{"metadata": {"vulnerability": "CVE-2025-41244", "count": 341, "kinds": {"milestone": 46, "sighting": 98, "kev": 11, "other": 186}}, "data": [{"timestamp": "2025-04-16T09:30:17.799Z", "date_only": false, "value": "2025-04-16T09:30:17.799Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-41244", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-09-23T18:25:28.517Z", "date_only": false, "value": "2025-09-23T18:25:28.517000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-09-23T18:25:28.517Z", "date_only": false, "value": "2025-09-23T18:25:28.517000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-09-23T18:25:28.517Z", "date_only": false, "value": "2025-09-23T18:25:28.517000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-09-23T18:25:28.517Z", "date_only": false, "value": "2025-09-23T18:25:28.517000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-09-23T18:25:28.517Z", "date_only": false, "value": "2025-09-23T18:25:28.517000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-09-23T18:25:28.517Z", "date_only": false, "value": "2025-09-23T18:25:28.517000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-09-23T18:25:28.517Z", "date_only": false, "value": "2025-09-23T18:25:28.517000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": true, "value": "2025-09-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0832", "record": "CERTFR-2025-AVI-0832", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-41244", "record": "UBUNTU-CVE-2025-41244", "field": "published"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-29T15:02:45Z", "date_only": false, "value": "2025-09-29T15:02:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://seclists.org/oss-sec/2025/q3/236", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "16637fa1-d588-49dd-b3dc-97cc48a5df97", "url": "https://seclists.org/oss-sec/2025/q3/236"}, {"timestamp": "2025-09-29T16:00:00Z", "date_only": false, "value": "2025-09-29T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / vmware", "record": "CVE-2025-41244", "field": "containers.cna.datePublic"}, {"timestamp": "2025-09-29T16:09:51.871Z", "date_only": false, "value": "2025-09-29T16:09:51.871Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-41244", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-09-29T16:16:24.967Z", "date_only": false, "value": "2025-09-29T16:16:24.967Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2025-41244", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-29T17:15:30Z", "date_only": false, "value": "2025-09-29T17:15:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-76FP-M4VP-HXRQ", "record": "GHSA-76FP-M4VP-HXRQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-09-29T17:15:30.843Z", "date_only": false, "value": "2025-09-29T17:15:30.843", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-41244", "record": "FKIE_CVE-2025-41244", "field": "published"}, {"timestamp": "2025-09-29T17:42:01.330Z", "date_only": false, "value": "2025-09-29T17:42:01.330886Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lzyknlcrjr2f", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "10e02635-2907-48d2-bfcd-7bc92d75c061", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lzyknlcrjr2f"}, {"timestamp": "2025-09-29T18:33:13Z", "date_only": false, "value": "2025-09-29T18:33:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-76FP-M4VP-HXRQ", "record": "GHSA-76FP-M4VP-HXRQ", "field": "published"}, {"timestamp": "2025-09-29T19:27:06.603Z", "date_only": false, "value": "2025-09-29T19:27:06.603115Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lzyqjfxy6o2b", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "96aeaff0-ed9b-4bad-9371-de803ea05c82", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lzyqjfxy6o2b"}, {"timestamp": "2025-09-29T22:00:00Z", "date_only": false, "value": "2025-09-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-09-29T22:00:00Z", "date_only": false, "value": "2025-09-29T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-29T22:00:00Z", "date_only": false, "value": "2025-09-29T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0832", "record": "CERTFR-2025-AVI-0832", "field": "last_revision_date"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0832", "record": "CERTFR-2025-AVI-0832", "field": "initial_release_date"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0832", "record": "CERTFR-2025-AVI-0832", "field": "revisions.0.revision_date"}, {"timestamp": "2025-09-30T11:00:29Z", "date_only": false, "value": "2025-09-30T11:00:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7623", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "985b474f-468c-4547-8c13-1441d392de7c", "content": "\ud83d\udd25 [New] VMware zero-day (CVE-2025-41244) exploited in the wild!\n\nUNC5174 popped root by abusing a regex bug in get_version() \u2014 drop /tmp/httpd, open a socket, and you\u2019re root.\n\nAlready active since Oct \u201924.\n\nDetails \u2192 https://thehackernews.com/2025/09/urgent-china-linked-hackers-exploit-new.html", "url": "https://t.me/thehackernews/7623"}, {"timestamp": "2025-09-30T11:24:32.949Z", "date_only": false, "value": "2025-09-30T11:24:32.949519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3m22fzjptns2h", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "7baa1f01-5a03-460a-a023-1fb3600e1a8b", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3m22fzjptns2h"}, {"timestamp": "2025-09-30T11:41:29Z", "date_only": false, "value": "2025-09-30T11:41:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/53653", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "eeaf2a0d-cb44-4f2b-bdd2-9523efb6a458", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDetection for CVE-2025-41244\nURL\uff1ahttps://github.com/rxerium/CVE-2025-41244\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/53653"}, {"timestamp": "2025-09-30T11:49:54.197Z", "date_only": false, "value": "2025-09-30T11:49:54.197053Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3m22hgtft3s2g", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "a03aaa61-5b39-4fdc-828a-f268f964005f", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3m22hgtft3s2g"}, {"timestamp": "2025-09-30T14:08:15Z", "date_only": false, "value": "2025-09-30T14:08:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:03434-1", "record": "SUSE-SU-2025:03434-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-09-30T14:08:15Z", "date_only": false, "value": "2025-09-30T14:08:15Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:03434-1", "record": "SUSE-SU-2025:03434-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-09-30T14:08:15Z", "date_only": false, "value": "2025-09-30T14:08:15Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03434-1", "record": "SUSE-SU-2025:03434-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-30T14:08:15Z", "date_only": false, "value": "2025-09-30T14:08:15Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:03434-1", "record": "SUSE-SU-2025:03434-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-30T14:08:15Z", "date_only": false, "value": "2025-09-30T14:08:15Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03434-1", "record": "SUSE-SU-2025:03434-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-09-30T14:09:51Z", "date_only": false, "value": "2025-09-30T14:09:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:03435-1", "record": "SUSE-SU-2025:03435-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-09-30T14:09:51Z", "date_only": false, "value": "2025-09-30T14:09:51Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:03435-1", "record": "SUSE-SU-2025:03435-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-09-30T14:09:51Z", "date_only": false, "value": "2025-09-30T14:09:51Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03435-1", "record": "SUSE-SU-2025:03435-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-30T14:09:51Z", "date_only": false, "value": "2025-09-30T14:09:51Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:03435-1", "record": "SUSE-SU-2025:03435-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-30T14:09:51Z", "date_only": false, "value": "2025-09-30T14:09:51Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03435-1", "record": "SUSE-SU-2025:03435-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-09-30T14:10:11Z", "date_only": false, "value": "2025-09-30T14:10:11Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:03436-1", "record": "SUSE-SU-2025:03436-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-09-30T14:10:11Z", "date_only": false, "value": "2025-09-30T14:10:11Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:03436-1", "record": "SUSE-SU-2025:03436-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-09-30T14:10:11Z", "date_only": false, "value": "2025-09-30T14:10:11Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03436-1", "record": "SUSE-SU-2025:03436-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-30T14:10:11Z", "date_only": false, "value": "2025-09-30T14:10:11Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:03436-1", "record": "SUSE-SU-2025:03436-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-30T14:20:05Z", "date_only": false, "value": "2025-09-30T14:20:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7475", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "f2f7cd04-41d6-4357-b558-e19c4c7662fb", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NVISO Labs \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Broadcom VMware Tools \u0438 VMware Aria Operations, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a 0-day \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a UNC5174.\n\nCVE-2025-41244\u00a0(CVSS: 7,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442: Cloud Foundation 4.x \u0438 5.x, 9.xxx, 13.xxx (Windows, Linux), vSphere Foundation 9.xxx, 13.xxx (Windows, Linux), Aria Operations 8.x, Tools 11.xx, 12.xx \u0438 13.xx (Windows, Linux), Telco Cloud Platform 4.x \u0438 5.x \u0438 Telco Cloud Infrastructure 2.x \u0438 3.x.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e VMware, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0435\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c\u0438 Aria Operations \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 VMware \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c SDMP, \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e root \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435.\n\nNVISO \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0439 19 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430 \u0432 \u0445\u043e\u0434\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e VMware Tools 12.4.9, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 VMware Tools 12.5.4, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows, \u0430 \u0432\u0435\u0440\u0441\u0438\u044f open-vm-tools, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0430\u044f CVE-2025-41244, \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 Linux.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Broadcom \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, NVISO Labs \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0435, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google Mandiant \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a UNC5174 (Uteus \u0438\u043b\u0438 Uetus).\n\n\u041a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u0433\u0430\u0442\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f SAP NetWeaver, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0440\u0435\u0434\u0430\u043c.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root). \n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 NVISO \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430 \u043e\u0446\u0435\u043d\u0438\u0442\u044c, \u0431\u044b\u043b \u043b\u0438 \u044d\u0442\u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0447\u0430\u0441\u0442\u044c\u044e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 UNC5174 \u0438\u043b\u0438 \u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0443\u043b\u044f \u043d\u043e\u0441\u0438\u043b\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0432 \u0432\u0438\u0434\u0443 \u0435\u0451 \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NVISO, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c get_version(), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0448\u0430\u0431\u043b\u043e\u043d \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f (regex) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0441 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0449\u0438\u043c \u0441\u043e\u043a\u0435\u0442\u043e\u043c, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u044d\u0442\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0448\u0430\u0431\u043b\u043e\u043d\u0443, \u0438, \u0435\u0441\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u044b.