{"metadata": {"vulnerability": "CVE-2025-4427", "count": 369, "kinds": {"milestone": 8, "sighting": 316, "kev": 21, "other": 24}}, "data": [{"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0152", "record": "NCSC-2025-0152", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-08T07:50:50.421Z", "date_only": false, "value": "2025-05-08T07:50:50.421Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-4427", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": true, "value": "2025-05-13", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-007", "record": "CERTFR-2025-ALE-007", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": true, "value": "2025-05-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0400", "record": "CERTFR-2025-AVI-0400", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0400", "record": "CERTFR-2025-AVI-0400", "field": "revisions.0.revision_date"}, {"timestamp": "2025-05-13T15:35:45.784Z", "date_only": false, "value": "2025-05-13T15:35:45.784542Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0152", "record": "NCSC-2025-0152", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-13T15:35:45.784Z", "date_only": false, "value": "2025-05-13T15:35:45.784542Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0152", "record": "NCSC-2025-0152", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-13T15:45:35.145Z", "date_only": false, "value": "2025-05-13T15:45:35.145Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4427", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-13T15:45:35.749Z", "date_only": false, "value": "2025-05-13T15:45:35.749Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ivanti", "record": "CVE-2025-4427", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-13T16:15:32Z", "date_only": false, "value": "2025-05-13T16:15:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9WCP-Q959-7MQ8", "record": "GHSA-9WCP-Q959-7MQ8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-13T16:15:32.330Z", "date_only": false, "value": "2025-05-13T16:15:32.330", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4427", "record": "FKIE_CVE-2025-4427", "field": "published"}, {"timestamp": "2025-05-13T16:30:55Z", "date_only": false, "value": "2025-05-13T16:30:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16170", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e939ece0-616f-4432-a0bc-c04880ce4429", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4427\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.\n\ud83d\udccf Published: 2025-05-13T15:45:35.145Z\n\ud83d\udccf Modified: 2025-05-13T15:45:35.749Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM", "url": "https://t.me/DarkWebInformer_CVEAlerts/16170"}, {"timestamp": "2025-05-13T16:31:00.551Z", "date_only": false, "value": "2025-05-13T16:31:00.551909Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vi4o3jrz2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "fc2e7fda-33f9-42ec-9f82-c348bf1eb817", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vi4o3jrz2"}, {"timestamp": "2025-05-13T16:47:59.904Z", "date_only": false, "value": "2025-05-13T16:47:59.904103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wstnkwi2h", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "236a8346-b616-4213-968a-df5c3a7baf1f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wstnkwi2h"}, {"timestamp": "2025-05-13T17:30:17.492Z", "date_only": false, "value": "2025-05-13T17:30:17.492677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lp2z6jv5as23", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "792d7588-40c3-4ee9-894e-a263b7581c08", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3lp2z6jv5as23"}, {"timestamp": "2025-05-13T17:37:50.338Z", "date_only": false, "value": "2025-05-13T17:37:50.338328Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/114501738159595727", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "7e1b5d23-18d5-4fd9-8db8-123c6fa269d5", "url": "https://infosec.exchange/users/zeljkazorz/statuses/114501738159595727"}, {"timestamp": "2025-05-13T17:44:38.036Z", "date_only": false, "value": "2025-05-13T17:44:38.036958Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lp2zy7v2t62d", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "10580bd4-9a02-4151-b979-1188486f7768", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lp2zy7v2t62d"}, {"timestamp": "2025-05-13T17:55:16.247Z", "date_only": false, "value": "2025-05-13T17:55:16.247395Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lp2zyem3j2w2", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "33172bbb-4551-4fde-ab5a-9965b911925f", "url": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lp2zyem3j2w2"}, {"timestamp": "2025-05-13T18:11:20.349Z", "date_only": false, "value": "2025-05-13T18:11:20.349532Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp32wkkvhyj2", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "c4bd41d4-683f-484a-ac2a-e6bf6486150a", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp32wkkvhyj2"}, {"timestamp": "2025-05-13T18:30:53Z", "date_only": false, "value": "2025-05-13T18:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9WCP-Q959-7MQ8", "record": "GHSA-9WCP-Q959-7MQ8", "field": "published"}, {"timestamp": "2025-05-13T18:36:05.340Z", "date_only": false, "value": "2025-05-13T18:36:05.340848Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lp34ubpxjv2h", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "85d39e60-5b5d-48f6-8ee4-d1f096581be1", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lp34ubpxjv2h"}, {"timestamp": "2025-05-13T19:43:41Z", "date_only": false, "value": "2025-05-13T19:43:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/25200", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2436d9bf-9894-427a-b01a-a6d799b1eff9", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4427 - Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4427 \nPublished : May 13, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/25200"}, {"timestamp": "2025-05-13T22:00:00Z", "date_only": false, "value": "2025-05-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1033", "record": "WID-SEC-W-2025-1033", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-13T22:00:00Z", "date_only": false, "value": "2025-05-13T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1033", "record": "WID-SEC-W-2025-1033", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-13T22:00:00Z", "date_only": false, "value": "2025-05-13T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1033", "record": "WID-SEC-W-2025-1033", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-05-13T22:00:00Z", "date_only": false, "value": "2025-05-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1033", "record": "WID-SEC-W-2025-1033", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-13T22:43:59.655Z", "date_only": false, "value": "2025-05-13T22:43:59.655955Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cisolens.com/post/3lp3kpktres2b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "68d97543-205e-4ba0-ad50-816e1827bc5d", "url": "https://bsky.app/profile/cisolens.com/post/3lp3kpktres2b"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-007", "record": "CERTFR-2025-ALE-007", "field": "revisions.0.revision_date"}, {"timestamp": "2025-05-14T02:00:00Z", "date_only": false, "value": "2025-05-14T02:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/05/ivanti-patches-epmm-vulnerabilities.html", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a1118100-8e0b-400f-8526-0772dd425214", "url": "https://thehackernews.com/2025/05/ivanti-patches-epmm-vulnerabilities.html"}, {"timestamp": "2025-05-14T03:40:31.212Z", "date_only": false, "value": "2025-05-14T03:40:31.212730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3lp43bsktqb2l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d7757670-3a7f-405b-9ad8-c9388bb78d26", "url": "https://bsky.app/profile/osanpo.bsky.social/post/3lp43bsktqb2l"}, {"timestamp": "2025-05-14T05:45:37.702Z", "date_only": false, "value": "2025-05-14T05:45:37.702462Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp4cbch6k6a2", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "627bb24b-03ac-4cc2-a319-513159c85b2d", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp4cbch6k6a2"}, {"timestamp": "2025-05-14T06:10:45Z", "date_only": false, "value": "2025-05-14T06:10:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6826", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0b75bb3e-00ca-4bed-a945-75ba7cde28fb", "content": "\ud83d\udea8 Another Ivanti exploit ALERT!\n\nAttackers are chaining two new flaws (CVE-2025-4427, 4428) for remote code execution on vulnerable EPMM versions.\n\n\u2014 Risk: Auth bypass \u2795 RCE\n\u2014 Exploited: Yes (limited cases)\n\n\u26a0\ufe0f Act fast\u2014patch now / read more: https://thehackernews.com/2025/05/ivanti-patches-epmm-vulnerabilities.html", "url": "https://t.me/thehackernews/6826"}, {"timestamp": "2025-05-14T06:25:44.226Z", "date_only": false, "value": "2025-05-14T06:25:44.226007Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/eb5e29db-7ab8-4258-b8a3-16c37b9cbeb6", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a2651a06-d48a-4dc0-8dce-0fcca1f2dbab", "url": "https://vulnerability.circl.lu/bundle/eb5e29db-7ab8-4258-b8a3-16c37b9cbeb6"}, {"timestamp": "2025-05-14T06:40:00.134Z", "date_only": false, "value": "2025-05-14T06:40:00.134148Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lp4fcpzpck24", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "98ae4880-45ab-4961-919a-5f38bb17ad43", "url": "https://bsky.app/profile/shiojiri.com/post/3lp4fcpzpck24"}, {"timestamp": "2025-05-14T07:26:23Z", "date_only": false, "value": "2025-05-14T07:26:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TFsCTpX3WV9vaSCXI79MmyDZihY1abOWr8aKWE8xDA4MVg", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "19037ee5-e24c-4a05-a4dc-82ecac557ad1"}, {"timestamp": "2025-05-14T07:27:41Z", "date_only": false, "value": "2025-05-14T07:27:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2025/5/ivanti-epmm-rce", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0a29dc76-3e8a-465d-afea-1872f24b0911", "url": "https://www.cert.at/de/warnungen/2025/5/ivanti-epmm-rce"}, {"timestamp": "2025-05-14T08:36:25Z", "date_only": false, "value": "2025-05-14T08:36:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1734", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b1d4384a-4a85-40e4-8c13-786c94450849", "content": "\ud83d\udc40 \u0417\u0430 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043d\u0435 \u0443\u043f\u0440\u0430\u0432\u0438\u043c\u0441\u044f. \u041e\u0431\u044a\u044f\u0432\u043b\u044f\u0435\u043c Patch Week!