{"metadata": {"vulnerability": "CVE-2025-24994", "count": 48, "kinds": {"milestone": 8, "sighting": 16, "kev": 0, "other": 24}}, "data": [{"timestamp": "2025-01-30T15:14:20.993Z", "date_only": false, "value": "2025-01-30T15:14:20.993Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-24994", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": true, "value": "2025-03-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0193", "record": "CERTFR-2025-AVI-0193", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24994", "record": "MSRC_CVE-2025-24994", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24994", "record": "MSRC_CVE-2025-24994", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2025-24994", "field": "containers.cna.datePublic"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24994", "record": "MSRC_CVE-2025-24994", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T07:00:00Z", "date_only": false, "value": "2025-03-11T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24994", "record": "MSRC_CVE-2025-24994", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-11T16:39:36Z", "date_only": false, "value": "2025-03-11T16:39:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "a4207ab9-4919-4482-b8ab-724e5c352131", "url": "https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review"}, {"timestamp": "2025-03-11T16:59:20.860Z", "date_only": false, "value": "2025-03-11T16:59:20.860Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-24994", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-11T17:16:36Z", "date_only": false, "value": "2025-03-11T17:16:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W95M-F858-6462", "record": "GHSA-W95M-F858-6462", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-11T17:16:36.150Z", "date_only": false, "value": "2025-03-11T17:16:36.150", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24994", "record": "FKIE_CVE-2025-24994", "field": "published"}, {"timestamp": "2025-03-11T18:25:35.491Z", "date_only": false, "value": "2025-03-11T18:25:35.491051Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-24994", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-11T18:25:35.491Z", "date_only": false, "value": "2025-03-11T18:25:35.491051Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24994", "record": "FKIE_CVE-2025-24994", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-11T18:29:52.455Z", "date_only": false, "value": "2025-03-11T18:29:52.455Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-24994", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-11T18:32:19Z", "date_only": false, "value": "2025-03-11T18:32:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W95M-F858-6462", "record": "GHSA-W95M-F858-6462", "field": "published"}, {"timestamp": "2025-03-11T18:32:19Z", "date_only": false, "value": "2025-03-11T18:32:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W95M-F858-6462", "record": "GHSA-W95M-F858-6462", "field": "modified"}, {"timestamp": "2025-03-11T18:43:14.505Z", "date_only": false, "value": "2025-03-11T18:43:14.505624Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-11T18:43:14.505Z", "date_only": false, "value": "2025-03-11T18:43:14.505624Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T18:43:14.505Z", "date_only": false, "value": "2025-03-11T18:43:14.505624Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0078", "record": "NCSC-2025-0078", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-11T20:08:35Z", "date_only": false, "value": "2025-03-11T20:08:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20119", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "796a88fe-5fad-4930-92a4-c3869c28dbfb", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24994 - Windows Cross Device Service Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-24994 \nPublished : March 11, 2025, 5:16 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20119"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-03-12T00:00:00Z", "date_only": false, "value": "2025-03-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0193", "record": "CERTFR-2025-AVI-0193", "field": "revisions.0.revision_date"}, {"timestamp": "2025-03-12T23:00:00Z", "date_only": false, "value": "2025-03-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-03-13T17:45:18Z", "date_only": false, "value": "2025-03-13T17:45:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7460", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "1a618efb-dbbc-4a3d-bf2f-ae60a2deebbd", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24994\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-03-11T16:59:20.860Z\n\ud83d\udccf Modified: 2025-03-13T17:25:16.345Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24994", "url": "https://t.me/DarkWebInformer_CVEAlerts/7460"}, {"timestamp": "2025-03-19T23:00:00Z", "date_only": false, "value": "2025-03-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-03-31T02:30:54Z", "date_only": false, "value": "2025-03-31T02:30:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9576", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "2d9a99b5-b49c-442d-850e-ace38130362b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24994\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-03-11T16:59:20.860Z\n\ud83d\udccf Modified: 2025-03-31T01:40:47.044Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24994", "url": "https://t.me/DarkWebInformer_CVEAlerts/9576"}, {"timestamp": "2025-04-15T09:00:16.558Z", "date_only": false, "value": "2025-04-15T09:00:16.558191Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/compass-security.com/post/3lmtpmqbims2d", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "57872f89-1f65-4aa9-b115-292831c3eeed", "url": "https://bsky.app/profile/compass-security.com/post/3lmtpmqbims2d"}, {"timestamp": "2025-04-16T02:14:53.352Z", "date_only": false, "value": "2025-04-16T02:14:53.352507Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmvjgvpaq32q", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "a1e1a069-0281-433a-b1c4-238c287cfe04", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmvjgvpaq32q"}, {"timestamp": "2025-04-16T07:11:08.878Z", "date_only": false, "value": "2025-04-16T07:11:08.878087Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmvzynn53n2h", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "e9d6e08f-69bb-46a0-af49-7866c7f689be", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmvzynn53n2h"}, {"timestamp": "2025-04-16T07:15:08Z", "date_only": false, "value": "2025-04-16T07:15:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2593", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "6ddf10e6-dc45-485c-963a-2e8d93944084", "content": "CVE-2025-24076 