{"vulnerability": "CVE-2025-6511", "sightings": [{"uuid": "a795811e-d6ef-4b1d-aa6b-e6b368b3e644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6511", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114731996519003743", "content": "", "creation_timestamp": "2025-06-23T09:35:34.563418Z"}, {"uuid": "d385d55c-b80c-443a-a123-18075e1b5dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6511", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114774193882630947", "content": "", "creation_timestamp": "2025-06-30T20:26:58.299484Z"}, {"uuid": "06ff8c4f-f9e9-446b-991f-7aff384adcf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6511", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsccficzkn2s", "content": "", "creation_timestamp": "2025-06-23T19:19:23.972911Z"}, {"uuid": "25dfd98c-912a-4290-b51a-35613fe1586d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-65112", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115630409860080919", "content": "", "creation_timestamp": "2025-11-29T01:33:55.153524Z"}, {"uuid": "a291b84a-8813-4843-a3ab-d7838b28c17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65110", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbphtmlv552a", "content": "", "creation_timestamp": "2026-01-05T22:19:18.628744Z"}, {"uuid": "7f9e6053-f4d5-4703-881c-60c6df1d879a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65110", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbpogmxaep2q", "content": "", "creation_timestamp": "2026-01-06T00:17:18.454733Z"}, {"uuid": "504e0bb4-9071-458c-8649-cc6a89d41c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65118", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcj47todpp2u", "content": "", "creation_timestamp": "2026-01-16T03:00:36.959431Z"}, {"uuid": "d79607eb-f8d6-40d1-bde8-df54ee1cb8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65117", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcjehonmii2o", "content": "", "creation_timestamp": "2026-01-16T05:28:09.438283Z"}, {"uuid": "47b12e5c-1fde-494a-bd20-0057c0e7683d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcjezlkirn22", "content": "", "creation_timestamp": "2026-01-16T05:38:10.327427Z"}, {"uuid": "f3939004-795f-48c1-a9ca-18674e3607f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65110", "type": "seen", "source": "https://gist.github.com/alon710/57332bff92358939e94c6163adaac37b", "content": "", "creation_timestamp": "2026-01-24T21:30:53.000000Z"}, {"uuid": "35f8d6c2-16a8-4a95-90c0-302fad2d6656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65110", "type": "seen", "source": "https://gist.github.com/alon710/ce6529fd3c682e823810fbc8215f9df8", "content": "", "creation_timestamp": "2026-01-24T21:30:52.000000Z"}, {"uuid": "6c543b57-e0c7-4143-9458-5b79cc916026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65119", "type": "seen", "source": "https://infosec.place/objects/25032cdc-1f3b-4564-8520-8780647b5ede", "content": "", "creation_timestamp": "2026-03-17T19:30:29.238886Z"}, {"uuid": "97e9c385-4fa9-4c8f-83ee-f3fef4a7617a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65110", "type": "seen", "source": "https://gist.github.com/alon710/2e8009023735f4d09d408cdce29756e7", "content": "", "creation_timestamp": "2026-01-24T22:42:53.000000Z"}, {"uuid": "cecc8359-8f20-40bb-ba97-811dbce60b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65114", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mil2aaz7wy2p", "content": "", "creation_timestamp": "2026-04-03T06:01:32.531931Z"}, {"uuid": "0da4bcc6-ac54-4a0c-a86a-d9fc9906b666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65114", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mil2hvv5ck2d", "content": "", "creation_timestamp": "2026-04-03T06:05:49.265477Z"}, {"uuid": "8fe2c133-7dd0-4aa9-9204-c173a213333a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65110", "type": "seen", "source": "Telegram/DM3pgu0_RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg", "content": "", "creation_timestamp": "2026-01-05T23:05:27.000000Z"}, {"uuid": "98af3956-4d73-4eb6-a56c-f33bf8cfd734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65115", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miv4ydiw5t2w", "content": "", "creation_timestamp": "2026-04-07T06:17:26.027488Z"}, {"uuid": "730f2f9a-f64f-4026-9cc6-d347e5d973a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65115", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv5gbsvfj27", "content": "", "creation_timestamp": "2026-04-07T06:25:15.497381Z"}, {"uuid": "359fd780-44f9-4db7-85dc-acdd828317af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65115", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3miv7vxfup22g", "content": "", "creation_timestamp": "2026-04-07T07:09:46.405538Z"}, {"uuid": "781b2e63-d859-4a9d-8fc9-b3bea53da2f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65114", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mivxj2e77x24", "content": "", "creation_timestamp": "2026-04-07T14:12:04.022190Z"}, {"uuid": "41e123eb-a4c3-412a-bde4-8d92ddba81a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65114", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjdc3kbv7s2h", "content": "", "creation_timestamp": "2026-04-12T21:25:59.955541Z"}, {"uuid": "e1e6aae8-c14a-4c63-b32e-f91071d7319a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65115", "type": "seen", "source": "Telegram/PccILqNbDdjDYDrDdIeHFnNV8hFt7Dml8Dmmd7IXINWTSDI", "content": "", "creation_timestamp": "2026-04-07T07:15:32.000000Z"}, {"uuid": "41e32833-2026-4a18-90db-8e8637e2b4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65114", "type": "published-proof-of-concept", "source": "Telegram/23ZcvUWmnJsq-zA1xOv2ctyvywAVz8hRL5r96BcfYjQKx08", "content": "", "creation_timestamp": "2026-04-02T22:22:04.000000Z"}, {"uuid": "9ed3e6c9-7e3a-4ca2-b243-d37c39bd3ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6511", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19214", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6511\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-06-23T16:31:05.057Z\n\ud83d\udccf Modified: 2025-06-23T16:31:05.057Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.313623\n2. https://vuldb.com/?ctiid.313623\n3. https://vuldb.com/?submit.595999\n4. https://vuldb.com/?submit.596008\n5. https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6150-netgear\n6. https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6150-netgear#poc\n7. https://www.netgear.com/", "creation_timestamp": "2025-06-23T16:47:00.000000Z"}, {"uuid": "738c9529-ae5e-4916-87e1-b7644c0e98e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6511", "type": "published-proof-of-concept", "source": "Telegram/nPEUyhGnsP59voT2ahckIV2qfXLOATZFAOqcmcKzo8MVrGY", "content": "", "creation_timestamp": "2025-06-23T17:31:42.000000Z"}, {"uuid": "73f765bb-dac2-4f32-90d2-d095811d2f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-65110", "type": "published-proof-of-concept", "source": "https://github.com/vega/vega/security/advisories/GHSA-829q-m3qg-ph8r", "content": "", "creation_timestamp": "2026-01-05T19:29:01.000000Z"}, {"uuid": "e78a2871-57c0-459a-99a4-b905f74f5635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65115", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mn3loixyqw2s", "content": "\ud83d\udccc CVE-2025-65115 - Remote Code Execution Vulnerability\u00a0in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows,... https://www.cyberhub.blog/cves/CVE-2025-65115", "creation_timestamp": "2026-05-30T17:37:06.798089Z"}, {"uuid": "e214d72c-1479-42cb-9d38-992355ac4704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65112", "type": "seen", "source": "https://t.me/cyberwarehouse/1005", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438\n#CVE #unauthRCE #RCE #PubNet #Oracle #FluentBit #fontTools #ESCAM\n\n\u27a1\ufe0fPubNet (CVE-2025-65112, CVSS 9.4) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 PubNet \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Dart/Flutter. \u0418\u0437-\u0437\u0430 missing authentication \u0431\u0430\u0433\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0fFluent Bit (CVE-2025-12970, CVSS 8.8) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 input:in_docker \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0438\u043c\u0435\u043d\u0435\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043a\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 (\u0434\u0430\u0436\u0435 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432 k8s namespace) \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u27a1\ufe0fOracle Fusion Middleware Identity Manager (CVE-2025-61757, CVSS 9.8) \u2014 authentication bypass \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 REST WebServices. \u041b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0441\u0443\u0444\u0444\u0438\u043a\u0441 ;.wadl \u0438\u043b\u0438 ?WSDL \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u043c\u0443 URL. \u0411\u044d\u043a\u0435\u043d\u0434 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u0441\u0443\u0444\u0444\u0438\u043a\u0441, \u043d\u043e \u0444\u0438\u043b\u044c\u0442\u0440 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c.