z"}, {"uuid": "4491f7d0-e65f-45ee-8c3d-5d980d2ffbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwublo5aup25", "content": "", "creation_timestamp": "2025-08-20T20:33:39.495579Z"}, {"uuid": "dfd4731e-31b0-4cae-ae39-348ffd139051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8375", "type": "seen", "source": "https://bsky.app/profile/micr0.wetdry.world.ap.brid.gy/post/3m5lzsmcuy2r2", "content": "", "creation_timestamp": "2025-11-14T15:49:35.612301Z"}, {"uuid": "08ec0dad-ba24-453c-9789-eb5237b8734d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8341", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lx4pt5cw6g2a", "content": "", "creation_timestamp": "2025-08-24T05:09:41.439858Z"}, {"uuid": "e528b469-231e-4a55-9bbf-e38f18443838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8324", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eaxeqpzix2", "content": "", "creation_timestamp": "2025-11-11T13:37:23.281876Z"}, {"uuid": "53d094b7-5e22-427e-b49c-a751293f0811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5ebo5dfn72s", "content": "", "creation_timestamp": "2025-11-11T13:48:48.205651Z"}, {"uuid": "148096bc-08c5-4a4e-81d8-2023a69df095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8324", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5ecluk7hjx2", "content": "", "creation_timestamp": "2025-11-11T14:06:19.596939Z"}, {"uuid": "e64c86ce-c829-40fb-8646-4c00a5fb861e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8385", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4ibynnci22s", "content": "", "creation_timestamp": "2025-10-31T10:40:08.103613Z"}, {"uuid": "cfdd1074-6704-4cbd-ad44-a935021ef8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8383", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4ickkjgct2x", "content": "", "creation_timestamp": "2025-10-31T10:50:08.881348Z"}, {"uuid": "9d40e3a0-2bb3-425a-aa7c-2806ed7e869e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8324", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ad1dcae00c6f4ff8db43aa2d11fc9641", "content": "", "creation_timestamp": "2025-11-11T14:27:02.000000Z"}, {"uuid": "5631a16e-e47c-46ff-8f98-440d72693887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8359", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2hynm5hx326", "content": "", "creation_timestamp": "2025-10-05T21:02:34.394691Z"}, {"uuid": "ca938060-e4d7-4a08-88c7-3779cef82592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8354", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-907/", "content": "", "creation_timestamp": "2025-09-23T03:00:00.000000Z"}, {"uuid": "5a3b321b-5b21-4865-a89a-b7c6ef9fe9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8386", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-02", "content": "", "creation_timestamp": "2025-11-13T11:00:00.000000Z"}, {"uuid": "11ae1d55-c130-4c91-92c2-f00928c20c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8301", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxva44zik32j", "content": "", "creation_timestamp": "2025-09-02T23:04:55.849350Z"}, {"uuid": "1405c038-f119-457b-99c1-bfefc09f2a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxvac43s2p2z", "content": "", "creation_timestamp": "2025-09-02T23:08:16.444485Z"}, {"uuid": "2366e1e9-e883-4f31-b62b-8dc9292708a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxvbucc3us2n", "content": "", "creation_timestamp": "2025-09-02T23:36:20.703939Z"}, {"uuid": "a32a81f0-0ea8-4768-a221-6220e8b6ce3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8300", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-883/", "content": "", "creation_timestamp": "2025-09-02T03:00:00.000000Z"}, {"uuid": "acf307bc-9ad8-4d79-96a9-573788437d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8301", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-880/", "content": "", "creation_timestamp": "2025-09-02T03:00:00.000000Z"}, {"uuid": "3798831a-a3cb-425a-9e83-6730185d3473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8302", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-879/", "content": "", "creation_timestamp": "2025-09-02T03:00:00.000000Z"}, {"uuid": "a3079e9a-ea00-4987-9eae-51deb087b0e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxzgzovyih2t", "content": "", "creation_timestamp": "2025-09-04T15:19:29.166754Z"}, {"uuid": "4c3fc2be-0332-401f-86f2-22b7b35b85f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8351", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m7j3ik5ch22j", "content": "", "creation_timestamp": "2025-12-08T22:32:01.590570Z"}, {"uuid": "40cc74d9-00cc-430d-a2a8-aa044c8fd2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8350", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7woxkl6j25", "content": "", "creation_timestamp": "2026-02-19T15:43:18.737952Z"}, {"uuid": "cbaad039-771c-4e80-b909-9b123734f081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8307", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwbr7nbsn2o", "content": "", "creation_timestamp": "2026-01-08T15:19:13.055987Z"}, {"uuid": "da576ffd-db49-46da-bd17-f6a05c99fb47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwcqrybmh2o", "content": "", "creation_timestamp": "2026-01-08T15:36:52.578586Z"}, {"uuid": "ebf83d03-6253-4631-8b09-e5fd7bf3cb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU90253343/", "content": "", "creation_timestamp": "2026-04-07T21:00:00.000000Z"}, {"uuid": "f362d05b-16dd-4850-a9fc-92eb658a02b