\n\n\u0425\u043e\u0442\u044f \u044d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, /usr/bin/httpd), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043b\u0430\u0441\u0441\u0430 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \\S \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435\u043c (\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c \u043e\u0442 \u043f\u0440\u043e\u0431\u0435\u043b\u043e\u0432) \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\u0445 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, /tmp/httpd).\n\n\u042d\u0442\u0438 \u043d\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, /tmp), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 /tmp/httpd, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a EoP \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u0435 \u043c\u0435\u0442\u0440\u0438\u043a VMware.\n\n\u0412\u0441\u0451, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, - \u044d\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438 \u043e\u043d \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u043e\u043a\u0435\u0442.\n\nUNC5174 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 /tmp/httpd \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u0432\u043e\u0438\u0447\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0422\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430, \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043d\u0435\u044f\u0441\u043d\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0448\u0438\u0440\u043e\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, httpd) \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u0448\u0442\u0430\u043c\u043c\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043c\u043d\u043e\u0433\u0438\u0445 \u043b\u0435\u0442 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.", "url": "https://t.me/true_secator/7475"}, {"timestamp": "2025-09-30T15:00:06Z", "date_only": false, "value": "2025-09-30T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ssqYqqdccEip6ZeushdrbISheIp6PDi_KXhzzvikRF8zVys", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "bf359fc6-2002-48df-92f3-eaa64f1d20da"}, {"timestamp": "2025-09-30T15:00:11Z", "date_only": false, "value": "2025-09-30T15:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XvvVwUULX3YkFEyHnmgA8eVCcK9lzb3EeuXV3OdiSV_sClo", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "b58babe2-0dde-4e95-ae63-5221c0eed12d"}, {"timestamp": "2025-09-30T15:04:58.765Z", "date_only": false, "value": "2025-09-30T15:04:58.765806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m22sdod6h226", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "39dbb950-f56c-4fb3-88b8-d665d7ab3a34", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m22sdod6h226"}, {"timestamp": "2025-09-30T15:16:11.193Z", "date_only": false, "value": "2025-09-30T15:16:11.193360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m22sxf7gns2c", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "d2657026-fea7-43ed-96f1-348013e6d40c", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m22sxf7gns2c"}, {"timestamp": "2025-09-30T18:25:49.577Z", "date_only": false, "value": "2025-09-30T18:25:49.577092Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zakthoreson.bsky.social/post/3m235kqi75c2h", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "9c2ac777-75d3-4ef0-a75d-53ef08be7437", "url": "https://bsky.app/profile/zakthoreson.bsky.social/post/3m235kqi75c2h"}, {"timestamp": "2025-09-30T20:17:50Z", "date_only": false, "value": "2025-09-30T20:17:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/10264", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "67a10394-db9c-469b-8f9b-18552d08d335", "content": "You name it, VMware elevates it (CVE-2025-41244)\n\nhttps://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/", "url": "https://t.me/thebugbountyhunter/10264"}, {"timestamp": "2025-09-30T21:02:37.382Z", "date_only": false, "value": "2025-09-30T21:02:37.382565Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m23gd6lzm72p", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "1c5ac38f-a0ba-41b0-9667-938fb803961a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m23gd6lzm72p"}, {"timestamp": "2025-09-30T22:00:00Z", "date_only": false, "value": "2025-09-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-09-30T22:20:07.540Z", "date_only": false, "value": "2025-09-30T22:20:07.540663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m23knrlqm62u", "record": "cve-2025-41244", "field": "creation_timestamp", "uuid": "072a3147-067f-41c7-b161-8b31f7a69d59", "url": "https://bsky.app/profile/cyberhub.blog/post/3m23knrlqm62u"}, {"timestamp": "2025-09-30T23:35:51.821Z", "date_only": false, "value": "2025-09-30T23:35:51.821432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23ov7qisc2b", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "64f1bea6-736c-4ad8-9478-4e916f1008fb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23ov7qisc2b"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": true, "value": "2025-10-01", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-23108", "record": "CNVD-2025-23108", "field": "openTime"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": true, "value": "2025-10-01", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-23108", "record": "CNVD-2025-23108", "field": "submitTime"}, {"timestamp": "2025-10-01T00:12:04.936Z", "date_only": false, "value": "2025-10-01T00:12:04.936342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23qvv4huc2b", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "df6852b6-eaea-4e40-9bd0-acecf3633e7f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23qvv4huc2b"}, {"timestamp": "2025-10-01T00:42:11.867Z", "date_only": false, "value": "2025-10-01T00:42:11.867982Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23slpqph22b", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "5492f258-e0ac-4aaa-814d-ee621a309eb9", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23slpqph22b"}, {"timestamp": "2025-10-01T01:05:38.456Z", "date_only": false, "value": "2025-10-01T01:05:38.456695Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m23tvqwvdu27", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "6f585aa0-88e0-4267-bd5e-cab808d6004d", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3m23tvqwvdu27"}, {"timestamp": "2025-10-01T04:53:38.883Z", "date_only": false, "value": "2025-10-01T04:53:38.883552Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3m24aneihpk2f", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "06084265-d07e-4403-984e-4dee878acf2e", "url": "https://bsky.app/profile/samilaiho.com/post/3m24aneihpk2f"}, {"timestamp": "2025-10-01T06:32:36.193Z", "date_only": false, "value": "2025-10-01T06:32:36.193265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m24g6fak5t2f", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "ba6ed581-36cb-4612-8807-fe51667adc21", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m24g6fak5t2f"}, {"timestamp": "2025-10-01T09:30:21Z", "date_only": false, "value": "2025-10-01T09:30:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/623", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "2344c643-0adf-49b8-8c43-83afadb53a6d", "content": "Top Security News for Today\n\nKlopatra: exposing a new Android banking trojan operation with roots in Turkey | Cleafy LABS  \nhttps://arxiv.org/abs/2509.22662\n\nAn In-depth research-based walk-through of an Uninitialized Local Variable Static Analyzer  \nhttps://www.reddit.com/r/netsec/comments/1nu7f3y/an_indepth_researchbased_walkthrough_of_an/\n\nYou name it, VMware elevates it (CVE-2025-41244)  \nhttps://www.reddit.com/r/netsec/comments/1nu9q24/you_name_it_vmware_elevates_it_cve202541244/\n\nDetails of a Scam  \nhttps://www.schneier.com/blog/archives/2025/09/details-of-a-scam.html\n\nEmpowering defenders in the era of agentic AI with Microsoft Sentinel  \nhttps://www.microsoft.com/en-us/security/blog/2025/09/30/empowering-defenders-in-the-era-of-agentic-ai-with-microsoft-sentinel/\n\nCyberattack on Japanese beer giant Asahi limits shipping, call center operations  \nhttps://therecord.media/asahi-japan-cyberattack-limits-shipping-call-centers\n\nAfghanistan plunged into nationwide internet blackout, disrupting air travel, medical care  \nhttps://therecord.media/afghanistan-plunged-into-nationwide-internet-blackout\n\nFTC alleges messaging app violated child privacy law, duped users into subscriptions  \nhttps://therecord.media/ftc-alleges-sendit-app-violated-children-privacy-rule\n\nCISA orders federal gov to patch critical Fortra file transfer bug  \nhttps://therecord.media/cisa-orders-federal-gov-patch-fortra-bug\n\nCPPA fines Tractor Supply Company $1.4 million for privacy violations  \nhttps://therecord.media/ccpa-tractor-supply-privacy-fine\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/623"}, {"timestamp": "2025-10-01T09:36:58.722Z", "date_only": false, "value": "2025-10-01T09:36:58.722272Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m24qi3tghp2q", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "2f5ed88b-7765-4270-82cb-c7abc7292a69", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m24qi3tghp2q"}, {"timestamp": "2025-10-01T11:05:10.561Z", "date_only": false, "value": "2025-10-01T11:05:10.561008Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m24vfryc7s2a", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "3ddffb5e-7531-44e6-b90f-974ecf882094", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m24vfryc7s2a"}, {"timestamp": "2025-10-01T11:10:31.090Z", "date_only": false, "value": "2025-10-01T11:10:31.090024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3m24vpdliq32a", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "06e85a1b-d2a1-499e-b406-886084505854", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3m24vpdliq32a"}, {"timestamp": "2025-10-01T13:12:27.097Z", "date_only": false, "value": "2025-10-01T13:12:27.097149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m254jfauss2l", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "28d553db-bb00-491d-8f6a-91bf30affc6c", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m254jfauss2l"}, {"timestamp": "2025-10-01T13:53:11.705Z", "date_only": false, "value": "2025-10-01T13:53:11.705835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m256s4vgic2n", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "17faeb93-305a-4fce-b21c-79967a66a960", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m256s4vgic2n"}, {"timestamp": "2025-10-01T16:02:21.342Z", "date_only": false, "value": "2025-10-01T16:02:21.342039Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m25fz6gbof2x", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "cdbd0128-b133-429a-bb00-7ba5e08f89da", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3m25fz6gbof2x"}, {"timestamp": "2025-10-01T17:51:36.772Z", "date_only": false, "value": "2025-10-01T17:51:36.772040Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3m25m3zzpccc2", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "b2634a3f-4c5d-4dd4-b726-493cc7327953", "url": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3m25m3zzpccc2"}, {"timestamp": "2025-10-01T20:09:31.269Z", "date_only": false, "value": "2025-10-01T20:09:31.269366Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m25tt2p5ps27", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "1c79c4e9-6b0f-4af6-9737-345fb6a534da", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m25tt2p5ps27"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15595-1", "record": "OPENSUSE-SU-2025:15595-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15595-1", "record": "OPENSUSE-SU-2025:15595-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15595-1", "record": "OPENSUSE-SU-2025:15595-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15595-1", "record": "OPENSUSE-SU-2025:15595-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-02T03:34:47.320Z", "date_only": false, "value": "2025-10-02T03:34:47.320625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m26mp7rozc2t", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "89a507c0-3eaf-4960-90b3-8b73f5749a6c", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m26mp7rozc2t"}, {"timestamp": "2025-10-02T09:27:24.220Z", "date_only": false, "value": "2025-10-02T09:27:24.220538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3m27aflm3ank2", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "8dae690a-39cf-4042-9114-416c560b948f", "url": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3m27aflm3ank2"}, {"timestamp": "2025-10-02T12:48:28.196Z", "date_only": false, "value": "2025-10-02T12:48:28.196785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m27lnffr2c2m", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "10504ff2-c4dd-43c1-bb33-2017287c8d9e", "url": "https://bsky.app/profile/shiojiri.com/post/3m27lnffr2c2m"}, {"timestamp": "2025-10-02T21:02:31.164Z", "date_only": false, "value": "2025-10-02T21:02:31.164450Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2ahaqa2hc2i", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "f26d08fa-8b0c-47cd-92b6-1e312e43f99e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2ahaqa2hc2i"}, {"timestamp": "2025-10-03T13:05:12.749Z", "date_only": false, "value": "2025-10-03T13:05:12.749008Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mbissey.bsky.social/post/3m2c52bnfn72c", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "f6808bdd-6cab-4ae6-b284-efdad77141ac", "url": "https://bsky.app/profile/mbissey.bsky.social/post/3m2c52bnfn72c"}, {"timestamp": "2025-10-03T13:51:04.679Z", "date_only": false, "value": "2025-10-03T13:51:04.679700Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/115310556839722676", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "45e8940b-ea64-4d79-8fba-b5f72f0bd185", "url": "https://infosec.exchange/users/harrysintonen/statuses/115310556839722676"}, {"timestamp": "2025-10-03T15:01:14.712Z", "date_only": false, "value": "2025-10-03T15:01:14.712390Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-3cf07d5d-2ed66cf466a5d29a", "record": "cve-2025-41244", "field": "creation_timestamp", "uuid": "9f9939ee-4a2a-4669-97a0-bddefd1e10f4", "url": "https://poliverso.org/objects/0477a01e-3cf07d5d-2ed66cf466a5d29a"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-10-05T23:35:21Z", "date_only": false, "value": "2025-10-05T23:35:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=0CD46310-0F91-5C94-9EDD-9733C68AF3B6&utm_source=rss&utm_medium=rss", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "3fc01a84-f145-4397-a468-0fa0cf3b666c", "url": "https://sploitus.com/exploit?id=0CD46310-0F91-5C94-9EDD-9733C68AF3B6&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-05T23:35:21Z", "date_only": false, "value": "2025-10-05T23:35:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=0CD46310-0F91-5C94-9EDD-9733C68AF3B6&utm_source=rss&utm_medium=rss", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "106c4a85-0fec-4dd3-bab4-37ae7bff7c61", "url": "https://sploitus.com/exploit?id=0CD46310-0F91-5C94-9EDD-9733C68AF3B6&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T03:00:10Z", "date_only": false, "value": "2025-10-06T03:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DvK5Zd99vmNqswWfv0673pzr_yxwiZ5knCvMzZjk6DiVCn8", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "e8eb176e-fb21-452f-bd2b-b976c52a9e1f"}, {"timestamp": "2025-10-06T05:25:17.316Z", "date_only": false, "value": "2025-10-06T05:25:17.316764Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3m2iuqkfkscu2", "record": "cve-2025-41244", "field": "creation_timestamp", "uuid": "61aed9de-707a-484f-841f-70cac7a703c8", "url": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3m2iuqkfkscu2"}, {"timestamp": "2025-10-06T09:00:04Z", "date_only": false, "value": "2025-10-06T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cPtN8zT2SnIpst_mCQq3aWBw8_Qfv87fHZTqq98UoI4vu1g", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "0bc86cbe-252e-481c-b47f-1b54e891c64a"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2025:17428", "record": "RHSA-2025:17428", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2025:17509", "record": "RHSA-2025:17509", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2025:17428", "record": "RHSA-2025:17428", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2025:17509", "record": "RHSA-2025:17509", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2025:17428", "record": "RHSA-2025:17428", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2025:17509", "record": "RHSA-2025:17509", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2025:17428", "record": "RHSA-2025:17428", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2025:17509", "record": "RHSA-2025:17509", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2025:17428", "record": "ALSA-2025:17428", "field": "published"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2025:17429", "record": "ALSA-2025:17429", "field": "published"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2025:17509", "record": "ALSA-2025:17509", "field": "published"}, {"timestamp": "2025-10-07T05:56:39Z", "date_only": false, "value": "2025-10-07T05:56:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T05:56:39Z", "date_only": false, "value": "2025-10-07T05:56:39+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-07T05:56:39Z", "date_only": false, "value": "2025-10-07T05:56:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T07:59:24Z", "date_only": false, "value": "2025-10-07T07:59:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T07:59:24Z", "date_only": false, "value": "2025-10-07T07:59:24+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-07T07:59:24Z", "date_only": false, "value": "2025-10-07T07:59:24+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T08:07:51Z", "date_only": false, "value": "2025-10-07T08:07:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T08:07:51Z", "date_only": false, "value": "2025-10-07T08:07:51+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-07T08:07:51Z", "date_only": false, "value": "2025-10-07T08:07:51+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T09:30:19Z", "date_only": false, "value": "2025-10-07T09:30:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T09:30:19Z", "date_only": false, "value": "2025-10-07T09:30:19+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-07T09:30:19Z", "date_only": false, "value": "2025-10-07T09:30:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T11:10:28Z", "date_only": false, "value": "2025-10-07T11:10:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/f4BoAopdku9Dj6RZAvyxQmhrUgDBruEQHJrVzyfJG5EHf8GA", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "17fdee53-4565-42f8-bb0f-e142d59bbcab"}, {"timestamp": "2025-10-07T17:21:45Z", "date_only": false, "value": "2025-10-07T17:21:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T17:21:45Z", "date_only": false, "value": "2025-10-07T17:21:45+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-07T17:21:45Z", "date_only": false, "value": "2025-10-07T17:21:45+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T17:29:39Z", "date_only": false, "value": "2025-10-07T17:29:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T17:29:39Z", "date_only": false, "value": "2025-10-07T17:29:39+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-07T17:29:39Z", "date_only": false, "value": "2025-10-07T17:29:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T17:31:58Z", "date_only": false, "value": "2025-10-07T17:31:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-07T17:31:58Z", "date_only": false, "value": "2025-10-07T17:31:58+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-07T17:31:58Z", "date_only": false, "value": "2025-10-07T17:31:58+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-07T22:00:00Z", "date_only": false, "value": "2025-10-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-10-08T05:53:26.054Z", "date_only": false, "value": "2025-10-08T05:53:26.054586Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/anthroposamu.mastodon.social.ap.brid.gy/post/3m2nx7mytic22", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "cb2411db-e0a5-44b7-bf41-b3f8538cd2c0", "url": "https://bsky.app/profile/anthroposamu.mastodon.social.ap.brid.gy/post/3m2nx7mytic22"}, {"timestamp": "2025-10-08T06:39:51.147Z", "date_only": false, "value": "2025-10-08T06:39:51.147861Z", "kind": "sighting", "label": "Exploited", "source": "https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "2e099db6-98ac-4dc2-a71f-c01fb6573b64", "url": "https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/"}, {"timestamp": "2025-10-08T10:29:36Z", "date_only": false, "value": "2025-10-08T10:29:36Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2025:17509", "record": "ALSA-2025:17509", "field": "modified"}, {"timestamp": "2025-10-08T11:21:49Z", "date_only": false, "value": "2025-10-08T11:21:49Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2025:17429", "record": "ALSA-2025:17429", "field": "modified"}, {"timestamp": "2025-10-08T22:00:00Z", "date_only": false, "value": "2025-10-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-10-09T12:17:07.452Z", "date_only": false, "value": "2025-10-09T12:17:07.452133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m2r55t33wf2z", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "79e2734b-e5fe-493d-9515-c1a2c6604595", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3m2r55t33wf2z"}, {"timestamp": "2025-10-09T15:04:13Z", "date_only": false, "value": "2025-10-09T15:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/codeby_sec/9471", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "e58e9721-af56-4052-b1bd-f1b07cb13c2f", "content": "\ud83c\udde8\ud83c\uddf3 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Zero-day \u0432 VMware!\n\n\ud83d\udcde \u0421\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f VMware \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NVISO Labs , \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Broadcom VMware Tools \u0438 VMware Aria Operations, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c UNC5174.\n\n\u2757\ufe0f \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-41244 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS: 7,8, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 get_version(). \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043a\u0430\u043a VMware Cloud Foundation, VMware vSphere Foundation, VMware Aria Operations, VMware Telco Cloud Platform \u0438 VMware Telco Cloud Infrastructure. \n\n\ud83d\udd0e \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c NVISO \u041c\u0430\u043a\u0441\u0438\u043c \u0422\u0438\u0431\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 19 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e VMware Tools 12.4.9, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 VMware Tools 12.5.4, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows, \u0430 \u0432\u0435\u0440\u0441\u0438\u044f open-vm-tools, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0430\u044f CVE-2025-41244, \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 Linux. \n\n\ud83d\udcbb \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NVISO, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0440\u0435\u043d\u0438\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abget_version()\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0448\u0430\u0431\u043b\u043e\u043d \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f (regex) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0441 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0449\u0438\u043c \u0441\u043e\u043a\u0435\u0442\u043e\u043c, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u044d\u0442\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0448\u0430\u0431\u043b\u043e\u043d\u0443, \u0438, \u0435\u0441\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u044b.