\n\n\u27a1\ufe0f\u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 fontTools (CVE-2025-66034, CVSS 6.3) \u2014 arbitrary file write \u0431\u0430\u0433 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 .designspace. \u041c\u043e\u0434\u0443\u043b\u044c varLib \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0432\u0430\u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u043f\u0443\u0442\u0438 \u0432 XML-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0432\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b .designspace, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 fontTools varLib \u0438\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c python3 -m fontTools.varLib \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0448\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u0430\u043a \u0438\u0442\u043e\u0433 \u2014 RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0432\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0fLunary (CVE-2025-9803, CVSS 9.3) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 account takeover \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 LLM. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 Google OAuth. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u043e \u0432\u0430\u043b\u0438\u0434\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0442\u043e\u043a\u0435\u043d\u0430, \u043d\u043e \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043f\u043e\u043b\u0435 aud (audience), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0439 Google \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Lunary \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b. \u0415\u0441\u0442\u044c PoC.\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK | \u2764\ufe0f \u041c\u0435\u0440\u0447", "creation_timestamp": "2026-07-26T02:00:07.985760Z"}, {"uuid": "23082de1-1ae8-418a-8ca3-2f55ba2e28f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-65112", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1005", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438\n#CVE #unauthRCE #RCE #PubNet #Oracle #FluentBit #fontTools #ESCAM\n\n\u27a1\ufe0fPubNet (CVE-2025-65112, CVSS 9.4) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 PubNet \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Dart/Flutter. \u0418\u0437-\u0437\u0430 missing authentication \u0431\u0430\u0433\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0fFluent Bit (CVE-2025-12970, CVSS 8.8) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 input:in_docker \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0438\u043c\u0435\u043d\u0435\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043a\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 (\u0434\u0430\u0436\u0435 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432 k8s namespace) \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u27a1\ufe0fOracle Fusion Middleware Identity Manager (CVE-2025-61757, CVSS 9.8) \u2014 authentication bypass \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 REST WebServices. \u041b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0441\u0443\u0444\u0444\u0438\u043a\u0441 ;.wadl \u0438\u043b\u0438 ?WSDL \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u043c\u0443 URL. \u0411\u044d\u043a\u0435\u043d\u0434 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u0441\u0443\u0444\u0444\u0438\u043a\u0441, \u043d\u043e \u0444\u0438\u043b\u044c\u0442\u0440 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c.\n\n\u27a1\ufe0f\u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 fontTools (CVE-2025-66034, CVSS 6.3) \u2014 arbitrary file write \u0431\u0430\u0433 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 .designspace. \u041c\u043e\u0434\u0443\u043b\u044c varLib \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0432\u0430\u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u043f\u0443\u0442\u0438 \u0432 XML-\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0432\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b .designspace, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u043e\u0439 fontTools varLib \u0438\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c python3 -m fontTools.varLib \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0448\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u0430\u043a \u0438\u0442\u043e\u0433 \u2014 RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0432\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0fLunary (CVE-2025-9803, CVSS 9.3) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 account takeover \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 LLM. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 Google OAuth. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u043e \u0432\u0430\u043b\u0438\u0434\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0442\u043e\u043a\u0435\u043d\u0430, \u043d\u043e \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043f\u043e\u043b\u0435 aud (audience), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0439 Google \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Lunary \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b. \u0415\u0441\u0442\u044c PoC.\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK | \u2764\ufe0f \u041c\u0435\u0440\u0447", "creation_timestamp": "2026-07-27T00:00:32.987823Z"}]}