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU90253343/", "content": "", "creation_timestamp": "2026-04-07T21:00:00.000000Z"}, {"uuid": "daaeb6d3-97ca-4ad0-9801-33de1e126220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "published-proof-of-concept", "source": "https://t.me/cKure/15218", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "creation_timestamp": "2025-08-20T11:13:15.000000Z"}, {"uuid": "e52f93fc-450b-4a9e-bcd3-afb185742b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "published-proof-of-concept", "source": "https://t.me/cKure/15218", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "creation_timestamp": "2025-08-20T11:13:15.000000Z"}, {"uuid": "baefd157-18ad-4d62-9873-5abb4bedb2fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8359", "type": "seen", "source": "https://t.me/canyoupwnme/6921", "content": "CVE-2025-8359 - AdForest <= 6.0.9 - Authentication Bypass to Admin\nhttps://cvefeed.io/vuln/detail/CVE-2025-8359", "creation_timestamp": "2025-09-06T04:11:41.000000Z"}, {"uuid": "8371e4d9-c79b-4b67-8989-b45d2b5f6e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8359", "type": "published-proof-of-concept", "source": "Telegram/5dvJF96yBXjPewS7k5WJKLC_ZhbeHOnhCA-HoTWtyQRrCKI", "content": "", "creation_timestamp": "2025-10-02T21:00:04.000000Z"}, {"uuid": "40a3f968-968d-4a7c-b537-2fe1d3b5a651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8359", "type": "published-proof-of-concept", "source": "Telegram/dcT1qJrILXvh-_ErI1kQhRlAL5WhQqQ5zTgiNHm0Cg4Oe9Y", "content": "", "creation_timestamp": "2025-10-02T19:00:08.000000Z"}, {"uuid": "bf18830b-8e25-48e3-ab4f-dd82da555941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-08-01T19:00:03.688643Z"}, {"uuid": "819d0751-3fbf-44c7-8b80-1167c6079434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-08-01T19:00:03.749436Z"}, {"uuid": "a91ba53f-d15d-4b50-966c-3fb332ddd557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-08-02T00:00:22.833612Z"}, {"uuid": "1b67d225-d615-4fc2-950a-06cb6c467324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-08-02T00:00:22.883203Z"}, {"uuid": "6a88e6a6-a8b0-46af-905a-73102811f5f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8325", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mll3n2jvlm2e", "content": "CVE-2025-8325 - Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations\nCVE ID : CVE-2025-8325\n \n Published : May 11, 2026, 10:16 a.m. | 14\u00a0minutes ago\n \n Description : The software fails to enforce role-based access controls for certai...", "creation_timestamp": "2026-05-11T10:42:10.340125Z"}, {"uuid": "24754944-1cab-4799-83e9-17056258408b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://t.me/purp_sec/1029", "content": "\ud83d\udd12 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Horizon3.ai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox FreeFlow Core\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u0421\u043e\u0444\u0442 Horizon3.ai \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0435\u0433\u043e \u0441\u0440\u0435\u0434\u0435 \u0434\u0430\u0436\u0435 \u043d\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 callbacks \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 XXE-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u0448\u0438\u043b\u0438 \u0433\u043b\u0443\u0431\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432\u044b\u0448\u043b\u0438 \u043d\u0430 Xerox FreeFlow Core \u0438 \u0441\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004. \n\n\u041f\u0440\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 XML-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043a\u043e\u0434\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 JMF-\u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0434\u0432\u0430 \u0431\u0430\u0433\u0430:\n\n\ud83d\udd35 CVE-2025-8355 (XXE Injection) \u2014 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 JMF Client Xerox FreeFlow Core, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004 \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JMF, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f XML-\u043f\u0430\u0440\u0441\u0435\u0440, \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0438 \u043d\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 XML External Entities. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\ud83d\udd35 CVE-2025-8356 (Path Traversal) \u2014 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 JMF-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0438, \u0447\u0442\u043e \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 path traversal. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FreeFlow Core. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #Xerox", "creation_timestamp": "2026-08-14T16:00:09.112620Z"}, {"uuid": "f2835a1e-2fa6-4e79-8987-2b193d3dbaed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://t.me/purp_sec/1030", "content": "\u0412\u043e\u0442 \u044d\u0442\u0438 \u0431\u0430\u0433\u0438, \u043a\u0441\u0442\u0430\u0442\u0438, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a: \u0441\u043d\u0430\u0447\u0430\u043b\u0430 XXE \u2014 \u043f\u043e\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u2014 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 Path Traversal \u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \ud83d\ude0f\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430\u044f:\n[\u0410\u0442\u0430\u043a\u0435\u0440] \n   \u2193 (XXE payload)\n[\u0421\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 4004] \u2014 XXE \u2192 SSRF \n   \u2193 (\u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 Path Traversal endpoint)\n[\u041e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432] \u2014 Path Traversal \u2192 \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0432 webroot\n   \u2193 (HTTP GET)\n[\u0412\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b FreeFlow Core] \u2014 \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u2192 RCE\n\n\n\u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-8355. \u0410\u0442\u0430\u043a\u0443\u0435\u043c JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0430\u0440\u0441\u0438\u0442 JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 XML \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 XML External Entities. \u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c XML \u0441  \u0438 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0443\u0449\u043d\u043e\u0441\u0442\u044c\u044e, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 HTTP-\u0441\u0435\u0440\u0432\u0438\u0441 Xerox \u0438\u043b\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c SSRF-\u0434\u043e\u0441\u0442\u0443\u043f. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u043d\u0430\u0441\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0434 CVE-2025-8356. \u0424\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043f\u043e\u043b\u0435\u043c, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u043f\u0443\u0442\u044c \u0432\u0440\u043e\u0434\u0435 ../../../../webapps/ROOT/shell.jsp, \u0438 \u0432 \u0442\u0435\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u043c \u043a\u043e\u0434 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430. \u0424\u0430\u0439\u043b \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432\u0435\u0431-\u043a\u0430\u0442\u0430\u043b\u043e\u0433. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b Xerox FreeFlow Core (\u0443 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043e\u0442\u0434\u0430\u0447\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432) \u043f\u043e URL \u0432\u0438\u0434\u0430 https://victim.example.com/shell.jsp. \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0434\u0430\u0441\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u043e\u0434 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n#red_team", "creation_timestamp": "2026-08-14T16:00:07.291322Z"}, {"uuid": "8327c718-3deb-4a65-a64b-1ffc38c2cfdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://t.me/purp_sec/1030", "content": "\u0412\u043e\u0442 \u044d\u0442\u0438 \u0431\u0430\u0433\u0438, \u043a\u0441\u0442\u0430\u0442\u0438, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a: \u0441\u043d\u0430\u0447\u0430\u043b\u0430 XXE \u2014 \u043f\u043e\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u2014 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 Path Traversal \u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \ud83d\ude0f\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430\u044f:\n[\u0410\u0442\u0430\u043a\u0435\u0440] \n   \u2193 (XXE payload)\n[\u0421\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 4004] \u2014 XXE \u2192 SSRF \n   \u2193 (\u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 Path Traversal endpoint)\n[\u041e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432] \u2014 Path Traversal \u2192 \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0432 webroot\n   \u2193 (HTTP GET)\n[\u0412\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b FreeFlow Core] \u2014 \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u2192 RCE\n\n\n\u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-8355. \u0410\u0442\u0430\u043a\u0443\u0435\u043c JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0430\u0440\u0441\u0438\u0442 JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 XML \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 XML External Entities. \u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c XML \u0441  \u0438 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0443\u0449\u043d\u043e\u0441\u0442\u044c\u044e, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 HTTP-\u0441\u0435\u0440\u0432\u0438\u0441 Xerox \u0438\u043b\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c SSRF-\u0434\u043e\u0441\u0442\u0443\u043f. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u043d\u0430\u0441\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0434 CVE-2025-8356. \u0424\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043f\u043e\u043b\u0435\u043c, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u043f\u0443\u0442\u044c \u0432\u0440\u043e\u0434\u0435 ../../../../webapps/ROOT/shell.jsp, \u0438 \u0432 \u0442\u0435\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u043c \u043a\u043e\u0434 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430. \u0424\u0430\u0439\u043b \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432\u0435\u0431-\u043a\u0430\u0442\u0430\u043b\u043e\u0433. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b Xerox FreeFlow Core (\u0443 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043e\u0442\u0434\u0430\u0447\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432) \u043f\u043e URL \u0432\u0438\u0434\u0430 https://victim.example.com/shell.jsp. \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0434\u0430\u0441\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u043e\u0434 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n#red_team", "creation_timestamp": "2026-08-14T16:00:07.324576Z"}, {"uuid": "7b4369bf-6303-4c62-b5b6-aff70e3df898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://t.me/purp_sec/1029", "content": "\ud83d\udd12 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Horizon3.ai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox FreeFlow Core\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u0421\u043e\u0444\u0442 Horizon3.ai \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0435\u0433\u043e \u0441\u0440\u0435\u0434\u0435 \u0434\u0430\u0436\u0435 \u043d\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 callbacks \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 XXE-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u0448\u0438\u043b\u0438 \u0433\u043b\u0443\u0431\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432\u044b\u0448\u043b\u0438 \u043d\u0430 Xerox FreeFlow Core \u0438 \u0441\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004. \n\n\u041f\u0440\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 XML-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043a\u043e\u0434\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 JMF-\u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0434\u0432\u0430 \u0431\u0430\u0433\u0430:\n\n\ud83d\udd35 CVE-2025-8355 (XXE Injection) \u2014 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 JMF Client Xerox FreeFlow Core, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004 \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JMF, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f XML-\u043f\u0430\u0440\u0441\u0435\u0440, \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0438 \u043d\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 XML External Entities. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\ud83d\udd35 CVE-2025-8356 (Path Traversal) \u2014 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 JMF-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0438, \u0447\u0442\u043e \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 path traversal. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FreeFlow Core. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #Xerox", "creation_timestamp": "2026-08-14T16:00:09.157734Z"}, {"uuid": "1fa6c723-5302-451b-984e-f41de36cd79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1029", "content": "\ud83d\udd12 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Horizon3.ai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox FreeFlow Core\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u0421\u043e\u0444\u0442 Horizon3.ai \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0435\u0433\u043e \u0441\u0440\u0435\u0434\u0435 \u0434\u0430\u0436\u0435 \u043d\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 callbacks \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 XXE-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u0448\u0438\u043b\u0438 \u0433\u043b\u0443\u0431\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432\u044b\u0448\u043b\u0438 \u043d\u0430 Xerox FreeFlow Core \u0438 \u0441\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004. \n\n\u041f\u0440\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 XML-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043a\u043e\u0434\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 JMF-\u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0434\u0432\u0430 \u0431\u0430\u0433\u0430:\n\n\ud83d\udd35 CVE-2025-8355 (XXE Injection) \u2014 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 JMF Client Xerox FreeFlow Core, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004 \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JMF, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f XML-\u043f\u0430\u0440\u0441\u0435\u0440, \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0438 \u043d\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 XML External Entities. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\ud83d\udd35 CVE-2025-8356 (Path Traversal) \u2014 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 JMF-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0438, \u0447\u0442\u043e \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 path traversal. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FreeFlow Core. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #Xerox", "creation_timestamp": "2026-08-15T00:00:14.116124Z"}, {"uuid": "009a9fa8-9788-4b22-97df-ac06d788b49b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1029", "content": "\ud83d\udd12 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Horizon3.ai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox FreeFlow Core\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u0421\u043e\u0444\u0442 Horizon3.ai \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e XXE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0435\u0433\u043e \u0441\u0440\u0435\u0434\u0435 \u0434\u0430\u0436\u0435 \u043d\u0435 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 callbacks \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 XXE-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u0448\u0438\u043b\u0438 \u0433\u043b\u0443\u0431\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432\u044b\u0448\u043b\u0438 \u043d\u0430 Xerox FreeFlow Core \u0438 \u0441\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004. \n\n\u041f\u0440\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 XML-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043a\u043e\u0434\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 JMF-\u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0434\u0432\u0430 \u0431\u0430\u0433\u0430:\n\n\ud83d\udd35 CVE-2025-8355 (XXE Injection) \u2014 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 JMF Client Xerox FreeFlow Core, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004 \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JMF, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f XML-\u043f\u0430\u0440\u0441\u0435\u0440, \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0438 \u043d\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 XML External Entities. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\ud83d\udd35 CVE-2025-8356 (Path Traversal) \u2014 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 JMF-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0438, \u0447\u0442\u043e \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 path traversal. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FreeFlow Core. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #Xerox", "creation_timestamp": "2026-08-15T00:00:14.153966Z"}, {"uuid": "3586994d-2c0e-42f3-ade3-a928380119c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1030", "content": "\u0412\u043e\u0442 \u044d\u0442\u0438 \u0431\u0430\u0433\u0438, \u043a\u0441\u0442\u0430\u0442\u0438, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a: \u0441\u043d\u0430\u0447\u0430\u043b\u0430 XXE \u2014 \u043f\u043e\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u2014 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 Path Traversal \u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \ud83d\ude0f\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430\u044f:\n[\u0410\u0442\u0430\u043a\u0435\u0440] \n   \u2193 (XXE payload)\n[\u0421\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 4004] \u2014 XXE \u2192 SSRF \n   \u2193 (\u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 Path Traversal endpoint)\n[\u041e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432] \u2014 Path Traversal \u2192 \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0432 webroot\n   \u2193 (HTTP GET)\n[\u0412\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b FreeFlow Core] \u2014 \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u2192 RCE\n\n\n\u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-8355. \u0410\u0442\u0430\u043a\u0443\u0435\u043c JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0430\u0440\u0441\u0438\u0442 JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 XML \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 XML External Entities. \u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c XML \u0441  \u0438 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0443\u0449\u043d\u043e\u0441\u0442\u044c\u044e, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 HTTP-\u0441\u0435\u0440\u0432\u0438\u0441 Xerox \u0438\u043b\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c SSRF-\u0434\u043e\u0441\u0442\u0443\u043f. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u043d\u0430\u0441\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0434 CVE-2025-8356. \u0424\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043f\u043e\u043b\u0435\u043c, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u043f\u0443\u0442\u044c \u0432\u0440\u043e\u0434\u0435 ../../../../webapps/ROOT/shell.jsp, \u0438 \u0432 \u0442\u0435\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u043c \u043a\u043e\u0434 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430. \u0424\u0430\u0439\u043b \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432\u0435\u0431-\u043a\u0430\u0442\u0430\u043b\u043e\u0433. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b Xerox FreeFlow Core (\u0443 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043e\u0442\u0434\u0430\u0447\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432) \u043f\u043e URL \u0432\u0438\u0434\u0430 https://victim.example.com/shell.jsp. \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0434\u0430\u0441\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u043e\u0434 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n#red_team", "creation_timestamp": "2026-08-15T00:00:14.240058Z"}, {"uuid": "6f1674ca-cd87-481d-81b6-28f0ae67c25f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1030", "content": "\u0412\u043e\u0442 \u044d\u0442\u0438 \u0431\u0430\u0433\u0438, \u043a\u0441\u0442\u0430\u0442\u0438, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a: \u0441\u043d\u0430\u0447\u0430\u043b\u0430 XXE \u2014 \u043f\u043e\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u2014 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 Path Traversal \u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \ud83d\ude0f\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430\u044f:\n[\u0410\u0442\u0430\u043a\u0435\u0440] \n   \u2193 (XXE payload)\n[\u0421\u0435\u0440\u0432\u0438\u0441 JMF Client \u043d\u0430 4004] \u2014 XXE \u2192 SSRF \n   \u2193 (\u0437\u0430\u043f\u0440\u043e\u0441 