\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u043c  \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft \u043f\u043e\u0441\u043b\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043d\u0430\u043c \u043d\u0435 \u043e\u0431\u043e\u0439\u0442\u0438\u0441\u044c \u2014 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0437\u0438\u0440\u043e\u0434\u0435\u0438 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u043f\u043e\u0441\u043f\u0435\u0448\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u041f\u041e \u0434\u043b\u044f \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Microsoft, Fortinet, SAP, Adobe, \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e Ivanti. \n\n\ud83d\udcbb \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0432\u044b\u043a\u0430\u0442\u0438\u043b 72 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f (\u0435\u0441\u043b\u0438 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0442\u044c Azure \u0438 Chromium), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 5 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u0432 \u0438 2 \u0431\u0430\u0433\u0430, \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0445 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 Microsoft.  \n\n\u0418\u0437 72 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, 6 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 (\u0432 \u0442.\u0447. RCE \u0432 Office \u0438 Remote desktop client), \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2014 \u0432\u0430\u0436\u043d\u044b\u043c\u0438. \u0412\u0441\u0435\u0433\u043e 28 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, 17 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 15 \u2014 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 7 \u2014 \u043a DoS, 2 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u0438\u0440\u043e\u0434\u0435\u0438:\nCVE-2025-30397 (CVSS3 7.5) \u2014 RCE \u0432 Scripting Engine \u0438\u0437-\u0437\u0430 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437 \u0440\u0435\u0436\u0438\u043c\u0430 Internet Explorer  \u0432 Edge. \u0423\u043c\u0435\u0440, \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0435, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0438, \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0435. \u0416\u0435\u0440\u0442\u0432\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\nCVE-2025-32701 \u0438 -32706 (7.8) \u2014 \u043f\u0430\u0440\u0430 EoP \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0448\u0435\u0442\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440 CLFS. \u041f\u0440\u043e\u0448\u043b\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0442\u0430\u043a\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u0430\u043c\u0438 ransomware.\n\nCVE-2025-32709 (7.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Windows Ancillary Function Driver for Winsock, \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 \u043c\u044b \u0443\u0436\u0435 \u0432\u0438\u0434\u0435\u043b\u0438 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435.\n\nCVE-2025-30400 (7.8) \u2014 \u0442\u043e\u0436\u0435 EoP, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 DWM Core Library.\n\n\u041e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0431\u0430\u0433\u043e\u0432 Microsoft \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u043c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0430\u0440\u0443 RCE \u0432 RDP Client (CVE-2025-29966 \u0438 -29967) \u0438 \u043f\u0430\u0440\u0443 RCE \u0432 Office (CVE-2025-30377 \u0438 -30386). \u0425\u043e\u0442\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0448\u0430\u043d\u0441\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0432\u044b\u0441\u043e\u043a\u043e, \u0445\u043e\u0440\u043e\u0448\u043e \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0435 \u0438\u0437 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0434\u0430\u0436\u0435 \u0438\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430, \u0438 \u0442.\u043f.) \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u0442\u043e\u0440\u043e\u043f\u0438\u0442\u044c\u0441\u044f \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438.\n\n\ud83d\udd0e Fortinet \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 CVE-2025-32756 \u0441\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u043c CVSS 9.6. \u041a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a RCE, \u0438 \u0445\u043e\u0442\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u044d\u043a\u0437\u043e\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c FortiVoice, \u0440\u043e\u0432\u043d\u043e \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u0444\u0435\u043a\u0442 \u0435\u0441\u0442\u044c \u0432  FortiMail, FortiNDR, FortiRecorder \u0438 FortiCamera, \u0447\u0442\u043e \u0443\u0436\u0435 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435. \n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0442\u0447\u0438, \u043d\u043e \u0438 IoC \u0438\u0437 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0435\u0439 \u043c\u0435\u0440\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83c\udd70\ufe0f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 13 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 40 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ColdFusion. Lightroom, InDesign, Photoshop. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0440\u043e\u0447\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 ColdFusion, 6 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442 CVSS 9.1 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 (\u043f\u043e\u043a\u0430) \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.\n\n\u2699\ufe0f SAP \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0440\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetWeaver, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u043e\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. CVE-2025-42999 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043e\u0434\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0441 \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u043e\u0439 CVE-2025-31324.\n\n\ud83d\udcac Ivanti \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0430 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 EPMM (CVE-2025-4427 \u0438 -4428), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0414\u0440\u0443\u0433\u0438\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-22462 \u0432 Ivanti Neurons for ITSM (on-prem)  \u0441 CVSS 9.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f (\u043f\u043e\u043a\u0430) \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n\u0423\u0434\u0430\u0447\u043d\u043e\u0433\u043e \u0432\u0441\u0435\u043c \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430!\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u043f\u0430\u0442\u0447\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1734"}, {"timestamp": "2025-05-14T10:19:22.115Z", "date_only": false, "value": "2025-05-14T10:19:22.115+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1033", "record": "WID-SEC-W-2025-1033", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-14T11:31:46.228Z", "date_only": false, "value": "2025-05-14T11:31:46.228793Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3lp4vmht6yb2f", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a8135457-02e6-434f-811c-56b181457281", "url": "https://bsky.app/profile/cert-fr.bsky.social/post/3lp4vmht6yb2f"}, {"timestamp": "2025-05-14T11:31:47.334Z", "date_only": false, "value": "2025-05-14T11:31:47.334116Z", "kind": "sighting", "label": "Seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114505960988445982", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "24d876c2-6ef4-4560-903f-3306fda97dc8", "url": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114505960988445982"}, {"timestamp": "2025-05-14T12:34:39.755Z", "date_only": false, "value": "2025-05-14T12:34:39.755323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lp4z4vucjo2s", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b87e261a-3a46-4390-aaf8-6e8d11c59ba9", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lp4z4vucjo2s"}, {"timestamp": "2025-05-14T15:46:04.856Z", "date_only": false, "value": "2025-05-14T15:46:04.856856Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lp5dt6seo22c", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "890ba1f8-5bcc-4a5d-8c26-20e9733c8b02", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lp5dt6seo22c"}, {"timestamp": "2025-05-14T17:35:46.507Z", "date_only": false, "value": "2025-05-14T17:35:46.507220Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/114507392361822745", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a2765a95-940b-45a5-b57a-d37755b82745", "url": "https://infosec.exchange/users/tomcat/statuses/114507392361822745"}, {"timestamp": "2025-05-14T20:50:10.047Z", "date_only": false, "value": "2025-05-14T20:50:10.047813Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114508156690034770", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4a4abca0-bd41-4749-9c7b-b6aa9d06bf99", "url": "https://infosec.exchange/users/wdormann/statuses/114508156690034770"}, {"timestamp": "2025-05-14T20:54:04.738Z", "date_only": false, "value": "2025-05-14T20:54:04.738575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lp5uu46wjcr2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "08aff6c0-b1b7-45de-b063-27fc8073b4c1", "url": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lp5uu46wjcr2"}, {"timestamp": "2025-05-14T21:02:21.715Z", "date_only": false, "value": "2025-05-14T21:02:21.715321Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vinvp2x2m", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "23b6992b-0142-416e-bb9f-a23533de5c9e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vinvp2x2m"}, {"timestamp": "2025-05-14T21:04:28.888Z", "date_only": false