and CVE-2025-24994\n*\n300 Milliseconds to Admin: Mastering DLL Hijacking and Hooking to Win the Race", "url": "https://t.me/proxy_bar/2593"}, {"timestamp": "2025-04-18T09:33:38Z", "date_only": false, "value": "2025-04-18T09:33:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MrVGunz/1340", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "62cd4867-facc-426d-86dc-f6c01a028810", "content": "CVE-2025-24076 \u0648 CVE-2025-24994\n*\n\u06f3\u06f0\u06f0 \u0645\u06cc\u0644\u06cc\u200c\u062b\u0627\u0646\u06cc\u0647 \u062a\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u062f\u0645\u06cc\u0646: \u062a\u0633\u0644\u0637 \u0628\u0631 DLL Hijacking \u0648 Hooking \u0628\u0631\u0627\u06cc \u0628\u0631\u062f \u062f\u0631 \u0631\u0642\u0627\u0628\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u0631\u06cc\u0639\n\nCVE-2025-24076 and CVE-2025-24994\n*\n300 Milliseconds to Admin: Mastering DLL Hijacking and Hooking to Win the Race", "url": "https://t.me/MrVGunz/1340"}, {"timestamp": "2025-05-19T21:37:53.694Z", "date_only": false, "value": "2025-05-19T21:37:53.694Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-24994", "record": "MSRC_CVE-2025-24994", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-20T07:25:01.250Z", "date_only": false, "value": "2025-05-20T07:25:01.250280Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/binitamshah.bsky.social/post/3lplkmqk2rs2s", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "28867a43-d56f-47ae-9162-050552eef779", "url": "https://bsky.app/profile/binitamshah.bsky.social/post/3lplkmqk2rs2s"}, {"timestamp": "2025-05-21T02:18:33.089Z", "date_only": false, "value": "2025-05-21T02:18:33.089865Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpnjxoejj62b", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "4e9d2c93-e1ef-4a78-95c3-7591b4fcfb1e", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpnjxoejj62b"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-11T06:28:06.472Z", "date_only": false, "value": "2025-06-11T06:28:06.472+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0537", "record": "WID-SEC-W-2025-0537", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-13T13:26:34Z", "date_only": false, "value": "2025-08-13T13:26:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "1adbc17a-accd-4c85-9703-e112d3097e10"}, {"timestamp": "2025-12-02T09:45:51.226Z", "date_only": false, "value": "2025-12-02T09:45:51.226995Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/compass-security.com/post/3m6ynurdb3c2h", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "faf0315f-4c73-40f1-b9e9-03b7dac2ce67", "url": "https://bsky.app/profile/compass-security.com/post/3m6ynurdb3c2h"}, {"timestamp": "2026-02-13T19:39:05.524Z", "date_only": false, "value": "2026-02-13T19:39:05.524Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-24994", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-13T19:39:05.524Z", "date_only": false, "value": "2026-02-13T19:39:05.524Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2025-24994", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:59:57.383Z", "date_only": false, "value": "2026-06-17T08:59:57.383", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24994", "record": "FKIE_CVE-2025-24994", "field": "lastModified"}, {"timestamp": "2026-07-20T21:00:06.804Z", "date_only": false, "value": "2026-07-20T21:00:06.804068Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/993", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "03816e11-4b77-4df5-90f5-69cc13248b61", "content": "\ud83d\udce2 300 Milliseconds to Admin: CVE-2025-24076 & CVE-2025-24994\n https://crack-vault.de/d/474", "url": "https://t.me/crackvaultde/993"}, {"timestamp": "2026-07-22T00:00:33.568Z", "date_only": false, "value": "2026-07-22T00:00:33.568389Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackvaultde/993", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "28bf6676-0cf6-45c1-ab32-f18d9971f4de", "content": "\ud83d\udce2 300 Milliseconds to Admin: CVE-2025-24076 & CVE-2025-24994\n https://crack-vault.de/d/474", "url": "https://t.me/crackvaultde/993"}, {"timestamp": "2026-08-14T16:00:17.656Z", "date_only": false, "value": "2026-08-14T16:00:17.656253Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/523", "record": "CVE-2025-24994", "field": "creation_timestamp", "uuid": "aef9d2d2-13fd-4cc3-b415-73f39e26cce7", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-24076 \u0438 CVE-2025-24994 \u2014 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0432 Window 11 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 DLL hijacking \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows Cross Device Service, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\u200b\n\n\ud83d\udd35 CVE-2025-21299 \u0438 CVE-2025-29809 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 Credential Guard \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a Kerberos-\u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd35 CVE-2025-24859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Roller. \u0410\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0430\u043d\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043d\u0435 \u0430\u043d\u043d\u0443\u043b\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\ud83d\udd35 CVE-2025-32102 (SSRF) \u0438 CVE-2025-32103 (\u043e\u0431\u0445\u043e\u0434 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430) \u2014 \u0431\u0430\u0433\u0438 \u0432 CrushFTP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u0442\u044b \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043c\u0438\u043d\u0443\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/523"}]}