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 Path Traversal endpoint)\n[\u041e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432] \u2014 Path Traversal \u2192 \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0432 webroot\n   \u2193 (HTTP GET)\n[\u0412\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b FreeFlow Core] \u2014 \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u2192 RCE\n\n\n\u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-8355. \u0410\u0442\u0430\u043a\u0443\u0435\u043c JMF Client \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 4004, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0430\u0440\u0441\u0438\u0442 JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 XML \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 XML External Entities. \u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c XML \u0441  \u0438 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0443\u0449\u043d\u043e\u0441\u0442\u044c\u044e, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 HTTP-\u0441\u0435\u0440\u0432\u0438\u0441 Xerox \u0438\u043b\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c SSRF-\u0434\u043e\u0441\u0442\u0443\u043f. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u043d\u0430\u0441\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0434 CVE-2025-8356. \u0424\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c JMF-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043f\u043e\u043b\u0435\u043c, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u043f\u0443\u0442\u044c \u0432\u0440\u043e\u0434\u0435 ../../../../webapps/ROOT/shell.jsp, \u0438 \u0432 \u0442\u0435\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u043c \u043a\u043e\u0434 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430. \u0424\u0430\u0439\u043b \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432\u0435\u0431-\u043a\u0430\u0442\u0430\u043b\u043e\u0433. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u043f\u043e\u0440\u0442\u0430\u043b Xerox FreeFlow Core (\u0443 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043e\u0442\u0434\u0430\u0447\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432) \u043f\u043e URL \u0432\u0438\u0434\u0430 https://victim.example.com/shell.jsp. \u0412\u0435\u0431\u0448\u0435\u043b\u043b \u0434\u0430\u0441\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u043e\u0434 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n#red_team", "creation_timestamp": "2026-08-15T00:00:14.281438Z"}, {"uuid": "54bd71f7-3922-4639-9475-c5f58c5abc06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8341", "type": "seen", "source": "Telegram/ksvA3OqDvQ0sGxWWZZaZcFjFP4QFEHSuGzqHoPwvbQuk2nE", "content": "", "creation_timestamp": "2026-07-20T19:00:04.307868Z"}, {"uuid": "68f6df88-95b5-48a2-8cdb-855b5b90756a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8341", "type": "seen", "source": "Telegram/ksvA3OqDvQ0sGxWWZZaZcFjFP4QFEHSuGzqHoPwvbQuk2nE", "content": "", "creation_timestamp": "2026-07-21T00:00:19.816969Z"}, {"uuid": "20673cac-654c-4f26-a282-263519583e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-07-29T12:01:56.930344Z"}, {"uuid": "f2554831-86aa-4f2f-bda1-66793d48e2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-07-29T12:01:56.978253Z"}, {"uuid": "dc74134a-8835-4876-8b7f-cf232314b219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8355", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-07-30T00:02:07.708892Z"}, {"uuid": "6e8b01c9-2417-4267-8855-e8cc5c8ff547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8356", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-07-30T00:02:07.861105Z"}, {"uuid": "b29a92a1-23c9-4fa9-81d9-4ccde8722b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8324", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2380", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zoho Analytics Plus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0431\u0438\u0437\u043d\u0435\u0441-\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Zoho Analytics Plus, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-8324, \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u0438\u0436\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 6170. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-14 09:51 | Author: Vulner Queen\n\n#analytics #zoho #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-zoho-analytics-plus-pozvolyaet-vypolnyat-proizvolnye-sql-zaprosy-bez-autentifikatsii_16334", "creation_timestamp": "2026-09-09T05:00:12.011263Z"}, {"uuid": "f9d30d00-cb3b-42a5-a9ab-89371599a29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8324", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2380", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zoho Analytics Plus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0431\u0438\u0437\u043d\u0435\u0441-\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Zoho Analytics Plus, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-8324, \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u0438\u0436\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 6170. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-14 09:51 | Author: Vulner Queen\n\n#analytics #zoho #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-zoho-analytics-plus-pozvolyaet-vypolnyat-proizvolnye-sql-zaprosy-bez-autentifikatsii_16334", "creation_timestamp": "2026-09-10T00:00:41.568139Z"}]}