, "value": "2025-05-14T21:04:28.888339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5vmgmtis2u", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d689f8bc-94d3-49e8-8e9b-dfe3479b9a24", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5vmgmtis2u"}, {"timestamp": "2025-05-14T21:06:27.555Z", "date_only": false, "value": "2025-05-14T21:06:27.555786Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5vpzefqc2u", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "78f77319-9436-44d3-b22d-a65fff42828b", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5vpzefqc2u"}, {"timestamp": "2025-05-14T21:12:20.236Z", "date_only": false, "value": "2025-05-14T21:12:20.236900Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5w2kzigk2u", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "be468e08-b696-40ff-8c76-4ee3a5f14361", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5w2kzigk2u"}, {"timestamp": "2025-05-14T21:21:16.789Z", "date_only": false, "value": "2025-05-14T21:21:16.789061Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5wkfmt4s2u", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "144ba19f-d270-41b1-9ef9-82ccf2bab8e7", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp5wkfmt4s2u"}, {"timestamp": "2025-05-14T22:46:25.614Z", "date_only": false, "value": "2025-05-14T22:46:25.614931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lp63ct4unk2c", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "83e1608e-6209-478d-881d-359c049a1761", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lp63ct4unk2c"}, {"timestamp": "2025-05-14T23:42:10.636Z", "date_only": false, "value": "2025-05-14T23:42:10.636355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lp66gjzcvt2o", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6261356c-b0fe-405d-8935-c5e1bd8218e1", "url": "https://bsky.app/profile/cyberhub.blog/post/3lp66gjzcvt2o"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-007", "record": "CERTFR-2025-ALE-007", "field": "revisions.1.revision_date"}, {"timestamp": "2025-05-15T02:16:26.840Z", "date_only": false, "value": "2025-05-15T02:16:26.840714Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lp6h2f5pkh2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d88da47a-656d-41d1-842f-1f6db27f2c64", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lp6h2f5pkh2w"}, {"timestamp": "2025-05-15T09:12:19.103Z", "date_only": false, "value": "2025-05-15T09:12:19.103264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3lp76byz3dk2o", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "908065f6-87c9-4e4c-90c9-36dbdb8d9019", "url": "https://bsky.app/profile/royans.bsky.social/post/3lp76byz3dk2o"}, {"timestamp": "2025-05-15T10:02:07.322Z", "date_only": false, "value": "2025-05-15T10:02:07.322143Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp7ayqauy4q2", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "30380c64-19b4-41de-8f21-b47c04cec65a", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp7ayqauy4q2"}, {"timestamp": "2025-05-15T10:20:09.083Z", "date_only": false, "value": "2025-05-15T10:20:09.083438Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp7bxpsxbbp2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "bd439562-d7d5-4f4c-81ea-11ae2bcdbbc3", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp7bxpsxbbp2"}, {"timestamp": "2025-05-15T14:58:15.894Z", "date_only": false, "value": "2025-05-15T14:58:15.894012Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lp7rmm4r6y25", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e0707aca-cbff-49e5-9444-a84430b049ff", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lp7rmm4r6y25"}, {"timestamp": "2025-05-15T15:08:49.934Z", "date_only": false, "value": "2025-05-15T15:08:49.934599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/chudypb.bsky.social/post/3lp7s7hrdss2i", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f3ad1b80-9c62-438f-b789-0d5ce91f4b96", "url": "https://bsky.app/profile/chudypb.bsky.social/post/3lp7s7hrdss2i"}, {"timestamp": "2025-05-15T15:26:50.373Z", "date_only": false, "value": "2025-05-15T15:26:50.373339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lp7t7pmkyu2i", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0e3fec09-077d-4348-b6e9-3338e95447e4", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3lp7t7pmkyu2i"}, {"timestamp": "2025-05-15T15:31:15.661Z", "date_only": false, "value": "2025-05-15T15:31:15.661011Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mynameisv.bsky.social/post/3lp7thk3nhs23", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "88c0e467-38c5-4c39-95f2-0b990d5d46a6", "url": "https://bsky.app/profile/mynameisv.bsky.social/post/3lp7thk3nhs23"}, {"timestamp": "2025-05-15T15:56:31Z", "date_only": false, "value": "2025-05-15T15:56:31.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4427.yaml", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "77b6afba-d8a6-4721-b609-177e4b81d9e6", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4427.yaml"}, {"timestamp": "2025-05-15T16:00:28.622Z", "date_only": false, "value": "2025-05-15T16:00:28.622918Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114512679766480096", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5a8e81a8-e95f-408f-aee7-84338e38a2c4", "url": "https://infosec.exchange/users/wdormann/statuses/114512679766480096"}, {"timestamp": "2025-05-15T18:14:12Z", "date_only": false, "value": "2025-05-15T18:14:12+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-4427", "field": "timestamps.asserted_at", "uuid": "98a98e06-fb41-4ffc-8c10-093709dadaf7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-15T18:14:12Z", "date_only": false, "value": "2025-05-15T18:14:12+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-4427", "field": "timestamps.first_seen_at", "uuid": "98a98e06-fb41-4ffc-8c10-093709dadaf7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-15T18:35:02.875Z", "date_only": false, "value": "2025-05-15T18:35:02.875264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lpa5q6uswc26", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f3d2f99b-0fa2-433b-9982-aff9f721047d", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lpa5q6uswc26"}, {"timestamp": "2025-05-15T18:40:14.066Z", "date_only": false, "value": "2025-05-15T18:40:14.066709Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114513307870730684", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "c82ac703-d2d1-4fcb-b834-87b87da91255", "url": "https://mstdn.ca/users/rfwaveio/statuses/114513307870730684"}, {"timestamp": "2025-05-15T19:13:37.191Z", "date_only": false, "value": "2025-05-15T19:13:37.191401Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpa7u6ilz2v2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "081ea442-eb62-4bf6-b6d0-298eb9ba7ae0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpa7u6ilz2v2"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": false, "value": "2025-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-16)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "30b42202-1a1c-4894-b84e-27429f7ec2ed"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": true, "value": "2025-05-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-09949", "record": "CNVD-2025-09949", "field": "openTime"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": true, "value": "2025-05-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-09949", "record": "CNVD-2025-09949", "field": "submitTime"}, {"timestamp": "2025-05-16T00:10:38.533Z", "date_only": false, "value": "2025-05-16T00:10:38.533478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.dev/post/3lpaqicyni22o", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9b8223b5-2e10-48b4-9250-dfea34750782", "url": "https://bsky.app/profile/hrbrmstr.dev/post/3lpaqicyni22o"}, {"timestamp": "2025-05-16T00:10:39.015Z", "date_only": false, "value": "2025-05-16T00:10:39.015554Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/114514607335898249", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a932a446-8f77-49a8-9ca9-8cce6ff0e59e", "url": "https://mastodon.social/users/hrbrmstr/statuses/114514607335898249"}, {"timestamp": "2025-05-16T00:10:58.543Z", "date_only": false, "value": "2025-05-16T00:10:58.543780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lpaqioiamnm2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f2ded54f-4371-4dea-8738-07224102039e", "url": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lpaqioiamnm2"}, {"timestamp": "2025-05-16T02:18:34.194Z", "date_only": false, "value": "2025-05-16T02:18:34.194241Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpaxn43u5b2f", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d1f92c43-55ce-460f-b71d-9df3bcf44732", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpaxn43u5b2f"}, {"timestamp": "2025-05-16T02:27:21.684Z", "date_only": false, "value": "2025-05-16T02:27:21.684195Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/114515144877011911", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "006bb5b5-b095-426e-b68a-d5de1292850a", "url": "https://mastodon.social/users/hrbrmstr/statuses/114515144877011911"}, {"timestamp": "2025-05-16T02:27:32.243Z", "date_only": false, "value": "2025-05-16T02:27:32.243617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.dev/post/3lpay547r7c27", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3f63fc66-1563-462d-a297-60a6673de20a", "url": "https://bsky.app/profile/hrbrmstr.dev/post/3lpay547r7c27"}, {"timestamp": "2025-05-16T02:28:24.165Z", "date_only": false, "value": "2025-05-16T02:28:24.165298Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lpay5cvh5xt2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0a661685-7f8e-43a7-a26e-baca96cd3f42", "url": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lpay5cvh5xt2"}, {"timestamp": "2025-05-16T04:00:00Z", "date_only": false, "value": "2025-05-16T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1552", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "93cecfae-b2a4-464e-9880-478f87ac6679", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1552"}, {"timestamp": "2025-05-16T08:12:26.254Z", "date_only": false, "value": "2025-05-16T08:12:26.254202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpblfprv7372", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "07052ee2-3a61-4a8d-a5d6-0a604c160479", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpblfprv7372"}, {"timestamp": "2025-05-16T09:30:11Z", "date_only": false, "value": "2025-05-16T09:30:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9864", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "09df3586-59cc-412f-a3f1-8d6ef4d8862b", "content": "CVE-2025-4427/4428 : Ivanti EPMM Remote Code Execution - Technical Analysis\n\nhttps://projectdiscovery.io/blog/ivanti-remote-code-execution", "url": "https://t.me/thebugbountyhunter/9864"}, {"timestamp": "2025-05-16T09:30:22Z", "date_only": false, "value": "2025-05-16T09:30:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/485", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d1d852fc-3614-4e86-88e9-63e830833d63", "content": "Top Security News for Today\n\nAI-Generated Law  \nhttps://www.schneier.com/blog/archives/2025/05/ai-generated-law.html\n\nThreat Landscape for Industrial Automation Systems in Q1 2025  \nhttps://securelist.com/industrial-threat-report-q1-2025/116505/\n\nExpression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1kna9px/expression_payloads_meet_mayhem_ivanti_epmm/\n\nHow the Microsoft Secure Future Initiative Brings Zero Trust to Life  \nhttps://www.microsoft.com/en-us/security/blog/2025/05/15/how-the-microsoft-secure-future-initiative-brings-zero-trust-to-life/\n\nFileless Execution: PowerShell Based Shellcode Loader Executes Remcos RAT  \nhttps://blog.qualys.com/vulnerabilities-threat-research/2025/05/15/fileless-execution-powershell-based-shellcode-loader-executes-remcos-rat\n\nBreachforums Boss to Pay $700k in Healthcare Breach  \nhttps://krebsonsecurity.com/2025/05/breachforums-boss-to-pay-700k-in-healthcare-breach/\n\nCommit Stomping - Manipulating Git Histories to Obscure the Truth  \nhttps://www.reddit.com/r/netsec/comments/1knl6j5/commit_stomping_manipulating_git_histories_to/\n\nWazuh \u2013 Open Source Security Platform for Threat Detection, Visibility & Compliance  \nhttps://www.darknet.org.uk/2025/05/wazuh-open-source-security-platform-for-threat-detection-visibility-compliance/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/485"}, {"timestamp": "2025-05-16T09:32:36.431Z", "date_only": false, "value": "2025-05-16T09:32:36.431753Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/114516816960766206", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8d95aa5e-0b1e-4c1e-b582-5cdfbd4af3e3", "url": "https://mastodon.social/users/hrbrmstr/statuses/114516816960766206"}, {"timestamp": "2025-05-16T09:32:37.518Z", "date_only": false, "value": "2025-05-16T09:32:37.518944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.dev/post/3lpbpvaauq227", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "1d5141d7-ff63-4e7a-a234-6b1c412eb09f", "url": "https://bsky.app/profile/hrbrmstr.dev/post/3lpbpvaauq227"}, {"timestamp": "2025-05-16T09:32:40.051Z", "date_only": false, "value": "2025-05-16T09:32:40.051549Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lpbpvban3xz2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "77433da9-8317-466a-a069-fbdacad3310c", "url": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lpbpvban3xz2"}, {"timestamp": "2025-05-16T09:42:15.822Z", "date_only": false, "value": "2025-05-16T09:42:15.822544Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0152", "record": "NCSC-2025-0152", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-16T09:42:15.822Z", "date_only": false, "value": "2025-05-16T09:42:15.822544Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0152", "record": "NCSC-2025-0152", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-16T10:04:17.010Z", "date_only": false, "value": "2025-05-16T10:04:17.010499Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/114516941634615828", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "bc84eda7-fcd9-4eac-8089-183c0f90ca29", "url": "https://infosec.exchange/users/decio/statuses/114516941634615828"}, {"timestamp": "2025-05-16T10:08:48.344Z", "date_only": false, "value": "2025-05-16T10:08:48.344468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/onyphe.io/post/3lpbrvups422l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e296ac81-9f1a-45c6-8da4-13523d03d70e", "url": "https://bsky.app/profile/onyphe.io/post/3lpbrvups422l"}, {"timestamp": "2025-05-16T11:45:05.810Z", "date_only": false, "value": "2025-05-16T11:45:05.810494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpbxbtc2trd2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a2a5f4a6-8ccb-48fb-8f5c-debdb722fe7c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpbxbtc2trd2"}, {"timestamp": "2025-05-16T12:36:58.708Z", "date_only": false, "value": "2025-05-16T12:36:58.708189Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114517542062628202", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e2779946-5ce5-49ac-8500-98c104b69f5b", "url": "https://infosec.exchange/users/jbhall56/statuses/114517542062628202"}, {"timestamp": "2025-05-16T12:37:06.724Z", "date_only": false, "value": "2025-05-16T12:37:06.724887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lpc273f3sk25", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4704bae6-2d6d-473c-badf-ec7a584b2684", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lpc273f3sk25"}, {"timestamp": "2025-05-16T12:38:46.329Z", "date_only": false, "value": "2025-05-16T12:38:46.329281Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rapid7.com/post/3lpc2bzwkb22t", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "02029bf1-296f-4f7d-aa03-ea4d010852d3", "url": "https://bsky.app/profile/rapid7.com/post/3lpc2bzwkb22t"}, {"timestamp": "2025-05-16T14:39:32.206Z", "date_only": false, "value": "2025-05-16T14:39:32.206783Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lpcb22ozug2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a9276798-6fa1-4961-ab2d-e07909c0e3e2", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lpcb22ozug2w"}, {"timestamp": "2025-05-16T16:33:20.198Z", "date_only": false, "value": "2025-05-16T16:33:20.198296Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/greynoise/statuses/114518471412483940", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2cd7dca3-bae4-4ab3-b907-59c71d1dc35f", "url": "https://infosec.exchange/users/greynoise/statuses/114518471412483940"}, {"timestamp": "2025-05-16T16:33:44.334Z", "date_only": false, "value": "2025-05-16T16:33:44.334950Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.io/post/3lpchg7z6ds2l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a488a560-1872-4704-804e-b98fdf007688", "url": "https://bsky.app/profile/greynoise.io/post/3lpchg7z6ds2l"}, {"timestamp": "2025-05-16T16:34:22.189Z", "date_only": false, "value": "2025-05-16T16:34:22.189263Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lpchfnr5xrj2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f4e82ed5-61fd-4901-9909-794f15d7c562", "url": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lpchfnr5xrj2"}, {"timestamp": "2025-05-16T16:42:09.328Z", "date_only": false, "value": "2025-05-16T16:42:09.328121Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lpchva5w7s22", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3b01f9b2-3c3e-4814-afdd-2ffdf82be8bc", "url": "https://bsky.app/profile/hackread.bsky.social/post/3lpchva5w7s22"}, {"timestamp": "2025-05-16T17:16:48.904Z", "date_only": false, "value": "2025-05-16T17:16:48.904763Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lpcjsuazy62x", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9f137585-924d-4cf7-9ba3-b57be305649a", "url": "https://bsky.app/profile/nimblenerd.social/post/3lpcjsuazy62x"}, {"timestamp": "2025-05-16T17:59:18.296Z", "date_only": false, "value": "2025-05-16T17:59:18.296215Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114518809434648660", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f63b16bf-5e7a-4a31-b0a5-5218f9370043", "url": "https://infosec.exchange/users/wdormann/statuses/114518809434648660"}, {"timestamp": "2025-05-16T17:59:26.541Z", "date_only": false, "value": "2025-05-16T17:59:26.541709Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lpcm7dznxca2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0a7564da-a1a6-482c-8ca6-021387403586", "url": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lpcm7dznxca2"}, {"timestamp": "2025-05-16T18:13:20.083Z", "date_only": false, "value": "2025-05-16T18:13:20.083432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpcmy3hiw6g2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a76d4dd0-d126-41c7-b649-ae267533e7eb", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpcmy3hiw6g2"}, {"timestamp": "2025-05-16T20:14:35Z", "date_only": false, "value": "2025-05-16T20:14:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/37045", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b21d2410-4203-4d5d-b735-320894a17acc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-4427\nURL\uff1ahttps://github.com/cdrom0/CVE-2025-4427\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/37045"}, {"timestamp": "2025-05-16T20:51:46Z", "date_only": false, "value": "2025-05-16T20:51:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9868", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a29bca1c-e684-4be1-a072-c6a1b94e3183", "content": "Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428)\n\nhttps://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/", "url": "https://t.me/thebugbountyhunter/9868"}, {"timestamp": "2025-05-16T21:02:23.228Z", "date_only": false, "value": "2025-05-16T21:02:23.228004Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgjcvjl2m", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5888f02d-ea23-489b-a834-e30b3a072ef6", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgjcvjl2m"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "67822063-0d51-405a-bb30-10f21e3f2192"}, {"timestamp": "2025-05-17T02:15:52.158Z", "date_only": false, "value": "2025-05-17T02:15:52.158657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpdhx7cdmq2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "56fd8301-c4a7-49cc-86dd-dabd8fbf8d7e", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpdhx7cdmq2w"}, {"timestamp": "2025-05-17T03:08:11.158Z", "date_only": false, "value": "2025-05-17T03:08:11.158506Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theyhack.bsky.social/post/3lpdkuqbvk226", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "00e8d4c4-a217-43f2-8875-e86e17aed472", "url": "https://bsky.app/profile/theyhack.bsky.social/post/3lpdkuqbvk226"}, {"timestamp": "2025-05-17T05:59:17.765Z", "date_only": false, "value": "2025-05-17T05:59:17.765458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lpdugpr7uz2b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0004c604-0c2d-4455-b45b-648931f1b59c", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lpdugpr7uz2b"}, {"timestamp": "2025-05-17T06:48:44.011Z", "date_only": false, "value": "2025-05-17T06:48:44.011318Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lpdx72ywus2g", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b18d26bc-a0f7-4352-a6da-397fee7bd763", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3lpdx72ywus2g"}, {"timestamp": "2025-05-17T07:02:51.627Z", "date_only": false, "value": "2025-05-17T07:02:51.627497Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpdxyeqvik2c", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f697b3d0-5a8b-4d20-b2fe-e7409943e752", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpdxyeqvik2c"}, {"timestamp": "2025-05-17T21:27:46.263Z", "date_only": false, "value": "2025-05-17T21:27:46.263748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpficwwf222c", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b99506b6-759c-4114-991b-13f6441df106", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpficwwf222c"}, {"timestamp": "2025-05-18T02:22:38.793Z", "date_only": false, "value": "2025-05-18T02:22:38.793034Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpfysa6ung2j", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "96eaaebf-a4ea-4687-a17a-02f0a99ee5ba", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpfysa6ung2j"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-4427", "field": "timestamps.asserted_at", "uuid": "2da19e29-65b5-4405-8e92-bcf4263e5ff7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": true, "value": "2025-05-19", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4427", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": true, "value": "2025-05-19", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-4427", "field": "evidence.0.details.date_added", "uuid": "2da19e29-65b5-4405-8e92-bcf4263e5ff7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6d263107-9ceb-4137-9198-c85a8390219d"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-4427", "field": "timestamps.first_seen_at", "uuid": "2da19e29-65b5-4405-8e92-bcf4263e5ff7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-4427", "field": "status.status_updated_at", "uuid": "2da19e29-65b5-4405-8e92-bcf4263e5ff7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4427", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-05-19T02:21:41.416Z", "date_only": false, "value": "2025-05-19T02:21:41.416602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpij7h6ufs2p", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "173076c4-69d3-4b00-b3f5-47b1bca7cf03", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpij7h6ufs2p"}, {"timestamp": "2025-05-19T06:42:10.462Z", "date_only": false, "value": "2025-05-19T06:42:10.462489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lpixr7khv42y", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e30b0e6a-84a4-4509-bee7-8d9224430872", "url": "https://bsky.app/profile/cyberhub.blog/post/3lpixr7khv42y"}, {"timestamp": "2025-05-19T06:42:30.757Z", "date_only": false, "value": "2025-05-19T06:42:30.757846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpixrdyga5o2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "dd0a02bf-cf2c-4601-a595-d75ac1551160", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpixrdyga5o2"}, {"timestamp": "2025-05-19T07:55:24.738Z", "date_only": false, "value": "2025-05-19T07:55:24.738363Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpj3p42tx762", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "64b5efac-3fc0-4e77-aaaa-13350d5bc97c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpj3p42tx762"}, {"timestamp": "2025-05-19T10:45:20.956Z", "date_only": false, "value": "2025-05-19T10:45:20.956173Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjfdxlyys2b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b7e2d46d-3ebb-4952-abdf-88fd90d1799e", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjfdxlyys2b"}, {"timestamp": "2025-05-19T10:45:22.607Z", "date_only": false, "value": "2025-05-19T10:45:22.607879Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjfe27nr22b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "34664489-3d86-4096-8291-1fb4e3f32556", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjfe27nr22b"}, {"timestamp": "2025-05-19T10:45:24.300Z", "date_only": false, "value": "2025-05-19T10:45:24.300996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjfe27oqc2b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f92df8ea-7cf6-4d17-9945-7bf6e0e428be", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjfe27oqc2b"}, {"timestamp": "2025-05-19T10:46:30.780Z", "date_only": false, "value": "2025-05-19T10:46:30.780268Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114534094541666068", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "807666e7-bade-4c0f-ad96-edb1cd48be67", "url": "https://infosec.exchange/users/shadowserver/statuses/114534094541666068"}, {"timestamp": "2025-05-19T11:09:36.551Z", "date_only": false, "value": "2025-05-19T11:09:36.551457Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjgpe5tss24", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "31fa476a-ea4c-4a7d-bca1-5a66f41b357b", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lpjgpe5tss24"}, {"timestamp": "2025-05-19T11:10:03.946Z", "date_only": false, "value": "2025-05-19T11:10:03.946779Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114534187178988258", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "e15ba737-a280-4e7c-a80b-3bbf092e6359", "url": "https://infosec.exchange/users/shadowserver/statuses/114534187178988258"}, {"timestamp": "2025-05-19T11:22:23.054Z", "date_only": false, "value": "2025-05-19T11:22:23.054917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lpjhgakcwk2m", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b9bc1fb6-d842-4fbe-8058-623bd4f1065d", "url": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lpjhgakcwk2m"}, {"timestamp": "2025-05-19T11:51:41.212Z", "date_only": false, "value": "2025-05-19T11:51:41.212643Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lpjj2o4zvh26", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9c7e5a67-4f4c-42ba-b757-a5da00f30b1e", "url": "https://bsky.app/profile/socprime.com/post/3lpjj2o4zvh26"}, {"timestamp": "2025-05-19T12:58:27.004Z", "date_only": false, "value": "2025-05-19T12:58:27.004458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjmqjxf4dz2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "49c13aa5-84f7-45cb-82f1-ff3b1a4fc9da", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjmqjxf4dz2"}, {"timestamp": "2025-05-19T13:16:57.948Z", "date_only": false, "value": "2025-05-19T13:16:57.948906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpjnt5ns4227", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "eb49789d-9c3c-4373-adbf-f8365c76aac6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpjnt5ns4227"}, {"timestamp": "2025-05-19T14:48:25.675Z", "date_only": false, "value": "2025-05-19T14:48:25.675891Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lpjswfhtnk2v", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d62bd1c2-03be-46f8-8285-1cdcf07e577e", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3lpjswfhtnk2v"}, {"timestamp": "2025-05-19T14:48:26.260Z", "date_only": false, "value": "2025-05-19T14:48:26.260757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lpjswovqrs2v", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d57bddc8-7195-4eff-b443-21da564780cf", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3lpjswovqrs2v"}, {"timestamp": "2025-05-19T18:00:21.455Z", "date_only": false, "value": "2025-05-19T18:00:21.455787Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpk5nvjyot2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "80cc26a0-2afa-44e5-bce6-ad20e1e8e10c", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpk5nvjyot2w"}, {"timestamp": "2025-05-19T19:16:30.571Z", "date_only": false, "value": "2025-05-19T19:16:30.571779Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114536099967876264", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "19afef1e-69b4-4936-a711-10a927951f05", "url": "https://infosec.exchange/users/cR0w/statuses/114536099967876264"}, {"timestamp": "2025-05-19T19:56:18.147Z", "date_only": false, "value": "2025-05-19T19:56:18.147791Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4040095", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7732898d-4820-4729-907d-7dae12fe41c8", "url": "https://feedsin.space/feed/CISAKevBot/items/4040095"}, {"timestamp": "2025-05-19T21:38:24.951Z", "date_only": false, "value": "2025-05-19T21:38:24.951752Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkjttci2c2j", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5076ea2a-c062-4384-bf53-805996285057", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkjttci2c2j"}, {"timestamp": "2025-05-20T00:00:00Z", "date_only": false, "value": "2025-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-20)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "464abc3c-62fa-45db-b021-99e814b7f800"}, {"timestamp": "2025-05-20T02:19:07.820Z", "date_only": false, "value": "2025-05-20T02:19:07.820289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpkzjsdt6u2p", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e93510ea-ef59-433c-94f4-fece944af16d", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpkzjsdt6u2p"}, {"timestamp": "2025-05-20T04:28:08.963Z", "date_only": false, "value": "2025-05-20T04:28:08.963124Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lplaloddg3i2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "032c7915-1f56-451d-a817-6100a7a95a45", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lplaloddg3i2"}, {"timestamp": "2025-05-20T08:17:30.239Z", "date_only": false, "value": "2025-05-20T08:17:30.239155Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnk5is3s2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0b245248-3782-4a8b-a85d-b08cf61d96c5", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnk5is3s2w"}, {"timestamp": "2025-05-20T08:17:31.734Z", "date_only": false, "value": "2025-05-20T08:17:31.734081Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkafeyc2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "851a0a59-88f7-44da-9891-8ee45241aae3", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkafeyc2w"}, {"timestamp": "2025-05-20T08:17:33.233Z", "date_only": false, "value": "2025-05-20T08:17:33.233810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkflv4c2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "015e8658-7e57-4c90-8935-e9025f024473", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkflv4c2w"}, {"timestamp": "2025-05-20T13:55:47Z", "date_only": false, "value": "2025-05-20T13:55:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cIub1337/265", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3a789e32-a7b7-4c26-8e0e-89a964b7328c", "content": "Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428)\n\n#Ivanti\n\nhttps://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/\n\nTelegram   \u2709\ufe0f @club1337\nX (Twitter) \ud83d\udd4a @club31337", "url": "https://t.me/cIub1337/265"}, {"timestamp": "2025-05-20T15:05:52.232Z", "date_only": false, "value": "2025-05-20T15:05:52.232568Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpme74cv4rt2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b7dac3c8-76e5-4210-a2ee-634e1a000178", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpme74cv4rt2"}, {"timestamp": "2025-05-20T21:02:24.430Z", "date_only": false, "value": "2025-05-20T21:02:24.430579Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc6qd4o2n", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e3e0ed45-6f8a-4e6b-9ea2-5350baed8fd8", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc6qd4o2n"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3a1842dc-6ea8-4e36-ba04-23aabc7d1e6d"}, {"timestamp": "2025-05-21T02:06:25.398Z", "date_only": false, "value": "2025-05-21T02:06:25.398330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lpnjbxyqib2j", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "12996e1c-f587-454c-8f1a-6607a95445f0", "url": "https://bsky.app/profile/nimblenerd.social/post/3lpnjbxyqib2j"}, {"timestamp": "2025-05-21T02:18:32.812Z", "date_only": false, "value": "2025-05-21T02:18:32.812689Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpnjxoejj62b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "aa54e8c2-cf50-4d25-885f-8e194b9901ae", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpnjxoejj62b"}, {"timestamp": "2025-05-21T03:55:30.347Z", "date_only": false, "value": "2025-05-21T03:55:30.347168Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4427", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-21T03:55:30.347Z", "date_only": false, "value": "2025-05-21T03:55:30.347168Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4427", "record": "FKIE_CVE-2025-4427", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-21T13:11:23Z", "date_only": false, "value": "2025-05-21T13:11:23+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-4427", "field": "timestamps.asserted_at", "uuid": "b5f665c5-4403-4d9e-9a92-121cba2434de", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:11:23Z", "date_only": false, "value": "2025-05-21T13:11:23+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-4427", "field": "timestamps.first_seen_at", "uuid": "b5f665c5-4403-4d9e-9a92-121cba2434de", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:11:23Z", "date_only": false, "value": "2025-05-21T13:11:23+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-4427", "field": "status.status_updated_at", "uuid": "b5f665c5-4403-4d9e-9a92-121cba2434de", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:11:23.139Z", "date_only": false, "value": "2025-05-21T13:11:23.139Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-4427", "field": "evidence.0.details.added_date", "uuid": "b5f665c5-4403-4d9e-9a92-121cba2434de", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T17:49:48.249Z", "date_only": false, "value": "2025-05-21T17:49:48.249157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3lpp5yvd5b32d", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "87c96da2-1e13-4687-869f-63539d09e5fd", "url": "https://bsky.app/profile/theitnerd.ca/post/3lpp5yvd5b32d"}, {"timestamp": "2025-05-21T18:03:13Z", "date_only": false, "value": "2025-05-21T18:03:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/5638", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d958fbae-0c4e-4030-a8a2-3a9262081254", "content": "\u041c\u043d\u043e\u0433\u043e\u044d\u043f\u0438\u0437\u043e\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0438\u0430\u043b Ivanti \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 \u0432 \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u043e\u043b\u0438 - \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wiz, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Endpoint Manager Mobile (EPMM).\n\nCVE-2025-4427 \u0438 CVE-2025-4428 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 RCE \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0438\u043c\u0435\u044e\u0442 \u0441\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438. \u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0434\u0432\u0443\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 EPMM.\n\nIvanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a 13 \u043c\u0430\u044f, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u04320-day \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0440\u0438\u0441\u043a\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c ACL \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 WAF.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Wiz \u043f\u043e\u044f\u0441\u043d\u0438\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00a0\u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u0432\u0438\u0434\u0443 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 EPMM \u043d\u0435 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Spring.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 RCE \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Spring, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Java.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Wiz, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a  \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a, \u0438\u0445 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u042d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0437\u044b\u043a\u0430 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Java \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e RCE.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 16 \u043c\u0430\u044f, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC.\n\nWiz \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u044f\u043a Sliver, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043a IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u04212, \u0440\u0430\u043d\u0435\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Palo Alto Networks, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c PAN-OS.\n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e IP \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0435\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u042d\u0442\u0430 \u043f\u0440\u0435\u0435\u043c\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442  \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 PAN-OS, \u0442\u0430\u043a \u0438 Ivanti EPMM.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Ivanti EPMM \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 11.12.0.5, 12.3.0.2, 12.4.0.2 \u0438 12.5.0.1. \u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c, \u043f\u043e\u043f\u043a\u043e\u0440\u043d\u043e\u043c \u0437\u0430\u043f\u0430\u0441\u043b\u0438\u0441\u044c.", "url": "https://t.me/S_E_Reborn/5638"}, {"timestamp": "2025-05-21T19:00:08Z", "date_only": false, "value": "2025-05-21T19:00:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7055", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4add53ec-defb-4727-86db-f251ffd81e9c", "content": "\u041c\u043d\u043e\u0433\u043e\u044d\u043f\u0438\u0437\u043e\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0438\u0430\u043b Ivanti \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 \u0432 \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u043e\u043b\u0438 - \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wiz, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Endpoint Manager Mobile (EPMM).\n\nCVE-2025-4427 \u0438 CVE-2025-4428 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 RCE \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0438\u043c\u0435\u044e\u0442 \u0441\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438. \u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0434\u0432\u0443\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 EPMM.\n\nIvanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a 13 \u043c\u0430\u044f, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u04320-day \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0440\u0438\u0441\u043a\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c ACL \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 WAF.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Wiz \u043f\u043e\u044f\u0441\u043d\u0438\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00a0\u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u0432\u0438\u0434\u0443 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 EPMM \u043d\u0435 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Spring.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 RCE \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Spring, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Java.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Wiz, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0441\u0440\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a  \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a, \u0438\u0445 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u042d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0437\u044b\u043a\u0430 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Java \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e RCE.