{"vulnerability": "CVE-2025-4318", "sightings": [{"uuid": "1a833938-90c3-4b75-b5bc-18001d403b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lr5ho4c5vc2d", "content": "", "creation_timestamp": "2025-06-09T03:45:11.887256Z"}, {"uuid": "e4329307-4c08-42f0-8378-2830de4bcf17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqxkhlsakb2c", "content": "", "creation_timestamp": "2025-06-06T19:19:16.650683Z"}, {"uuid": "8abf5f1c-cad4-48e7-adc3-e0314823d145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3loh4devnfc2t", "content": "", "creation_timestamp": "2025-05-05T19:33:23.723742Z"}, {"uuid": "3511dacd-80a9-4e8d-8188-9702da92b8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114456899706505787", "content": "", "creation_timestamp": "2025-05-05T19:34:49.991888Z"}, {"uuid": "fb04f243-e834-4f79-970c-a6db25ed450c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qrbs6h2h", "content": "", "creation_timestamp": "2025-05-05T20:16:43.887671Z"}, {"uuid": "9841bcdf-9b36-4256-8939-c059334b2666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lojayaw35c26", "content": "", "creation_timestamp": "2025-05-06T16:01:57.983805Z"}, {"uuid": "edf63372-e5a3-42f0-ae8f-3132e553b96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lokmbih5um2i", "content": "", "creation_timestamp": "2025-05-07T04:56:38.764659Z"}, {"uuid": "29d68b53-38d3-4ede-9d8d-c82f193281f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3loks25u7bc2h", "content": "", "creation_timestamp": "2025-05-07T06:39:55.851007Z"}, {"uuid": "421e179c-ea85-48bb-b26d-c870d69e2e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lqzafn6jjc22", "content": "", "creation_timestamp": "2025-06-07T11:24:32.481519Z"}, {"uuid": "18f7a1b3-a64b-4668-8d22-19d9ff25c1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43186", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-680/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "4a33db70-e9f7-4d37-a75a-f118e2758754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43187", "type": "seen", "source": "Telegram/t8lhBZO3-b__Z9TFsvX2iDt2pY-voUNRZC7A74h2p8is6Io", "content": "", "creation_timestamp": "2026-04-02T22:19:09.000000Z"}, {"uuid": "25b910a5-f6bb-4722-b374-fc1a167d6e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43187", "type": "seen", "source": "Telegram/twQJKlobqCRh9_RL5tSZmpMuaBSUEPIk0d1syiBwJwFL7d0", "content": "", "creation_timestamp": "2026-04-02T22:19:32.000000Z"}, {"uuid": "404028e7-c592-4259-ab5d-9209f2dba244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43184", "type": "seen", "source": "Telegram/Xo_8rcU-avFPltDp1GTd2dLaGLg60r5i2jXiWyq6xqnXxSs", "content": "", "creation_timestamp": "2026-04-02T22:18:09.000000Z"}, {"uuid": "2eb6066c-c5c8-447c-8478-e968e404f3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43186", "type": "seen", "source": "Telegram/Xo_8rcU-avFPltDp1GTd2dLaGLg60r5i2jXiWyq6xqnXxSs", "content": "", "creation_timestamp": "2026-04-02T22:18:09.000000Z"}, {"uuid": "b6e73989-5b5d-4d92-89ed-99949a5d6964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7125", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435:\n\n1. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Jenkins \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 Gatling.\n\n2. \u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0435\u0432\u044f\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n3. Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Splunk SIEM.\n\n4. \u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Apache InLong \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n5. SolarWinds \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 DameWare Mini Remote Control.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u042d\u0434\u0436\u0438\u0434\u0438\u043e \u0420\u043e\u043c\u0430\u043d\u0430\u043d\u043e\u00a0\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 2014 \u0433\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435  vBulletin \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0442\u0430\u0439\u043d\u043e\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043d\u0430\u0437\u044b\u0432\u0430\u044f \u044d\u0442\u043e \u0445\u0440\u0435\u0441\u0442\u043e\u043c\u0430\u0442\u0438\u0439\u043d\u044b\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u043f\u043e\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0417\u0430\u043c\u0435\u043d\u0438\u0432 serialize() \u043d\u0430 json_encode() \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PHP Object Injection, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 base64.\n\n\u0417\u0430\u0442\u0435\u043c \u044d\u0442\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PHP unserialize(), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b.\n\n7. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Orange \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0434\u043b\u044f \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SMA 500 SonicWall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430.\n\n8. DFSEC \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 BLASTPASS \u0434\u043b\u044f iOS.\n\n9. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SecureLayer7 \u0432\u044b\u0434\u0430\u043b\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438 PoC \u0434\u043b\u044f RCE \u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 AWS Amplify Codegen, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2025-4318.\n\n10. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0cR0w \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043f\u0430\u0440\u0442\u0438\u0438 PoC-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Tenda (1,\u00a02,\u00a03,\u00a04, 5 \u0438 6).