\n\n\ud83d\udcbb \u041a\u0430\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0442, \u0448\u0438\u0440\u043e\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, httpd) \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0438\u0434\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043c\u043d\u043e\u0433\u0438\u0445 \u043b\u0435\u0442 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u043b\u0438 \u0432\u044b\u0433\u043e\u0434\u0443 \u0438\u0437 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n\u2757\ufe0f \u0422\u0430\u043a \u0447\u0442\u043e, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b VMware, \u0442\u043e \u0431\u0443\u0434\u044c\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u044b!", "url": "https://t.me/codeby_sec/9471"}, {"timestamp": "2025-10-10T15:15:12Z", "date_only": false, "value": "2025-10-10T15:15:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:03535-1", "record": "SUSE-SU-2025:03535-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-10T15:15:12Z", "date_only": false, "value": "2025-10-10T15:15:12Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:03535-1", "record": "SUSE-SU-2025:03535-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-10T15:15:12Z", "date_only": false, "value": "2025-10-10T15:15:12Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03535-1", "record": "SUSE-SU-2025:03535-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-10T15:15:12Z", "date_only": false, "value": "2025-10-10T15:15:12Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:03535-1", "record": "SUSE-SU-2025:03535-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-10T15:15:12Z", "date_only": false, "value": "2025-10-10T15:15:12Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03535-1", "record": "SUSE-SU-2025:03535-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-12T22:00:00Z", "date_only": false, "value": "2025-10-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2025-10-13T06:59:45Z", "date_only": false, "value": "2025-10-13T06:59:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:03585-1", "record": "SUSE-SU-2025:03585-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-13T06:59:45Z", "date_only": false, "value": "2025-10-13T06:59:45Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:03585-1", "record": "SUSE-SU-2025:03585-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-13T06:59:45Z", "date_only": false, "value": "2025-10-13T06:59:45Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03585-1", "record": "SUSE-SU-2025:03585-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-13T06:59:45Z", "date_only": false, "value": "2025-10-13T06:59:45Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:03585-1", "record": "SUSE-SU-2025:03585-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-13T08:28:00Z", "date_only": false, "value": "2025-10-13T08:28:00Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2025:17428", "record": "ALSA-2025:17428", "field": "modified"}, {"timestamp": "2025-10-14T22:00:00Z", "date_only": false, "value": "2025-10-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2025-10-15T14:56:30Z", "date_only": false, "value": "2025-10-15T14:56:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/notlukatsky/6864", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "e28081e0-ee7b-4f12-a71a-ce9a338d1a1c", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 + PoC\n#CVE #Redis #Oracle #\u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430\n\n\u27a1\ufe0fRedis \u2014 RediShell (CVE-2025-49844, CVSS 10.0)\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 use-after-free \u0432 Lua-\u0434\u0432\u0438\u0436\u043a\u0435 Redis, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 13 \u043b\u0435\u0442. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c Lua-\u0441\u043a\u0440\u0438\u043f\u0442\u044b (EVAL/EVALSHA) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e Lua VM \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 redis-server. \u0412 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 330\u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Redis, \u0438\u0437 \u043d\u0438\u0445 60\u043a \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u27a1\ufe0fVMware Aria Operations / VMware Tools (CVE-2025-41244, CVSS 7.8) \n\nLPE \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u041e\u0421. \u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c VMware Tools \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 Aria Operations \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c Service Discovery Management Pack (SDMP) \u043c\u043e\u0436\u043d\u043e \u0434\u0430\u0436\u0435 \u0441 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043e root/Administrator. \u0417\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in-the-wild.\n\n\u27a1\ufe0fOpenSSH \u2014 ProxyCommand newline injection (CVE-2025-61984, CVSS 7.8)\n\nCommand injection \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 ProxyCommand. \u0415\u0441\u043b\u0438 \u0432 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438/\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b, \u0438\u0442\u043e\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0434\u043b\u044f ProxyCommand \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 shell-\u043e\u043c \u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0422\u043e \u0435\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u044b.\n\n\u27a1\ufe0f Zimbra Collaboration \u2014 Classic Web Client XSS \u0447\u0435\u0440\u0435\u0437 .ICS (CVE-2025-27915, CVSS 6.1). \n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0441\u0430\u043d\u0430\u0446\u0438\u044f HTML \u0432\u043d\u0443\u0442\u0440\u0438 iCalendar (.ICS). \u0412\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 HTML/JS (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ) \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0432 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0443\u043a\u0438/\u0442\u043e\u043a\u0435\u043d\u044b, \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e\u0447\u0442\u0443.\n\n\u27a1\ufe0f3DEXPERIENCE (CVE-2025-9976, CVSS 9.0)\n\n\u0418\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f PLM-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043e\u0442 Dassault Systemes, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0430\u044f CAD, CAE, CAM \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0435\u0434\u0438\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0411\u0430\u0433 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 OS command injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Station Launcher. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0432\u044b\u0437\u043e\u0432 \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0411\u0435\u0437 PoC, \u0437\u0430\u0442\u043e \u0441\u0432\u0435\u0436\u0430\u043a.\n\nP.s. \u043a\u0430\u043a \u0432\u0430\u043c \u0442\u0430\u043a\u043e\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u043f\u043e\u0441\u0442\u043e\u0432? \ud83d\ude2c - \u0435\u0441\u043b\u0438 \u043a\u0430\u0439\u0444, \ud83d\udd25 - \u0435\u0441\u043b\u0438 \u043d\u0430\u0434\u043e \u0435\u0449\u0435 \u0434\u043e\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0422\u0430\u043a\u043e\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e \u043f\u043d\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK | \u2764\ufe0f \u041c\u0435\u0440\u0447", "url": "https://t.me/notlukatsky/6864"}, {"timestamp": "2025-10-17T11:57:06Z", "date_only": false, "value": "2025-10-17T11:57:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20853-1", "record": "SUSE-SU-2025:20853-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-17T11:57:06Z", "date_only": false, "value": "2025-10-17T11:57:06Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:20853-1", "record": "SUSE-SU-2025:20853-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-17T11:57:06Z", "date_only": false, "value": "2025-10-17T11:57:06Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20853-1", "record": "SUSE-SU-2025:20853-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-17T11:57:06Z", "date_only": false, "value": "2025-10-17T11:57:06Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:20853-1", "record": "SUSE-SU-2025:20853-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-17T12:03:07Z", "date_only": false, "value": "2025-10-17T12:03:07Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20866-1", "record": "SUSE-SU-2025:20866-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-17T12:03:07Z", "date_only": false, "value": "2025-10-17T12:03:07Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:20866-1", "record": "SUSE-SU-2025:20866-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-17T12:03:07Z", "date_only": false, "value": "2025-10-17T12:03:07Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20866-1", "record": "SUSE-SU-2025:20866-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-17T12:03:07Z", "date_only": false, "value": "2025-10-17T12:03:07Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:20866-1", "record": "SUSE-SU-2025:20866-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-18T09:50:45Z", "date_only": false, "value": "2025-10-18T09:50:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/424", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "94813822-a421-4dcd-8fd9-0c671785b7c1", "content": "Security Advisories & Proof-of-Concept Brief (Educational & Research Use)\n\nThis brief outlines recently disclosed vulnerabilities, their proof-of-concept (PoC) exploits, and related security tools. This information is intended for defensive research, penetration testing in authorized environments, and strengthening security postures.\n\n#exploit #poc - Recent Vulnerability Exploits\n\nCVE-2025-57529 - CPAS SQL Injection\n\n\u00b7 Brief: SQL Injection vulnerability in CPAS audit management information system.\n\u00b7 Educational Purpose: Understanding and testing for SQLi flaws in management systems.\n\u00b7 Link: https://github.com/songqb-xx/CVE-2025-57529\n\nCVE-2025-56383 - Proof-of-Concept\n\n\u00b7 Brief: A general proof-of-concept exploit for the specified CVE.\n\u00b7 Educational Purpose: Analysis of exploit development and vulnerability verification.\n\u00b7 Link: https://github.com/zer0t0/CVE-2025-56383-Proof-of-Concept\n\nCVE-2025-20281 - Cisco ISE RCE Checker\n\n\u00b7 Brief: A vulnerability checker for a Remote Code Execution flaw in Cisco Identity Services Engine (ISE).\n\u00b7 Educational Purpose: Network security monitoring and identifying vulnerable critical infrastructure.\n\u00b7 Link: https://github.com/grupooruss/CVE-2025-20281-Cisco\n\nCVE-2025-7775 - PoC\n\n\u00b7 Brief: Proof-of-concept for the specified CVE.\n\u00b7 Educational Purpose: Vulnerability research and testing detection capabilities.\n\u00b7 Link: https://github.com/rxerium/CVE-2025-7775\n\nCVE-2025-60880 - Bagisto Stored XSS\n\n\u00b7 Brief: Stored Cross-Site Scripting vulnerability in the Bagisto e-commerce platform's admin panel.\n\u00b7 Educational Purpose: Studying XSS impacts in web applications, especially in privileged panels.\n\u00b7 Link: https://github.com/Shenal01/CVE-2025-60880\n\n#analysis - In-Depth Vulnerability Analysis\n\nCVE-2025-61882 - Oracle E-Business Suite Pre-Auth RCE\n\n\u00b7 Brief: A technical analysis of a pre-authentication Remote Code Execution vulnerability chain in Oracle E-Business Suite.\n\u00b7 Educational Purpose: Understanding complex attack chains against enterprise ERP systems.\n\u00b7 Link: https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882\n\nCVE-2025-3600 - Progress Telerik Unsafe Reflection\n\n\u00b7 Brief: Analysis of an unsafe reflection vulnerability in Progress Telerik UI for ASP.NET AJAX, leading to more than just Denial-of-Service.\n\u00b7 Educational Purpose: Research into exploitation techniques in third-party .NET components.\n\u00b7 Link: https://labs.watchtowr.com/more-than-dos-progress-telerik-ui-for-asp-net-ajax-unsafe-reflection-cve-2025-3600\n\n#tools - Detection & Security Tools\n\nCVE-2025-41244 - Detection Script\n\n\u00b7 Brief: A detection script for identifying systems affected by CVE-2025-41244.\n\u00b7 Educational Purpose: Blue team exercises for building and deploying vulnerability detection.\n\u00b7 Link: https://github.com/rxerium/CVE-2025-41244\n\nCVE-2025-49844 - Redis Lua Parser Use-After-Free\n\n\u00b7 Brief: Proof-of-concept for a Use-After-Free vulnerability in the Redis Lua parser.\n\u00b7 Educational Purpose: Memory corruption research and understanding database server security.\n\u00b7 Link: https://github.com/dwisiswant0/CVE-2025-49844\n\n#maldev #redteam - Red Team Tooling\n\nCrystal-Kit - Cobalt Strike Evasion Kit\n\n\u00b7 Brief: An evasion kit designed to assist with hiding Cobalt Strike team servers.\n\u00b7 Educational Purpose: Researching Command & Control (C2) tradecraft, detection methods, and defensive countermeasures.\n\u00b7 Warning: For authorized red team exercises and malware development research only.