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 16 \u043c\u0430\u044f, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC.\n\nWiz \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u044f\u043a Sliver, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043a IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u04212, \u0440\u0430\u043d\u0435\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Palo Alto Networks, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c PAN-OS.\n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e IP \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0435\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u042d\u0442\u0430 \u043f\u0440\u0435\u0435\u043c\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442  \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 PAN-OS, \u0442\u0430\u043a \u0438 Ivanti EPMM.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Ivanti EPMM \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 11.12.0.5, 12.3.0.2, 12.4.0.2 \u0438 12.5.0.1. \u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c, \u043f\u043e\u043f\u043a\u043e\u0440\u043d\u043e\u043c \u0437\u0430\u043f\u0430\u0441\u043b\u0438\u0441\u044c.", "url": "https://t.me/true_secator/7055"}, {"timestamp": "2025-05-21T21:14:09.956Z", "date_only": false, "value": "2025-05-21T21:14:09.956147Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lppjg6blm22g", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "948ff606-152d-4062-bd4a-44f0b78ec041", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lppjg6blm22g"}, {"timestamp": "2025-05-21T21:16:26.885Z", "date_only": false, "value": "2025-05-21T21:16:26.885857Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lppjk7cim22g", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7c8dedcc-217e-4f66-b682-fe68d61cb30f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lppjk7cim22g"}, {"timestamp": "2025-05-21T23:10:08.793Z", "date_only": false, "value": "2025-05-21T23:10:08.793740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lppprmv7zem2", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "c58c53e9-0e2a-4ffe-a661-eaddb4e112f8", "url": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lppprmv7zem2"}, {"timestamp": "2025-05-22T00:00:00Z", "date_only": false, "value": "2025-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "352e1b39-4648-40e2-b79a-abad5b13f93b"}, {"timestamp": "2025-05-22T02:18:15.838Z", "date_only": false, "value": "2025-05-22T02:18:15.838383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpq2g3g3uw2u", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4b343a4f-3e8a-41e7-b42f-bda3faa8008b", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpq2g3g3uw2u"}, {"timestamp": "2025-05-22T10:07:00Z", "date_only": false, "value": "2025-05-22T10:07:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/05/chinese-hackers-exploit-ivanti-epmm.html", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b5aba036-5957-48f5-b2f2-a975dec94699", "url": "https://thehackernews.com/2025/05/chinese-hackers-exploit-ivanti-epmm.html"}, {"timestamp": "2025-05-22T10:26:12Z", "date_only": false, "value": "2025-05-22T10:26:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/05/22/ongoing-ivanti-hijack-bug-exploitation.html", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9acfc1bd-1c02-405c-945d-5b7698855ea7", "url": "https://threatintel.cc/2025/05/22/ongoing-ivanti-hijack-bug-exploitation.html"}, {"timestamp": "2025-05-22T11:20:01.355Z", "date_only": false, "value": "2025-05-22T11:20:01.355054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wizsecurity.bsky.social/post/3lpqyolvcrs2x", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "124ade69-77f5-462b-b8c9-bcd90377fd8d", "url": "https://bsky.app/profile/wizsecurity.bsky.social/post/3lpqyolvcrs2x"}, {"timestamp": "2025-05-22T11:32:12.328Z", "date_only": false, "value": "2025-05-22T11:32:12.328399Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lpqzejrkd22e", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8cf10c62-2a83-4fbe-8d7e-35437bee33d4", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3lpqzejrkd22e"}, {"timestamp": "2025-05-22T12:19:49Z", "date_only": false, "value": "2025-05-22T12:19:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/e-GEUbijgrizDICwnXu0ZpMnAfATnxP9dWXUOKSSnPgQig", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "c07cacdf-7d97-4c01-8fbe-1276c0d85886"}, {"timestamp": "2025-05-22T14:01:16.965Z", "date_only": false, "value": "2025-05-22T14:01:16.965823Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lprbp6kks625", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ef8735cd-e30a-449b-b316-a96c4d49da6e", "url": "https://bsky.app/profile/hackingne.ws/post/3lprbp6kks625"}, {"timestamp": "2025-05-22T14:12:33Z", "date_only": false, "value": "2025-05-22T14:12:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6877", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a7e06880-78e4-4c57-bc38-d0d9570d7f6f", "content": "\ud83d\udea8 China-linked UNC5221 hackers exploited Ivanti EPMM zero-days (CVE-2025-4427 & 4428) immediately after disclosure, targeting mobile endpoints in defense, healthcare, and finance sectors.\n\nFull report \u2192 https://thehackernews.com/2025/05/chinese-hackers-exploit-ivanti-epmm.html", "url": "https://t.me/thehackernews/6877"}, {"timestamp": "2025-05-22T16:13:15.550Z", "date_only": false, "value": "2025-05-22T16:13:15.550779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lprj35e2gz2l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5ca431ed-33e1-44b7-8897-1b791750638b", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lprj35e2gz2l"}, {"timestamp": "2025-05-22T17:09:33.210Z", "date_only": false, "value": "2025-05-22T17:09:33.210317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lprm7tgo4p2n", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7dbc6726-70af-4f7a-83a8-107cd43be773", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3lprm7tgo4p2n"}, {"timestamp": "2025-05-22T18:13:01.171Z", "date_only": false, "value": "2025-05-22T18:13:01.171238Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/adulau/statuses/114552837229353867", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "a840c01c-b357-4a81-a727-2349c285d47c", "url": "https://infosec.exchange/users/adulau/statuses/114552837229353867"}, {"timestamp": "2025-05-22T18:13:45.189Z", "date_only": false, "value": "2025-05-22T18:13:45.189325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3lprprf4xsfq2", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "c23dccea-10fd-475f-9944-53f48839d359", "url": "https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3lprprf4xsfq2"}, {"timestamp": "2025-05-22T21:38:08.010Z", "date_only": false, "value": "2025-05-22T21:38:08.010209Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lps37yu6sc2d", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0ebe31bb-fe78-443b-a90b-fac1b3903e69", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lps37yu6sc2d"}, {"timestamp": "2025-05-22T21:41:04.244Z", "date_only": false, "value": "2025-05-22T21:41:04.244199Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lps3f3eoss2d", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d435e810-d9d3-415b-98e5-f3d32ddc0b8b", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lps3f3eoss2d"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a6f17c2b-1855-466c-8efc-cd036064b6ae"}, {"timestamp": "2025-05-23T02:18:08.340Z", "date_only": false, "value": "2025-05-23T02:18:08.340299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpskurx42h2r", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "1098fd4c-6e61-4f63-9eef-60d99ca75ec6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpskurx42h2r"}, {"timestamp": "2025-05-23T07:54:48.322Z", "date_only": false, "value": "2025-05-23T07:54:48.322160Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/test-cvp.bsky.social/post/3lpt5orfhqm2k", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "59910d92-75e0-4af7-ad06-19fe3f19cc46", "url": "https://bsky.app/profile/test-cvp.bsky.social/post/3lpt5orfhqm2k"}, {"timestamp": "2025-05-23T09:30:19Z", "date_only": false, "value": "2025-05-23T09:30:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/492", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "cfc1ca16-482b-4aa5-9097-8733d4b80ce2", "content": "Top Security News for Today\n\nAuthenticated Remote Code Execution in Netwrix Password Secure (CVE-2025-26817)  \nhttps://www.reddit.com/r/netsec/comments/1kslcpa/authenticated_remote_code_execution_in_netwrix/\n\nEXP-401 (OSEE)\uff1a\u7528\u4e94\u5929\u8ab2\u7a0b\u8a13\u7df4\u901a\u900f\u5341\u5e74\u7684\u77e5\u8b58\u9ad4  \nhttps://devco.re/blog/2025/05/22/exp-401-osee-five-days-to-master-a-decade-of-knowledge/\n\nThe Voter Experience  \nhttps://www.schneier.com/blog/archives/2025/05/the-voter-experience.html\n\nHow to Enumerate and Exploit CefSharp Thick Clients Using CefEnum  \nhttps://www.reddit.com/r/netsec/comments/1kskq0k/how_to_enumerate_and_exploit_cefsharp_thick/\n\nAutomating MS-RPC vulnerability research  \nhttps://www.reddit.com/r/netsec/comments/1ksp4m2/automating_msrpc_vulnerability_research/\n\nLive Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428)  \nhttps://www.reddit.com/r/netsec/comments/1ksufxv/live_forensic_collection_from_ivanti_epmm/\n\nOops: DanaBot Malware Devs Infected Their Own PCs  \nhttps://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/\n\nCVE-2025-32756: Write-Up of a Buffer Overflow in Various Fortinet Products  \nhttps://www.reddit.com/r/netsec/comments/1kszzx6/cve202532756_writeup_of_a_buffer_overflow_in/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/492"}, {"timestamp": "2025-05-23T09:37:27Z", "date_only": false, "value": "2025-05-23T09:37:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/05/23/chinanexus-threat-actor-actively-exploiting.html", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f63dae20-be03-41ec-a420-39ac13352b9c", "url": "https://threatintel.cc/2025/05/23/chinanexus-threat-actor-actively-exploiting.html"}, {"timestamp": "2025-05-23T20:00:09Z", "date_only": false, "value": "2025-05-23T20:00:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/7066", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7737d18c-bc20-4e8c-bfc5-3793997a236d", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438. \u0412 \u043d\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435:\n\n1. Pentestpartners \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u00a0\u0438 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Microsoft SharePoint, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043c\u0430\u043d \u0430\u0433\u0435\u043d\u0442\u0430 \u0418\u0418.