{"vulnerability": "CVE-2025-61622", "sightings": [{"uuid": "7614b3d0-be83-4fc0-a00d-38ad6328b307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m27q42fevk2t", "content": "", "creation_timestamp": "2025-10-02T14:08:13.593655Z"}, {"uuid": "52760b67-293e-4c75-ba46-6efc79d046b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lzybg6twzd2o", "content": "", "creation_timestamp": "2025-09-29T14:56:49.533744Z"}, {"uuid": "736def3d-767f-4b17-adb9-9ec18a05ea7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/229", "content": "", "creation_timestamp": "2025-09-29T12:21:59.000000Z"}, {"uuid": "96c051fe-1e81-4341-85e1-57352c91534b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://gist.github.com/Darkcrai86/3e0987e842ef6c7b1248aa059c7083a8", "content": "", "creation_timestamp": "2025-10-01T11:24:40.000000Z"}, {"uuid": "62127876-9b9f-4706-8cba-cb28ff5bb77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-61622", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m26ky34xhf26", "content": "", "creation_timestamp": "2025-10-02T03:03:52.568732Z"}, {"uuid": "82ad3a88-8259-4a38-9219-6995d8c54dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "published-proof-of-concept", "source": "Telegram/HGBuw2yUEmoLwI0F0u2SPy88IVvjk_mk0nhUY3zGsYJl92I", "content": "", "creation_timestamp": "2025-10-03T15:00:13.000000Z"}, {"uuid": "d702fc67-4ac5-4bc6-abd5-66fa71ea7ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://t.me/CyberDispatch/1782", "content": "CVE-2025-61622: PyFory \u2013 Insecure Pickle Deserialization to Remote Code Execution.", "creation_timestamp": "2026-08-30T00:00:40.386142Z"}, {"uuid": "4b788473-603c-466f-8056-a6d033a970a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://t.me/CyberDispatch/1782", "content": "CVE-2025-61622: PyFory \u2013 Insecure Pickle Deserialization to Remote Code Execution.", "creation_timestamp": "2026-08-31T00:00:38.445112Z"}, {"uuid": "46780d30-f584-4d98-89ac-f45741310197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://t.me/CyberDispatch/1782", "content": "CVE-2025-61622: PyFory \u2013 Insecure Pickle Deserialization to Remote Code Execution.", "creation_timestamp": "2026-08-29T20:00:13.870593Z"}, {"uuid": "a341366f-0620-4adc-952f-8f1e83a4449f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-61622", "type": "published-proof-of-concept", "source": "https://blog.securelayer7.net/cve-2025-61622-pyfory-deserialization-rce-exploit", "content": "", "creation_timestamp": "2026-05-28T06:35:50.515000Z"}, {"uuid": "475903d9-b091-419b-8e93-a3fc033c72e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-61622", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mn2fwc2dyq23", "content": "Original text: \u201cCVE-2025-61622: PyFory \u2013 Insecure Pickle Deserialization to Remote Code Execution\u201d \u2014 SecureLayer7 Blog (May 28, 2026). Code blocks, screenshots and patch diff below are reproduced verbatim with attribution\nhttps://core-jmp.org/2026/05/cve-2025-61622-pyfory-pickle-deserialization-rce/", "creation_timestamp": "2026-05-30T06:21:25.734231Z"}, {"uuid": "3df6fbce-acb6-44df-b74f-2d7e73f87b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61622", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-02T06:00:14.178491Z"}]}