\n\u00b7 Blog: https://rastamouse.me/crystal-kit/\n\u00b7 Tool: https://github.com/rasta-mouse/Crystal-Kit\n\nDisclaimer: All resources are for educational and authorized security research only. Use these tools and techniques only on systems you own or have explicit written permission to test. Understanding these threats is crucial for building effective defenses.", "url": "https://t.me/NinjaSec/424"}, {"timestamp": "2025-10-19T22:00:00Z", "date_only": false, "value": "2025-10-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2025-10-26T23:00:00Z", "date_only": false, "value": "2025-10-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-41244", "field": "timestamps.asserted_at", "uuid": "9fd4b32e-9fdc-4ef0-9be1-835efead37fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": true, "value": "2025-10-30", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-41244", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": true, "value": "2025-10-30", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-41244", "field": "evidence.0.details.date_added", "uuid": "9fd4b32e-9fdc-4ef0-9be1-835efead37fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-41244", "field": "timestamps.first_seen_at", "uuid": "9fd4b32e-9fdc-4ef0-9be1-835efead37fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-41244", "field": "status.status_updated_at", "uuid": "9fd4b32e-9fdc-4ef0-9be1-835efead37fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-41244", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-10-30T03:56:00.543Z", "date_only": false, "value": "2025-10-30T03:56:00.543163Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-41244", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-30T03:56:00.543Z", "date_only": false, "value": "2025-10-30T03:56:00.543163Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-41244", "record": "FKIE_CVE-2025-41244", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-30T18:05:03Z", "date_only": false, "value": "2025-10-30T18:05:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av25-629", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "1965e4bd-d6f2-4614-aaba-4f94eab1a693", "url": "https://cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av25-629"}, {"timestamp": "2025-10-30T18:10:03Z", "date_only": false, "value": "2025-10-30T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "3bf8dda0-414b-40b0-b330-b815ae3fa28a"}, {"timestamp": "2025-10-30T19:33:11.040Z", "date_only": false, "value": "2025-10-30T19:33:11.040201Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5017177", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "e55713da-23d7-41f1-884a-73135267b7e3", "url": "https://feedsin.space/feed/CISAKevBot/items/5017177"}, {"timestamp": "2025-10-30T20:02:04.505Z", "date_only": false, "value": "2025-10-30T20:02:04.505312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m4gqwkjvzm23", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "f93388a9-2dc7-46aa-97d7-845a51b75f84", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m4gqwkjvzm23"}, {"timestamp": "2025-10-30T20:04:32.528Z", "date_only": false, "value": "2025-10-30T20:04:32.528358Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115464907783020839", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "99f6058f-78a2-44bb-b701-45399e30f15d", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115464907783020839"}, {"timestamp": "2025-10-30T22:38:43.728Z", "date_only": false, "value": "2025-10-30T22:38:43.728914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m4gzoo6oev2n", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "82612ba3-c5ac-4681-ae3f-85ecae2a95f4", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3m4gzoo6oev2n"}, {"timestamp": "2025-10-31T00:57:06.420Z", "date_only": false, "value": "2025-10-31T00:57:06.420701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3m4hbfyibkc2f", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "60879e09-4558-42ab-8b86-bee03082ad66", "url": "https://bsky.app/profile/tamosan.bsky.social/post/3m4hbfyibkc2f"}, {"timestamp": "2025-10-31T03:56:05Z", "date_only": false, "value": "2025-10-31T03:56:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "f2d1e863-8071-4855-ad2e-ecf4f5f2aab9"}, {"timestamp": "2025-10-31T06:09:00Z", "date_only": false, "value": "2025-10-31T06:09:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/10/cisa-flags-vmware-zero-day-exploited-by.html", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "83ddd45d-f4fd-46ff-98f1-c6767980960b", "url": "https://thehackernews.com/2025/10/cisa-flags-vmware-zero-day-exploited-by.html"}, {"timestamp": "2025-10-31T07:45:59Z", "date_only": false, "value": "2025-10-31T07:45:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/HOFtqqwK_HExeB8WLgUdBxKhax1cjVAegWwJAxYsMXDCwQ", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "c6ac2ac5-4d5e-4e3e-8c9a-bd7353541368"}, {"timestamp": "2025-10-31T07:51:16Z", "date_only": false, "value": "2025-10-31T07:51:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7817", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "a16a514c-a493-4203-878e-a2aab31d6acd", "content": "CISA added a new VMware zero-day to its KEV list.\n\nCVE-2025-41244 (CVSS 7.8) lets local users on VMs with VMware Tools + Aria Operations gain root access.\n\nExploited since Oct 2024 by China-linked UNC5174.\n\nPatch released last month \u2193 https://thehackernews.com/2025/10/cisa-flags-vmware-zero-day-exploited-by.html", "url": "https://t.me/thehackernews/7817"}, {"timestamp": "2025-10-31T09:45:04.491Z", "date_only": false, "value": "2025-10-31T09:45:04.491088Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4i6w6vvpg2m", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "c921105b-37d3-4d50-95a9-c2c95ffde46f", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4i6w6vvpg2m"}, {"timestamp": "2025-10-31T11:22:52Z", "date_only": false, "value": "2025-10-31T11:22:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/10/31/top-attacks-and-breaches.html", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "0b9e4295-fb49-47b0-99af-f2372832d42e", "url": "https://threatintel.cc/2025/10/31/top-attacks-and-breaches.html"}, {"timestamp": "2025-10-31T12:04:48Z", "date_only": false, "value": "2025-10-31T12:04:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/54386", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "5ffdad8c-b9c4-45af-a9fb-9ca73a9511e1", "content": "CISA Adds Exploited XWiki, VMware Flaws to KEV Catalog\nhttps://www.securityweek.com/cisa-adds-exploited-xwiki-vmware-flaws-to-kev-catalog/\n\nBroadcom has updated its advisory on CVE-2025-41244 to mention the vulnerability\u2019s in-the-wild exploitation.\nThe post CISA Adds Exploited XWiki, VMware Flaws to KEV Catalog (https://www.securityweek.com/cisa-adds-exploited-xwiki-vmware-flaws-to-kev-catalog/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/54386"}, {"timestamp": "2025-10-31T17:30:25.734Z", "date_only": false, "value": "2025-10-31T17:30:25.734251Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m4iywcnnvp2m", "record": "cve-2025-41244", "field": "creation_timestamp", "uuid": "eb2579cc-84d2-4f2c-b376-3a28f09ce076", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m4iywcnnvp2m"}, {"timestamp": "2025-10-31T18:15:44.073Z", "date_only": false, "value": "2025-10-31T18:15:44.073281Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m4j3hd3xfj2a", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "6d0c7188-3c0d-48a3-b2eb-469447ac7d76", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3m4j3hd3xfj2a"}, {"timestamp": "2025-10-31T18:16:16.804Z", "date_only": false, "value": "2025-10-31T18:16:16.804470Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115470143307389370", "record": "cve-2025-41244", "field": "creation_timestamp", "uuid": "e810baeb-21f4-49df-8c50-f53d844447f6", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/115470143307389370"}, {"timestamp": "2025-10-31T21:02:51.183Z", "date_only": false, "value": "2025-10-31T21:02:51.183528Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jerns2zi2e", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "f629019d-6b76-4e88-844c-3580c7f632bf", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jerns2zi2e"}, {"timestamp": "2025-11-01T10:20:04.219Z", "date_only": false, "value": "2025-11-01T10:20:04.219223Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4krdodjg22v", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "2a83fb1c-b28d-41cd-8ba7-31cbc2602086", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4krdodjg22v"}, {"timestamp": "2025-11-01T15:16:04.326Z", "date_only": false, "value": "2025-11-01T15:16:04.326163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4lbuxik5527", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "5ef26245-c449-4fee-ba43-386f76d51cd2", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4lbuxik5527"}, {"timestamp": "2025-11-03T20:57:24.218Z", "date_only": false, "value": "2025-11-03T20:57:24.218714Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4qvv4g7f225", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "7481c3e7-e6bd-4c69-85f4-064b7fe59dde", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4qvv4g7f225"}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": true, "value": "2025-11-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2025-11-04T03:41:16.114Z", "date_only": false, "value": "2025-11-04T03:41:16.114523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4rmhag67c26", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "99623af0-b0d7-487b-bd71-22df153c5191", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4rmhag67c26"}, {"timestamp": "2025-11-04T21:10:25.953Z", "date_only": false, "value": "2025-11-04T21:10:25.953Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-41244", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T23:00:00Z", "date_only": false, "value": "2025-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "last_revision_date"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "revisions.0.revision_date"}, {"timestamp": "2025-11-05T00:31:28Z", "date_only": false, "value": "2025-11-05T00:31:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-76FP-M4VP-HXRQ", "record": "GHSA-76FP-M4VP-HXRQ", "field": "modified"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "last_revision_date"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": true, "value": "2025-11-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "revisions.0.revision_date"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": true, "value": "2025-11-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": true, "value": "2025-11-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "vendor_advisories.10.published_at"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": true, "value": "2025-11-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-11-11T15:57:03Z", "date_only": false, "value": "2025-11-11T15:57:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/59288", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "8837269b-55ba-49de-8007-e8851259d8db", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-41244 is a critical local privilege escalation vulnerability in VMware Aria Operations and VMware