\n\n11. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u0414\u044d\u0432\u0438\u0434 \u0411\u044c\u044e\u043a\u0435\u043d\u0435\u043d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Nintendo Switch 2 \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\n\n12. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Codean Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-47934) \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenPGP.js, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\n13. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u0432\u0438\u043d\u044f\u044e\u0442 Apple\u00a0\u0432 \u043c\u043e\u043b\u0447\u0430\u043b\u0438\u0432\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 iMessage \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c.\u00a0\n\n\u0414\u0436\u043e\u0437\u0435\u0444 \u0413\u043e\u0439\u0434\u0438\u0448 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442,\u00a0\u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0443 \u043a\u043b\u044e\u0447\u0435\u0439 Secure Enclave \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430.\n\nApple \u044f\u043a\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2025-06-11T18:44:15.000000Z"}, {"uuid": "b169c7b5-cb02-4712-acf9-e13e22ceeeb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bovzhqup4waot", "content": "CVE-2026-18245 - Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react\nCVE ID : CVE-2026-18245\n \n Published : July 30, 2026, 6:13 p.m. | 25\u00a0minutes ago\n \n Description : Improper control of code generation in Amazon @aws-amplify/codegen-ui-reac...", "creation_timestamp": "2026-07-30T19:04:13.245760Z"}, {"uuid": "be0a6dde-7319-4533-8790-53c229004879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://gist.github.com/alon710/2558fd727c5d711082968032190a8577", "content": "# CVE-2025-4318: CVE-2025-4318: Remote Code Execution in AWS Amplify codegen-ui\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2025-4318\n\n## Summary\nA critical remote code execution (RCE) vulnerability exists in AWS Amplify Studio's code-generation library (@aws-amplify/codegen-ui). An authenticated attacker with permissions to create or modify component schemas can inject malicious JavaScript code into those schemas. When the Amplify CLI or the build environment processes these schemas, the unvalidated expressions are executed within the host Node.js environment, leading to full system compromise.\n\n## TL;DR\nRemote code execution vulnerability in @aws-amplify/codegen-ui allows authenticated users to execute arbitrary commands during build/generation phases via crafted component schemas.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-95\n- **Attack Vector**: Network\n- **Privileges Required**: Low\n- **User Interaction**: None\n- **Impact**: High (Confidentiality, Integrity, Availability)\n- **Exploit Status**: PoC available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- AWS Amplify Studio UI Builder\n- @aws-amplify/codegen-ui\n- @aws-amplify/codegen-ui-react\n- **@aws-amplify/codegen-ui**: >= 0.1.0, < 2.20.4 (Fixed in: `2.20.4`)\n- **@aws-amplify/codegen-ui-react**: >= 0.1.0, < 2.20.4 (Fixed in: `2.20.4`)\n\n## Mitigation\n\n- Upgrade @aws-amplify/codegen-ui to version 2.20.4 or above\n- Upgrade @aws-amplify/codegen-ui-react to version 2.20.4 or above\n- Restrict user permissions in AWS Amplify Studio to trusted personnel\n- Network-isolate the build pipelines and developer environments to prevent outbound data exfiltration\n\n**Remediation Steps:**\n1. Run 'npm list @aws-amplify/codegen-ui' to identify the active version.\n2. Execute 'npm install @aws-amplify/codegen-ui@latest @aws-amplify/codegen-ui-react@latest' in all project directories.\n3. Re-generate package lockfiles and commit updates to source control.\n4. Verify global tools with 'npm install -g @aws-amplify/cli@latest'.\n\n## References\n\n- [AWS Security Advisory AWS-2025-010](https://aws.amazon.com/security/security-bulletins/AWS-2025-010/)\n- [GitHub Security Advisory GHSA-hf3j-86p7-mfw8](https://github.com/aws-amplify/amplify-codegen-ui/security/advisories/GHSA-hf3j-86p7-mfw8)\n- [SecureLayer7 Technical Vulnerability Analysis](https://blog.securelayer7.net/cve-2025-4318-aws-amplify-rce/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-4318) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T21:31:48.139809Z"}, {"uuid": "ec01d187-7164-490a-bd63-1699f74f3fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mrvfmzfjwl23", "content": "AWS Amplify's codegen-ui-react has a critical input-validation flaw in Studio property binding (CVE-2025-4318). The package also generates component files locally via the CLI, so patching Studio isn't the whole job \u2014 committed generated components need a re-check. #software", "creation_timestamp": "2026-07-30T21:38:54.168065Z"}, {"uuid": "aa6989c2-6345-4cb8-9d0f-dcc379ffaa07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvgwjibh32j", "content": "CVE-2025-4318 - amplify studio\nAn authenticated user with component creation or modification access can run arbitrary JavaScript code. This could lead to unauthorized actions or data exposure.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#amplifystudio #awsamplify #npm #CVE #infosec", "creation_timestamp": "2026-07-30T22:02:05.972317Z"}, {"uuid": "48d40144-3241-45ec-887a-8bc386df118a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://t.me/cvedetector/24481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4318 - Amazon Amplify Studio Unvalidated Property Expression Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4318 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:19.000000Z"}]}