{"vulnerability": "CVE-2025-48927", "sightings": [{"uuid": "99a5183f-ba7a-4445-b21e-bff150a861d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lqaxgz2uub2z", "content": "", "creation_timestamp": "2025-05-28T19:40:21.415238Z"}, {"uuid": "cca06a06-f87f-4d26-84cd-701a1ff4f941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lsxbqyoydk2c", "content": "", "creation_timestamp": "2025-07-02T03:33:51.584884Z"}, {"uuid": "e90a8c9c-7f6c-4c25-bb14-ac41aed9b2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114586815688198231", "content": "", "creation_timestamp": "2025-05-28T18:14:10.429692Z"}, {"uuid": "19f34ab5-e91e-4ebe-9a9f-ec48dcdde37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsz4dpzfix2e", "content": "", "creation_timestamp": "2025-07-02T21:02:19.399599Z"}, {"uuid": "d77cc0ae-8b47-4231-ab66-f076e2e515af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lt6necacyk2p", "content": "", "creation_timestamp": "2025-07-05T01:50:10.601603Z"}, {"uuid": "528a875e-bc45-4198-997f-05ba053aeffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lswtudbas22p", "content": "", "creation_timestamp": "2025-07-01T23:25:13.677080Z"}, {"uuid": "d6a5785f-b94e-43b1-95c5-8eddb7a83d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4326496", "content": "", "creation_timestamp": "2025-07-01T18:24:08.518318Z"}, {"uuid": "f26104d8-8fbd-4c6f-a844-b22ad61f1358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lswimf3ga52b", "content": "", "creation_timestamp": "2025-07-01T20:03:53.316171Z"}, {"uuid": "d1ac858e-ee2e-4299-8f10-3a4c88cf32a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lt2xd5kxtt2x", "content": "", "creation_timestamp": "2025-07-03T14:37:48.642217Z"}, {"uuid": "7bd7fe8f-bc88-4002-a2f0-9f21f5894186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lswxagluab22", "content": "", "creation_timestamp": "2025-07-02T00:25:38.008986Z"}, {"uuid": "0b15a6ff-b571-4d40-925b-57f36e850e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-07-22T03:54:24.000000Z"}, {"uuid": "0467e0bd-c504-481d-926d-a6552bbb88af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/andyjabbour.bsky.social/post/3lu63mzdb3k2q", "content": "", "creation_timestamp": "2025-07-17T13:58:06.581595Z"}, {"uuid": "4d9b27fc-f86c-42d8-9663-176c56cbd519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3luapw332372p", "content": "", "creation_timestamp": "2025-07-18T15:06:23.780430Z"}, {"uuid": "f71affc2-c9be-4018-84a9-68ed5743d17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3luaq4bfost2q", "content": "", "creation_timestamp": "2025-07-18T15:09:52.672105Z"}, {"uuid": "e65c3c4a-0c7d-403c-acc4-1cf58593d4eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3luaqzum5k52f", "content": "", "creation_timestamp": "2025-07-18T15:26:24.968370Z"}, {"uuid": "587c51c1-37c5-4131-a460-f6a1622c70ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luasefr2rk2b", "content": "", "creation_timestamp": "2025-07-18T15:50:15.047221Z"}, {"uuid": "1908a8f7-727b-42ca-9bee-a092527468d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/cryptovkanews.bsky.social/post/3lubjabrkks2r", "content": "", "creation_timestamp": "2025-07-18T22:39:29.211655Z"}, {"uuid": "d921db9c-132e-4e3e-8273-44ccffd296c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3lubnk2f4hg2t", "content": "", "creation_timestamp": "2025-07-18T23:56:32.135483Z"}, {"uuid": "ddc51faf-b5a4-40a8-bb40-210726cf041a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/news-s.bsky.social/post/3lubpacgw3x2y", "content": "", "creation_timestamp": "2025-07-19T00:26:53.156917Z"}, {"uuid": "87a98eaa-88df-4792-a652-627a06463f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/star-news.bsky.social/post/3lubpxsqle72f", "content": "", "creation_timestamp": "2025-07-19T00:40:01.898058Z"}, {"uuid": "fab3a3e1-c246-4dbd-9ff3-a12f7e54e13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/zonecrypto.bsky.social/post/3lubrpdytox2h", "content": "", "creation_timestamp": "2025-07-19T01:11:05.277855Z"}, {"uuid": "4d2060a2-89d3-4de7-8d38-ad1445e59393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3lubtbgjbbg23", "content": "", "creation_timestamp": "2025-07-19T01:39:05.227722Z"}, {"uuid": "a0667bab-86c1-41d9-ae33-483c15cb3ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3lucjo23jys2j", "content": "", "creation_timestamp": "2025-07-19T08:20:01.554523Z"}, {"uuid": "cb6cf0a6-1948-43df-8a83-b7f5d63c7d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/newsbeep.bsky.social/post/3luczvfbmjl2r", "content": "", "creation_timestamp": "2025-07-19T13:10:17.602637Z"}, {"uuid": "3a4a4781-04fe-40e4-bbd2-a01e2c5319c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ludb2433322a", "content": "", "creation_timestamp": "2025-07-19T15:18:12.105834Z"}, {"uuid": "ec8309e7-d6c3-41ef-9a4e-be6ddbad7597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/zonecrypto.bsky.social/post/3luduqpwidd2h", "content": "", "creation_timestamp": "2025-07-19T21:10:51.509398Z"}, {"uuid": "f5406ecd-52ba-4b4d-aa8a-85de3c98309b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://threatintel.cc/2025/07/19/threat-actors-scanning-for-apps.html", "content": "", "creation_timestamp": "2025-07-19T14:06:55.000000Z"}, {"uuid": "e4fab8c5-dc02-4b07-b0d1-265b0a845d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3luegh7rjoz2h", "content": "", "creation_timestamp": "2025-07-20T02:27:40.439159Z"}, {"uuid": "e2d62116-310f-4b10-b36a-12a671f0db3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "37736c51-9b00-4799-a355-781c0e1b0560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-48927", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a679a049-8bbb-4160-8ed5-4b8b62fe8ff6", "content": "", "creation_timestamp": "2026-02-02T12:25:58.148611Z"}, {"uuid": "6602214e-e00c-408e-9454-c6f7e13627f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-09-09T11:53:40.000000Z"}, {"uuid": "3a92df4a-0eae-47c3-93d3-2b941d390fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:19.000000Z"}, {"uuid": "098d7411-f87a-445c-97dd-b3242c00c40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "exploited", "source": "https://t.me/BleepingComputer/22557", "content": "\u200aHackers scanning for TeleMessage Signal clone flaw exposing passwords\n\nResearchers are seeing exploitation attempts for the CVE-2025-48927 vulnerability in the TeleMessage SGNL app, which allows retrieving usernames, passwords, and other sensitive data. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-scanning-for-telemessage-signal-clone-flaw-exposing-passwords/", "creation_timestamp": "2025-07-18T16:31:58.000000Z"}, {"uuid": "bb90de38-fa07-4444-8441-3fb7d4533cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/20006", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48927\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.\n\ud83d\udccf Published: 2025-05-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T03:55:57.337Z\n\ud83d\udd17 References:\n1. https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/", "creation_timestamp": "2025-07-01T05:10:43.000000Z"}, {"uuid": "6d1adfdc-5ebe-4e1d-945c-98bdf5ac103e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48927", "type": "seen", "source": "https://t.me/true_secator/7249", "content": "\u0417\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u043c \u043d\u0435\u0434\u0435\u043b\u044e \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0438\u043c\u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432. \u0418\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e:\n\n1. \u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043e\u0442 Positive Technologies, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0431\u0430\u0437\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043a\u043e\u043d\u0441\u043e\u043b\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 317 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e \u0432\u0441\u0435\u0433\u043e \u043c\u0438\u0440\u0430, \u0430\u0433\u0440\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE, NVD, \u0441\u043e\u0446\u0441\u0435\u0442\u0438 \u0438 Telegram.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b, \u0431\u0430\u0437\u0430 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0430 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u043e\u0441\u043d\u043e\u0432\u0435, \u0447\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0445 \u0441 \u0437\u0430\u0440\u0443\u0431\u0435\u0436\u043d\u044b\u043c\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0430\u043c\u0438. \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u043e\u043b\u043d\u043e\u0442\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0412 CVE/NVD (\u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u0411\u0414\u0423 \u0424\u0421\u0422\u042d\u041a) \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u043d\u0435 \u0432\u0441\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0431\u0435\u043b\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043a\u043e\u043c\u0444\u043e\u0440\u0442\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b, \u043a\u0430\u043a \u043d\u0430 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0431\u0430\u0433\u0431\u0430\u0443\u043d\u0442\u0438-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.\n\n2. Citrix \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043e\u0431\u043b\u0430\u0436\u0430\u043b\u0430\u0441\u044c. \u041d\u043e\u0432\u0443\u044e CitrixBleed 2 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0435 \u0438\u043d\u0430\u0447\u0435, \u043a\u0430\u043a CitrixBl\u2026d 2 CVE-2025\u20135777 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,3).\n\n\u041e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u043e\u043f\u0440\u0435\u043a\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0432\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0437\u0430\u0431\u043b\u0443\u0436\u0434\u0435\u043d\u0438\u0435, \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NetScaler, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNouse \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0435\u0449\u0435 \u0437\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e PoC 4 \u0438\u044e\u043b\u044f.\n\n26 \u0438\u044e\u043d\u044f Citrix \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0431\u043b\u043e\u0433\u0435, \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0433\u0430\u044e\u0449\u0438\u0435 \u043e\u0442\u0447\u0435\u0442\u044b \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0435\u0435 \u0442\u043e\u043b\u044c\u043a\u043e 11 \u0438\u044e\u043b\u044f. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 100 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0442\u044b\u0441\u044f\u0447\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438.\n\n3. \u0422\u0430 \u0436\u0435 GreyNoise \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e\u00a0\u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f CVE-2025-48927, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Signal TeleMessage SGNL.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Tenable \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438\u00a0\u043e\u0431 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Oracle Cloud Infrastructure Code Editor, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0440\u0435\u0434\u044b Cloud Shell \u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\n\n5. Semperis \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0434\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 (dMSA) Windows Server 2025, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Golden dMSA \u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044e \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 dMSA.\n\n6. \u041f\u043e\u043b\u044c\u0441\u043a\u0438\u0439 CERT \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u0440\u0438 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445 Bluebird \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n7. \u0418 \u0432\u043d\u043e\u0432\u044c \u043f\u0440\u043e Positive Technologies: \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043d\u0430\u0448\u043b\u0438 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 KVM-\u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0442\u0435\u043b\u044f\u0445 ATEN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n8. ENEA \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043a\u043e\u043d\u0446\u0430 2024 \u0433\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SS7 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b SS7 \u0438 \u043e\u0431\u043c\u0430\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0430.", "creation_timestamp": "2025-07-18T18:09:34.000000Z"}]}