Tools\nURL\uff1ahttps://github.com/IBO-ATTACKS/CVE-2025-41244\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/59288"}, {"timestamp": "2025-11-11T19:47:03Z", "date_only": false, "value": "2025-11-11T19:47:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/u5yzdlTNRMSYoIGHk1Ki73SNjmsacr_63wfexMDM4b3zIA", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "bd8fd0a7-2654-458e-a20e-5cf314f2a9cd"}, {"timestamp": "2025-11-11T21:00:05Z", "date_only": false, "value": "2025-11-11T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sh_Wj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AM_pVdB8", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "7e199be0-13c7-437d-a580-9ab1482b78e1"}, {"timestamp": "2025-11-11T23:54:17.676Z", "date_only": false, "value": "2025-11-11T23:54:17.676566Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/180vault.bsky.social/post/3m5fdignhrc2d", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "3bc9adba-5a9d-4549-88da-fc57b1ef2000", "url": "https://bsky.app/profile/180vault.bsky.social/post/3m5fdignhrc2d"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": true, "value": "2025-11-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-13T00:00:00Z", "date_only": true, "value": "2025-11-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "vendor_advisories.14.published_at"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "last_revision_date"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "initial_release_date"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1013", "record": "CERTFR-2025-AVI-1013", "field": "revisions.0.revision_date"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": true, "value": "2025-11-20", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-41244", "field": "evidence.0.details.due_date", "uuid": "9fd4b32e-9fdc-4ef0-9be1-835efead37fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-05T12:35:59.363Z", "date_only": false, "value": "2025-12-05T12:35:59.363930Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce", "record": "cve-2025-41244", "field": "creation_timestamp", "uuid": "290ac3a2-b134-43c5-af3b-207fbe6786e2", "url": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20100-1", "record": "SUSE-SU-2026:20100-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:20100-1", "record": "SUSE-SU-2026:20100-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:20100-1", "record": "SUSE-SU-2026:20100-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:20100-1", "record": "SUSE-SU-2026:20100-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-20T11:00:32Z", "date_only": false, "value": "2026-01-20T11:00:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-20T11:02:10Z", "date_only": false, "value": "2026-01-20T11:02:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-20T11:02:10Z", "date_only": false, "value": "2026-01-20T11:02:10Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-01-20T11:02:10Z", "date_only": false, "value": "2026-01-20T11:02:10Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-20T11:02:10Z", "date_only": false, "value": "2026-01-20T11:02:10Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-21T23:00:00Z", "date_only": false, "value": "2026-01-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2026-01-22T23:00:00Z", "date_only": false, "value": "2026-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2026-01-22T23:00:00Z", "date_only": false, "value": "2026-01-22T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-23T09:21:12.513Z", "date_only": false, "value": "2026-01-23T09:21:12.513+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2153", "record": "WID-SEC-W-2025-2153", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-23T19:51:27.991Z", "date_only": false, "value": "2026-01-23T19:51:27.991168Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3md4hxjaju22d", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "6bbc82e7-8886-4666-8e84-ec4eb025251d", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3md4hxjaju22d"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-41244", "field": "timestamps.recorded_at", "uuid": "9fd4b32e-9fdc-4ef0-9be1-835efead37fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:47.152Z", "date_only": false, "value": "2026-02-02T12:25:47.152033Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9fd4b32e-9fdc-4ef0-9be1-835efead37fb", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "a421d7e4-8345-4058-b04e-ba074fedfef0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9fd4b32e-9fdc-4ef0-9be1-835efead37fb"}, {"timestamp": "2026-02-07T11:53:00.904Z", "date_only": false, "value": "2026-02-07T11:53:00.904119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mebea22iw22o", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "6bc99e0d-330e-4c0b-9c0d-a133d8594ed7", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mebea22iw22o"}, {"timestamp": "2026-02-09T23:00:00Z", "date_only": false, "value": "2026-02-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0349", "record": "WID-SEC-W-2026-0349", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-09T23:00:00Z", "date_only": false, "value": "2026-02-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0349", "record": "WID-SEC-W-2026-0349", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-02-09T23:00:00Z", "date_only": false, "value": "2026-02-09T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0349", "record": "WID-SEC-W-2026-0349", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": true, "value": "2026-02-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0162", "record": "CERTFR-2026-AVI-0162", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0162", "record": "CERTFR-2026-AVI-0162", "field": "last_revision_date"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0162", "record": "CERTFR-2026-AVI-0162", "field": "initial_release_date"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0162", "record": "CERTFR-2026-AVI-0162", "field": "revisions.0.revision_date"}, {"timestamp": "2026-02-13T04:00:00Z", "date_only": false, "value": "2026-02-13T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1763", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "6b50e0f9-b151-4fa2-93e4-476ceb41609b", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1763"}, {"timestamp": "2026-02-26T17:47:52.174Z", "date_only": false, "value": "2026-02-26T17:47:52.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-41244", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:47:52.174Z", "date_only": false, "value": "2026-02-26T17:47:52.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-41244", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-04T15:30:53Z", "date_only": false, "value": "2026-03-04T15:30:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2026:20677-1", "record": "SUSE-RU-2026:20677-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-04T15:30:53Z", "date_only": false, "value": "2026-03-04T15:30:53Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-RU-2026:20677-1", "record": "SUSE-RU-2026:20677-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-03-04T15:30:53Z", "date_only": false, "value": "2026-03-04T15:30:53Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-RU-2026:20677-1", "record": "SUSE-RU-2026:20677-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-04T15:30:53Z", "date_only": false, "value": "2026-03-04T15:30:53Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-RU-2026:20677-1", "record": "SUSE-RU-2026:20677-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-16T23:00:00Z", "date_only": false, "value": "2026-03-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0349", "record": "WID-SEC-W-2026-0349", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-16T23:00:00Z", "date_only": false, "value": "2026-03-16T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0349", "record": "WID-SEC-W-2026-0349", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-17T09:58:04.322Z", "date_only": false, "value": "2026-03-17T09:58:04.322+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0349", "record": "WID-SEC-W-2026-0349", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-22T07:56:54Z", "date_only": false, "value": "2026-04-22T07:56:54Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-41244", "record": "UBUNTU-CVE-2025-41244", "field": "modified"}, {"timestamp": "2026-06-01T10:43:11Z", "date_only": false, "value": "2026-06-01T10:43:11+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-41244", "field": "timestamps.asserted_at", "uuid": "a409d159-0c68-4be8-ab9a-fbac1959c28b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:43:11Z", "date_only": false, "value": "2026-06-01T10:43:11+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-41244", "field": "timestamps.first_seen_at", "uuid": "a409d159-0c68-4be8-ab9a-fbac1959c28b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:43:11Z", "date_only": false, "value": "2026-06-01T10:43:11+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-41244", "field": "status.status_updated_at", "uuid": "a409d159-0c68-4be8-ab9a-fbac1959c28b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:43:11.593Z", "date_only": false, "value": "2026-06-01T10:43:11.593Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-41244", "field": "evidence.0.details.added_date", "uuid": "a409d159-0c68-4be8-ab9a-fbac1959c28b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:45:22.838Z", "date_only": false, "value": "2026-06-19T12:45:22.838964Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c0592b5f-a0e8-428a-be0e-636ca302db9b", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "6018c4b2-a1b0-4aa1-8229-178049681e28", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c0592b5f-a0e8-428a-be0e-636ca302db9b"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-41244", "field": "timestamps.recorded_at", "uuid": "a409d159-0c68-4be8-ab9a-fbac1959c28b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:48.303Z", "date_only": false, "value": "2026-06-23T14:03:48.303012Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a409d159-0c68-4be8-ab9a-fbac1959c28b", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "e16aed74-a060-409a-9688-2f8593e87b3e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a409d159-0c68-4be8-ab9a-fbac1959c28b"}, {"timestamp": "2026-07-20T19:00:09.850Z", "date_only": false, "value": "2026-07-20T19:00:09.850268Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2780", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "36c33db2-decf-4c75-bb46-b3b51d268e6e", "content": "CVE-2025-41244 - VMware LPE\n*\nBackground + Analysis + POC exploit", "url": "https://t.me/proxy_bar/2780"}, {"timestamp": "2026-07-22T00:00:25.602Z", "date_only": false, "value": "2026-07-22T00:00:25.602918Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2780", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "31942c0e-7395-4710-8b52-76a46b3cdb68", "content": "CVE-2025-41244 - VMware LPE\n*\nBackground + Analysis + POC exploit", "url": "https://t.me/proxy_bar/2780"}, {"timestamp": "2026-07-22T05:00:04.968Z", "date_only": false, "value": "2026-07-22T05:00:04.968143Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/995", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "bd1d55a4-dc20-4589-9b78-7c0cc30e12ed", "content": "Researchers Warn of Active Exploitation in Enterprise Virtual Environments\n\nOrganizations relying on VMware hypervisors are facing an urgent security crisis. A newly discovered zero-day vulnerability, tracked as CVE-2025-41244, is being exploited in the wild to gain root-level privileges without authentication. The flaw impacts both VMware Tools (open-vm-tools) and the Aria Operations Service Discovery Management Pack (SDMP).\n\n\ud83d\udd17 Read More", "url": "https://t.me/pphm_HackerNews/995"}, {"timestamp": "2026-07-23T00:00:25.137Z", "date_only": false, "value": "2026-07-23T00:00:25.137116Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/995", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "e3861d85-c403-4c9f-ab45-6aa204a43e1f", "content": "Researchers Warn of Active Exploitation in Enterprise Virtual Environments\n\nOrganizations relying on VMware hypervisors are facing an urgent security crisis. A newly discovered zero-day vulnerability, tracked as CVE-2025-41244, is being exploited in the wild to gain root-level privileges without authentication. The flaw impacts both VMware Tools (open-vm-tools) and the Aria Operations Service Discovery Management Pack (SDMP).\n\n\ud83d\udd17 Read More", "url": "https://t.me/pphm_HackerNews/995"}, {"timestamp": "2026-07-24T01:02:03Z", "date_only": false, "value": "2026-07-24T01:02:03.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-41244", "record": "MSRC_CVE-2025-41244", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-24T01:02:03Z", "date_only": false, "value": "2026-07-24T01:02:03.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-41244", "record": "MSRC_CVE-2025-41244", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-24T01:02:03Z", "date_only": false, "value": "2026-07-24T01:02:03.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-41244", "record": "MSRC_CVE-2025-41244", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-25T14:40:29Z", "date_only": false, "value": "2026-07-25T14:40:29.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-41244", "record": "MSRC_CVE-2025-41244", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-07-25T14:40:29Z", "date_only": false, "value": "2026-07-25T14:40:29.