{"vulnerability": "CVE-2025-1299", "sightings": [{"uuid": "ec2cf1da-bb7a-41fa-9582-70015a906fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12998", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gqarxwg3z2", "content": "", "creation_timestamp": "2025-11-12T13:15:07.097405Z"}, {"uuid": "1e43b007-daa9-49ec-8876-4f5c50fa67ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12998", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gst6ofbxa2", "content": "", "creation_timestamp": "2025-11-12T14:01:58.287168Z"}, {"uuid": "6b144b22-b5f2-436c-b929-a3a57f4ae5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12995", "type": "seen", "source": "https://bsky.app/profile/blackwiremedia.bsky.social/post/3m7a5buztmq2g", "content": "", "creation_timestamp": "2025-12-05T09:10:06.633969Z"}, {"uuid": "875ce98f-53eb-4eca-9998-fd0577bbd1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvzgqebuf42g", "content": "CVE-2025-12999 - eclipse open vsx\nThe OpenVSX server builds full web addresses for downloads and other resources using information supplied in certain network headers, without checking whether that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-09-21T09:50:04.855460Z"}, {"uuid": "55c3ddfd-6c14-4649-9465-bc4838de5a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hafbptppfxukv", "content": "CVE-2025-12999 - Open VSX Cache Poisoning via Header Injection\nCVE ID : CVE-2025-12999\n \n Published : Sept. 21, 2026, 9:17 a.m. | 17\u00a0minutes ago\n \n Description : UrlUtil.getBaseUrl builds the absolute URLs in a response \u2014 download links, icons, asset and API URLs \u2014 from the X-...", "creation_timestamp": "2026-09-21T09:57:40.766750Z"}, {"uuid": "f41f022a-d292-4d63-ad17-7476f0f03915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvzhotoe4t25", "content": "\ud83d\udea8 CVE-2025-12999 \u2014 CVSS 9.1 CRITICAL\n\nUrlUtil.getBaseUrl builds the absolute URLs in a response \u2014 download links, icons, asset and API URLs \u2014 fro...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-12999\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T10:07:08.278565Z"}, {"uuid": "9911758f-c0d4-4943-bb4e-0ba487df47a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://gist.github.com/ichintu/b0ff4b467c604a3012760cd37eb92671", "content": "This threat intelligence digest highlights critical vulnerabilities, advanced threats, and AI-driven industry shifts:\n\n**Vulnerabilities:** A severe Open VSX cache poisoning flaw (CVE-2025-12999) enables extension supply chain attacks via header injection. Godot reports three memory-safety bugs in its file parsers, though maintainers dispute the security impact. BioStar\u2019s BIOS utility contains a publicly exploited write-what-where IOCTL flaw (CVE-2026-94146) amid vendor silence.\n\n**Threat Actor Activity:** GraphWorm, a China-linked APT, uses cloud-hosted Microsoft Graph/OneDrive C2 with instant credential rotation, rendering standard token revocation ineffective; mitigation requires targeting app registrations and identity telemetry. ChainScript RAT is delivered via ClickFix lures impersonating legitimate software by the Blackpoint APG.\n\n**AI Security & Workforce Trends:** Rapid model drift makes one-time security testing obsolete, necessitating continuous, automated validation. Concurrently, AI is reshaping the cybersecurity job market by automating routine tasks, consolidating leadership roles, and widening skills gaps, while exposing foundational control deficiencies and shrinking entry-level talent pipelines.", "creation_timestamp": "2026-09-21T12:02:45.117353Z"}]}