{"metadata": {"vulnerability": "CVE-2025-10643", "count": 20, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-09-17T03:00:00Z", "date_only": false, "value": "2025-09-17T03:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-895/", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "253dcc7f-b8ae-4ed1-b60e-0ffb072977f9", "url": "http://www.zerodayinitiative.com/advisories/ZDI-25-895/"}, {"timestamp": "2025-09-17T16:14:13.789Z", "date_only": false, "value": "2025-09-17T16:14:13.789Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-10643", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-09-17T16:14:13.846Z", "date_only": false, "value": "2025-09-17T16:14:13.846Z", "kind": "other", "label": "Date Assigned", "source": "cvelistv5 / zdi", "record": "CVE-2025-10643", "field": "containers.cna.dateAssigned"}, {"timestamp": "2025-09-17T16:33:47.405Z", "date_only": false, "value": "2025-09-17T16:33:47.405Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2025-10643", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-09-17T20:41:32.882Z", "date_only": false, "value": "2025-09-17T20:41:32.882Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-10643", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-09-17T20:41:32.882Z", "date_only": false, "value": "2025-09-17T20:41:32.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / zdi", "record": "CVE-2025-10643", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-17T21:15:37Z", "date_only": false, "value": "2025-09-17T21:15:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G9JG-2495-PCX3", "record": "GHSA-G9JG-2495-PCX3", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-09-17T21:15:37.653Z", "date_only": false, "value": "2025-09-17T21:15:37.653", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-10643", "record": "FKIE_CVE-2025-10643", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-09-17T21:30:42Z", "date_only": false, "value": "2025-09-17T21:30:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G9JG-2495-PCX3", "record": "GHSA-G9JG-2495-PCX3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-09-17T21:30:43Z", "date_only": false, "value": "2025-09-17T21:30:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G9JG-2495-PCX3", "record": "GHSA-G9JG-2495-PCX3", "field": "modified", "linked_record": true}, {"timestamp": "2025-09-18T03:02:02.122Z", "date_only": false, "value": "2025-09-18T03:02:02.122196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lz3edve4ru2m", "record": "cve-2025-10643", "field": "creation_timestamp", "uuid": "5f6c706d-95cf-4538-b327-a26e50fc5b3b", "url": "https://bsky.app/profile/offseq.bsky.social/post/3lz3edve4ru2m"}, {"timestamp": "2025-09-18T15:37:22.960Z", "date_only": false, "value": "2025-09-18T15:37:22.960669Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-10643", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-09-18T15:37:22.960Z", "date_only": false, "value": "2025-09-18T15:37:22.960669Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-10643", "record": "FKIE_CVE-2025-10643", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-09-18T15:39:08.899Z", "date_only": false, "value": "2025-09-18T15:39:08.899Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-10643", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-09-18T15:39:08.899Z", "date_only": false, "value": "2025-09-18T15:39:08.899Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-10643", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-18T23:37:23.743Z", "date_only": false, "value": "2025-09-18T23:37:23.743312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lz5jevoozc2i", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "dd834d45-f020-40a0-8633-eb23889511fb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lz5jevoozc2i"}, {"timestamp": "2025-09-23T12:32:28.115Z", "date_only": false, "value": "2025-09-23T12:32:28.115346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lziwkjhn4f2m", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "d28f951b-a366-43f8-9742-7822e4dc1656", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lziwkjhn4f2m"}, {"timestamp": "2025-09-24T11:55:00Z", "date_only": false, "value": "2025-09-24T11:55:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/09/two-critical-flaws-uncovered-in.html", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "208422c3-dc92-4172-90db-2720d7c9ad3c", "url": "https://thehackernews.com/2025/09/two-critical-flaws-uncovered-in.html"}, {"timestamp": "2025-09-24T14:33:08Z", "date_only": false, "value": "2025-09-24T14:33:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7592", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "0872a381-9fe5-499a-8014-5030d30210e4", "content": "\ud83d\udea8 Researchers found critical authentication bypass flaws in Wondershare RepairIt (CVE-2025-10643/10644).\n\nHardcoded cloud tokens + no encryption exposed user data and let attackers swap AI models\u2014turning updates into a supply chain backdoor.\n\nDetails \u2192 https://thehackernews.com/2025/09/two-critical-flaws-uncovered-in.html", "url": "https://t.me/thehackernews/7592", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-26T00:10:00.127Z", "date_only": false, "value": "2026-09-26T00:10:00.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-10643", "record": "FKIE_CVE-2025-10643", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-03T21:48:59.150Z", "anchors": {"origin": {"timestamp": "2025-09-17T16:33:47.405Z", "date_only": false, "value": "2025-09-17T16:33:47.405Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2025-10643", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-09-17T16:33:47.405Z", "date_only": false, "value": "2025-09-17T16:33:47.405Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2025-10643", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-09-24T14:33:08Z", "date_only": false, "value": "2025-09-24T14:33:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7592", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "0872a381-9fe5-499a-8014-5030d30210e4", "content": "\ud83d\udea8 Researchers found critical authentication bypass flaws in Wondershare RepairIt (CVE-2025-10643/10644).\n\nHardcoded cloud tokens + no encryption exposed user data and let attackers swap AI models\u2014turning updates into a supply chain backdoor.\n\nDetails \u2192 https://thehackernews.com/2025/09/two-critical-flaws-uncovered-in.html", "url": "https://t.me/thehackernews/7592", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 597560.595, "hours": 165.98905416666665, "days": 6.916210590277777, "min_seconds": 597560.595, "max_seconds": 597560.595, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-09-17T16:33:47.405Z", "date_only": false, "value": "2025-09-17T16:33:47.405Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2025-10643", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-09-24T14:33:08Z", "date_only": false, "value": "2025-09-24T14:33:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7592", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "0872a381-9fe5-499a-8014-5030d30210e4", "content": "\ud83d\udea8 Researchers found critical authentication bypass flaws in Wondershare RepairIt (CVE-2025-10643/10644).\n\nHardcoded cloud tokens + no encryption exposed user data and let attackers swap AI models\u2014turning updates into a supply chain backdoor.\n\nDetails \u2192 https://thehackernews.com/2025/09/two-critical-flaws-uncovered-in.html", "url": "https://t.me/thehackernews/7592", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 35615711.745891, "hours": 9893.2532627475, "days": 412.21888594781245, "min_seconds": 35615711.745891, "max_seconds": 35615711.745891, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-09-17T16:33:47.405Z", "date_only": false, "value": "2025-09-17T16:33:47.405Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2025-10643", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T21:48:59.150Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 35018151.150891, "hours": 9727.264208580833, "days": 405.3026753575347, "min_seconds": 35018151.150891, "max_seconds": 35018151.150891, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-09-24T14:33:08Z", "date_only": false, "value": "2025-09-24T14:33:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7592", "record": "CVE-2025-10643", "field": "creation_timestamp", "uuid": "0872a381-9fe5-499a-8014-5030d30210e4", "content": "\ud83d\udea8 Researchers found critical authentication bypass flaws in Wondershare RepairIt (CVE-2025-10643/10644).\n\nHardcoded cloud tokens + no encryption exposed user data and let attackers swap AI models\u2014turning updates into a supply chain backdoor.\n\nDetails \u2192 https://thehackernews.com/2025/09/two-critical-flaws-uncovered-in.html", "url": "https://t.me/thehackernews/7592", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T21:48:59.150Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}