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-41244", "record": "MSRC_CVE-2025-41244", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-25T15:00:11.955Z", "date_only": false, "value": "2026-07-25T15:00:11.955336Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/562", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "ce8ec2cd-a727-46dd-bd44-d9a1090cb0e3", "content": "0\ufe0f\u20e3\u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d 0Day \u0432 VMware, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430\n\n\ud83d\udd10\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Broadcom \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-41244 \u0432 VMware Aria Operations \u0438 VMware Tools, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0435\u0449\u0451 \u0432 \u043c\u0430\u0435, \u0430 \u0444\u0430\u043a\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0431\u044b\u043b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 NVISO, \u0441\u0432\u044f\u0437\u0430\u0432\u0448\u0435\u0439 \u0438\u0445 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 UNC5174.\n\n\u2699\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0432 /tmp/httpd, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0430\u0431\u044b\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\ud83c\udfaf \u0417\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0441\u0442\u043e\u0438\u0442 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 UNC5174, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430\u0445 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0438\u0442\u0430\u044f \u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0431\u0440\u0435\u0448\u0438 \u0432 F5 BIG-IP, ConnectWise ScreenConnect \u0438 SAP NetWeaver \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 \u0421\u0428\u0410, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n#vmware #broadcom #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/562"}, {"timestamp": "2026-07-26T00:00:31.839Z", "date_only": false, "value": "2026-07-26T00:00:31.839736Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/562", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "24fe1ce2-30f3-4d3b-a185-2ec191efe196", "content": "0\ufe0f\u20e3\u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d 0Day \u0432 VMware, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430\n\n\ud83d\udd10\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Broadcom \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-41244 \u0432 VMware Aria Operations \u0438 VMware Tools, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0435\u0449\u0451 \u0432 \u043c\u0430\u0435, \u0430 \u0444\u0430\u043a\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0431\u044b\u043b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 NVISO, \u0441\u0432\u044f\u0437\u0430\u0432\u0448\u0435\u0439 \u0438\u0445 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 UNC5174.\n\n\u2699\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0432 /tmp/httpd, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0430\u0431\u044b\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\ud83c\udfaf \u0417\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0441\u0442\u043e\u0438\u0442 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 UNC5174, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430\u0445 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0438\u0442\u0430\u044f \u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0431\u0440\u0435\u0448\u0438 \u0432 F5 BIG-IP, ConnectWise ScreenConnect \u0438 SAP NetWeaver \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 \u0421\u0428\u0410, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n#vmware #broadcom #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/562"}, {"timestamp": "2026-07-26T02:00:08.714Z", "date_only": false, "value": "2026-07-26T02:00:08.714407Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/957", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "81035935-dd1d-4ed9-bb8a-b7c4ea6d8da4", "content": "You name it, VMware elevates it (CVE-2025-41244)\nhttps://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/:\n\n1. When service discovery operates in the modern credential-less mode, the VMware Tools will eventually trigger the privilege escalation once it runs the collector plugin.\n2. Under certain circumstances, exploitation may forensically be confirmed in legacy credential-based mode through the analysis of lingering metrics collector scripts and outputs under the /tmp/VMware-SDMP-Scripts-{UUID}/ folders.\n3. The broad practice of mimicking system binaries (e.g., httpd) highlight the real possibility that several other malware strains have accidentally been benefiting from unintended privilege escalations for years.\n\n@secharvester", "url": "https://t.me/cyberwarehouse/957"}, {"timestamp": "2026-07-26T02:00:28.851Z", "date_only": false, "value": "2026-07-26T02:00:28.851506Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/4139", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "74477549-48b5-4f88-a599-30de1c155893", "content": "Zero-Day \u0432 VMware: \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u043d\u0435\u0441\u043b\u043e \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e Broadcom VMware Tools \u0438 VMware Aria Operations, \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0435\u0451 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-41244 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0430\u0432, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 VMware Tools \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 Aria Operations \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c SDMP, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 VMware \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u043d\u043e \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u0430\u043c\u0438 \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NVISO Labs, \u044d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0433\u0440\u0443\u043f\u043f\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google Mandiant \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a UNC5174. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 KEV \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 XWiki, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u044e\u0431\u043e\u043c\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \"/bin/get/Main/SolrSearch\"; \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n#\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/d9ff60", "url": "https://t.me/EchelonEyes/4139"}, {"timestamp": "2026-07-26T07:21:16.601Z", "date_only": false, "value": "2026-07-26T07:21:16.601Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-41244", "record": "MSRC_CVE-2025-41244", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-27T00:00:08.732Z", "date_only": false, "value": "2026-07-27T00:00:08.732374Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/4139", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "69c37be0-6dd3-48a0-be1e-316e0094ec38", "content": "Zero-Day \u0432 VMware: \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u043d\u0435\u0441\u043b\u043e \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e Broadcom VMware Tools \u0438 VMware Aria Operations, \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0435\u0451 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-41244 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0430\u0432, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 VMware Tools \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 Aria Operations \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c SDMP, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 VMware \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u043d\u043e \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u0430\u043c\u0438 \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NVISO Labs, \u044d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0433\u0440\u0443\u043f\u043f\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google Mandiant \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a UNC5174. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 KEV \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 XWiki, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u044e\u0431\u043e\u043c\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \"/bin/get/Main/SolrSearch\"; \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n#\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/d9ff60", "url": "https://t.me/EchelonEyes/4139"}, {"timestamp": "2026-07-27T00:00:31.744Z", "date_only": false, "value": "2026-07-27T00:00:31.744458Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/957", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "8ee034d4-5e19-481f-8cfc-7a54eb6905cc", "content": "You name it, VMware elevates it (CVE-2025-41244)\nhttps://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/:\n\n1. When service discovery operates in the modern credential-less mode, the VMware Tools will eventually trigger the privilege escalation once it runs the collector plugin.\n2. Under certain circumstances, exploitation may forensically be confirmed in legacy credential-based mode through the analysis of lingering metrics collector scripts and outputs under the /tmp/VMware-SDMP-Scripts-{UUID}/ folders.\n3. The broad practice of mimicking system binaries (e.g., httpd) highlight the real possibility that several other malware strains have accidentally been benefiting from unintended privilege escalations for years.\n\n@secharvester", "url": "https://t.me/cyberwarehouse/957"}, {"timestamp": "2026-07-29T12:02:01.373Z", "date_only": false, "value": "2026-07-29T12:02:01.373155Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5449", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "b3278784-2bc5-42cd-9f8d-d438b3636eb4", "content": "You name it, VMware elevates it (CVE-2025-41244) #CVE202541244 #VMware #PrivilegeEscalation #ZeroDay #ServiceDiscovery https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/", "url": "https://t.me/reverseame/5449"}, {"timestamp": "2026-08-01T23:00:04.443Z", "date_only": false, "value": "2026-08-01T23:00:04.443563Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5449", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "8f825e55-61db-4659-8d09-25ce9b74e6bc", "content": "You name it, VMware elevates it (CVE-2025-41244) #CVE202541244 #VMware #PrivilegeEscalation #ZeroDay #ServiceDiscovery https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/", "url": "https://t.me/reverseame/5449"}, {"timestamp": "2026-08-14T16:00:06.524Z", "date_only": false, "value": "2026-08-14T16:00:06.524171Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1161", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "a9bade27-3807-4203-8af1-3c5b85a9c34f", "content": "\u26a0\ufe0f \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 VMware \u2014 CVE-2025-41244\n\nCVE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 service discovery \u0432 VMware Tools \u0438 VMware Aria Operations. \u0412 open-vm-tools (\u0438 \u0432 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 VMware Aria Operations) \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043e\u0431\u0449\u0438\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0431\u0438\u043d\u0430\u0440\u0435\u0439 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0412 \u0440\u044f\u0434\u0435 \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \\S (non-whitespace), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u0442\u044c \u0441 \u043f\u0443\u0442\u044f\u043c\u0438 \u0442\u0438\u043f\u0430 /tmp/httpd. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0441\u0435\u0440\u0432\u0438\u0441 discovery \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0439\u0442\u0438 \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0431\u0438\u043d\u0430\u0440\u044c, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e attacker-\u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u043f\u043e\u0434 root.\n\n\u0411\u0430\u0433 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f in wild \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u043a\u043e\u043d\u0446\u0430 2024 \u0433\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 UNC5174, \u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e APT.\n\n\u041a\u0430\u043a \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443 \u0441\u0435\u0431\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-41244:\n\n\ud83d\udd35 \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 /tmp (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, /tmp/httpd) \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0438\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u043e\u043a\u0435\u0442\u0430\u043c\u0438.\n\ud83d\udd35 \u0412 \u043b\u043e\u0433\u0430\u0445 VMware Aria / metrics collector \u2014 \u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b /tmp/VMware-SDMP-Scripts-* \u0438\u043b\u0438 \u0432\u044b\u0432\u043e\u0434\u044b get_version \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0438 \u0441 \u043d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u0443\u0442\u044f\u043c\u0438.\n\ud83d\udd35 \u0415\u0441\u043b\u0438 \u0432\u044b \u043d\u0430\u0448\u043b\u0438 \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u043e\u0442 VMware Tools, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0431\u0438\u043d\u0430\u0440\u044c \u0438\u0437 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 (\u0442\u043e\u0442 \u0436\u0435 /tmp/...) \u2014 \u044d\u0442\u043e \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u044f.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0437\u043e\u0440\u0435.\n\n#blue_team #CVE", "url": "https://t.me/purp_sec/1161"}, {"timestamp": "2026-08-15T00:00:15.251Z", "date_only": false, "value": "2026-08-15T00:00:15.251091Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/purp_sec/1161", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "82b1e2df-8af0-4f5a-af4b-64b21209cef2", "content": "\u26a0\ufe0f \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 VMware \u2014 CVE-2025-41244\n\nCVE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 service discovery \u0432 VMware Tools \u0438 VMware Aria Operations. \u0412 open-vm-tools (\u0438 \u0432 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 VMware Aria Operations) \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043e\u0431\u0449\u0438\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0431\u0438\u043d\u0430\u0440\u0435\u0439 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0412 \u0440\u044f\u0434\u0435 \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \\S (non-whitespace), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u0442\u044c \u0441 \u043f\u0443\u0442\u044f\u043c\u0438 \u0442\u0438\u043f\u0430 /tmp/httpd. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0441\u0435\u0440\u0432\u0438\u0441 discovery \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0439\u0442\u0438 \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0431\u0438\u043d\u0430\u0440\u044c, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e attacker-\u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u043f\u043e\u0434 root.\n\n\u0411\u0430\u0433 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f in wild \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u043a\u043e\u043d\u0446\u0430 2024 \u0433\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 UNC5174, \u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e APT.\n\n\u041a\u0430\u043a \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443 \u0441\u0435\u0431\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-41244:\n\n\ud83d\udd35 \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 /tmp (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, /tmp/httpd) \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0438\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u043e\u043a\u0435\u0442\u0430\u043c\u0438.\n\ud83d\udd35 \u0412 \u043b\u043e\u0433\u0430\u0445 VMware Aria / metrics collector \u2014 \u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b /tmp/VMware-SDMP-Scripts-* \u0438\u043b\u0438 \u0432\u044b\u0432\u043e\u0434\u044b get_version \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0438 \u0441 \u043d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u0443\u0442\u044f\u043c\u0438.\n\ud83d\udd35 \u0415\u0441\u043b\u0438 \u0432\u044b \u043d\u0430\u0448\u043b\u0438 \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u043e\u0442 VMware Tools, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0431\u0438\u043d\u0430\u0440\u044c \u0438\u0437 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 (\u0442\u043e\u0442 \u0436\u0435 /tmp/...) \u2014 \u044d\u0442\u043e \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u044f.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0437\u043e\u0440\u0435.\n\n#blue_team #CVE", "url": "https://t.me/purp_sec/1161"}, {"timestamp": "2026-09-01T11:56:28Z", "date_only": false, "value": "2026-09-01T11:56:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-01T11:56:28Z", "date_only": false, "value": "2026-09-01T11:56:28+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:56:28Z", "date_only": false, "value": "2026-09-01T11:56:28+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:17446", "record": "RHSA-2025:17446", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:17429", "record": "RHSA-2025:17429", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:17445", "record": "RHSA-2025:17445", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T11:56:29Z", "date_only": false, "value": "2026-09-01T11:56:29+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:17452", "record": "RHSA-2025:17452", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T11:56:30Z", "date_only": false, "value": "2026-09-01T11:56:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-01T11:56:30Z", "date_only": false, "value": "2026-09-01T11:56:30+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:56:30Z", "date_only": false, "value": "2026-09-01T11:56:30+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:17510", "record": "RHSA-2025:17510", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T11:56:31Z", "date_only": false, "value": "2026-09-01T11:56:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-01T11:56:31Z", "date_only": false, "value": "2026-09-01T11:56:31+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:56:31Z", "date_only": false, "value": "2026-09-01T11:56:31+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:17512", "record": "RHSA-2025:17512", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T11:56:33Z", "date_only": false, "value": "2026-09-01T11:56:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-01T11:56:33Z", "date_only": false, "value": "2026-09-01T11:56:33+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T11:56:33Z", "date_only": false, "value": "2026-09-01T11:56:33+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:17511", "record": "RHSA-2025:17511", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T18:11:03Z", "date_only": false, "value": "2026-09-16T18:11:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2026:20677-1", "record": "SUSE-RU-2026:20677-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T18:35:41Z", "date_only": false, "value": "2026-09-16T18:35:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20100-1", "record": "SUSE-SU-2026:20100-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T18:35:50Z", "date_only": false, "value": "2026-09-16T18:35:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T18:55:16Z", "date_only": false, "value": "2026-09-16T18:55:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2026:20677-1", "record": "SUSE-RU-2026:20677-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T18:55:16Z", "date_only": false, "value": "2026-09-16T18:55:16Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-RU-2026:20677-1", "record": "SUSE-RU-2026:20677-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T19:26:31Z", "date_only": false, "value": "2026-09-16T19:26:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20100-1", "record": "SUSE-SU-2026:20100-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:26:31Z", "date_only": false, "value": "2026-09-16T19:26:31Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:20100-1", "record": "SUSE-SU-2026:20100-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T19:26:40Z", "date_only": false, "value": "2026-09-16T19:26:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:29:14Z", "date_only": false, "value": "2026-09-16T20:29:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:31:55Z", "date_only": false, "value": "2026-09-16T21:31:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T15:06:08Z", "date_only": false, "value": "2026-09-17T15:06:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:25:44Z", "date_only": false, "value": "2026-09-17T17:25:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:25:44Z", "date_only": false, "value": "2026-09-17T17:25:44Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20067-1", "record": "OPENSUSE-SU-2026:20067-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T11:49:28Z", "date_only": false, "value": "2026-09-20T11:49:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2025:17428", "record": "RHSA-2025:17428", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:49:29Z", "date_only": false, "value": "2026-09-20T11:49:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2025:17509", "record": "RHSA-2025:17509", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:49:29Z", "date_only": false, "value": "2026-09-20T11:49:29Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2025:17509", "record": "RHSA-2025:17509", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T17:48:40Z", "date_only": false, "value": "2026-09-20T17:48:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:03436-1", "record": "SUSE-SU-2025:03436-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:48:40Z", "date_only": false, "value": "2026-09-20T17:48:40Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03436-1", "record": "SUSE-SU-2025:03436-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T17:51:04Z", "date_only": false, "value": "2026-09-20T17:51:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:03585-1", "record": "SUSE-SU-2025:03585-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:51:04Z", "date_only": false, "value": "2026-09-20T17:51:04Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:03585-1", "record": "SUSE-SU-2025:03585-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T18:19:23Z", "date_only": false, "value": "2026-09-20T18:19:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20853-1", "record": "SUSE-SU-2025:20853-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T18:19:23Z", "date_only": false, "value": "2026-09-20T18:19:23Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20853-1", "record": "SUSE-SU-2025:20853-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T18:19:33Z", "date_only": false, "value": "2026-09-20T18:19:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20866-1", "record": "SUSE-SU-2025:20866-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T18:19:33Z", "date_only": false, "value": "2026-09-20T18:19:33Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20866-1", "record": "SUSE-SU-2025:20866-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:42:35Z", "date_only": false, "value": "2026-09-20T21:42:35Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15595-1", "record": "OPENSUSE-SU-2025:15595-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:42:35Z", "date_only": false, "value": "2026-09-20T21:42:35Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15595-1", "record": "OPENSUSE-SU-2025:15595-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:36:42Z", "date_only": false, "value": "2026-10-11T11:36:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2025:17428", "record": "RHSA-2025:17428", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:36:42Z", "date_only": false, "value": "2026-10-11T11:36:42Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2025:17428", "record": "RHSA-2025:17428", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-12T17:22:09Z", "date_only": false, "value": "2026-10-12T17:22:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-13T10:19:23Z", "date_only": false, "value": "2026-10-13T10:19:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f8adec39-0b02-47ba-9542-6b9dafe336bd", "record": "CVE-2025-41244", "field": "creation_timestamp", "uuid": "73baadf5-843b-4a17-b208-ec7cc615f0d3"}, {"timestamp": "2026-10-15T17:04:02Z", "date_only": false, "value": "2026-10-15T17:04:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-15T17:04:02Z", "date_only": false, "value": "2026-10-15T17:04:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:20114-1", "record": "SUSE-SU-2026:20114-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-18T21:10:00.120Z", "date_only": false, "value": "2026-10-18T21:10:00.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-41244", "record": "FKIE_CVE-2025-41244", "field": "lastModified"}]}