\n\n2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Project Discovery \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u043e\u0432\u043a\u0438 \u0441\u0435\u0442\u0438 Versa Concerto, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Concerto.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 - \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2025-34027) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10/10. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 Versa Networks \u043e \u0442\u0440\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435, \u043d\u043e \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n3. \u041e\u043c\u0435\u0440 \u041c\u0430\u0439\u0440\u0430\u0437 \u0438\u0437 Legit Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0430 GitLab Duo AI, \u0447\u0442\u043e\u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2025-32756, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 FortiVoice.\n\n5. Profero \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0434\u0432\u0443\u0445 0-day Ivanti, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 (CVE-2025-4427 \u0438 CVE-2025-4428) \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u041d\u0420 UNC5221, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u043d\u0435\u0435 \u0442\u0430\u043a\u0436\u0435 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Palo Alto Networks \u0438 SAP \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u044f\u043a\u043e\u0432 KrustyLoader \u0438 Sliver.\n\n6. Rhino Security \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u00a0\u0434\u043b\u044f CVE-2025-26147, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Denode Scheduler.\n\n7. 8Com \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2025-26817, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Netwrix Password Secure, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n8. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Samlify Node.js \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML SSO (CVE-2025-47949).\n\n9. CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Commvault (CVE-2025-3928 \u0441 CVSS 8,7) \u0441 \u0446\u0435\u043b\u044c\u044e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0440\u0435\u0434 Azure.\n\nCommvault \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u043d\u043e \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Commvault \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0441\u0440\u0435\u0434 M365.\n\n10. \u0411\u043e\u043b\u0435\u0435 100 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 AutomationDirect MB-Gateway \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438\u0437-\u0437\u0430 CVE-2025-36535 (CVSS 10). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0448\u043b\u044e\u0437 Modbus \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n11. Atlassian\u00a0\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0441\u0435\u043c\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Bamboo, Confluence, Fisheye/Crucible \u0438 Jira. \u0412\u0441\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 EoP \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n12. GitLab\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u00a0\u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 10 \u043e\u0448\u0438\u0431\u043e\u043a, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 GitLab Community Edition (CE) \u0438 Enterprise Edition (EE). \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u0430\u044f CVE-2025-0993 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f DoS.\n\n13. Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0435\u0441\u044f\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Identity Services Engine (ISE) \u0438 Unified Intelligence Center - CVE-2025-20152 \u0438 CVE-2025-20113.", "url": "https://t.me/true_secator/7066"}, {"timestamp": "2025-05-23T23:30:22.781Z", "date_only": false, "value": "2025-05-23T23:30:22.781645Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpurxnpy522j", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3d1c2119-25b5-4302-b3a6-a0998beb86eb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpurxnpy522j"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "70815c28-b2fe-463b-982f-3601b3bb6352"}, {"timestamp": "2025-05-24T02:14:58.434Z", "date_only": false, "value": "2025-05-24T02:14:58.434343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpv362bepy2e", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "13a7c8b1-7ebc-4a87-9f20-23cccaaf82c8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpv362bepy2e"}, {"timestamp": "2025-05-24T10:35:39Z", "date_only": false, "value": "2025-05-24T10:35:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/5642", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "81f8f457-c541-44c0-b430-52cc295d7ea0", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438. \u0412 \u043d\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435:\n\n1. Pentestpartners \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u00a0\u0438 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Microsoft SharePoint, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043c\u0430\u043d \u0430\u0433\u0435\u043d\u0442\u0430 \u0418\u0418.\n\n2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Project Discovery \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u043e\u0432\u043a\u0438 \u0441\u0435\u0442\u0438 Versa Concerto, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Concerto.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 - \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2025-34027) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10/10. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 Versa Networks \u043e \u0442\u0440\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435, \u043d\u043e \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n3. \u041e\u043c\u0435\u0440 \u041c\u0430\u0439\u0440\u0430\u0437 \u0438\u0437 Legit Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0430 GitLab Duo AI, \u0447\u0442\u043e\u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2025-32756, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 FortiVoice.\n\n5. Profero \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0434\u0432\u0443\u0445 0-day Ivanti, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 (CVE-2025-4427 \u0438 CVE-2025-4428) \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u041d\u0420 UNC5221, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u043d\u0435\u0435 \u0442\u0430\u043a\u0436\u0435 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Palo Alto Networks \u0438 SAP \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u044f\u043a\u043e\u0432 KrustyLoader \u0438 Sliver.\n\n6. Rhino Security \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u00a0\u0434\u043b\u044f CVE-2025-26147, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Denode Scheduler.\n\n7. 8Com \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2025-26817, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Netwrix Password Secure, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n8. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Samlify Node.js \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML SSO (CVE-2025-47949).\n\n9. CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Commvault (CVE-2025-3928 \u0441 CVSS 8,7) \u0441 \u0446\u0435\u043b\u044c\u044e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0440\u0435\u0434 Azure.\n\nCommvault \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u043d\u043e \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Commvault \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0441\u0440\u0435\u0434 M365.\n\n10. \u0411\u043e\u043b\u0435\u0435 100 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 AutomationDirect MB-Gateway \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438\u0437-\u0437\u0430 CVE-2025-36535 (CVSS 10). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0448\u043b\u044e\u0437 Modbus \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n11. Atlassian\u00a0\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0441\u0435\u043c\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Bamboo, Confluence, Fisheye/Crucible \u0438 Jira. \u0412\u0441\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 EoP \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n12. GitLab\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u00a0\u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 10 \u043e\u0448\u0438\u0431\u043e\u043a, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 GitLab Community Edition (CE) \u0438 Enterprise Edition (EE). \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u0430\u044f CVE-2025-0993 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f DoS.\n\n13. Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0435\u0441\u044f\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Identity Services Engine (ISE) \u0438 Unified Intelligence Center - CVE-2025-20152 \u0438 CVE-2025-20113.", "url": "https://t.me/S_E_Reborn/5642"}, {"timestamp": "2025-05-24T12:47:51.162Z", "date_only": false, "value": "2025-05-24T12:47:51.162748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpw6jnfpy22l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e795ec4d-c3d4-4fd9-a740-43754f73441f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpw6jnfpy22l"}, {"timestamp": "2025-05-24T13:27:39.551Z", "date_only": false, "value": "2025-05-24T13:27:39.551454Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpwaqsvwxs2l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2eb1e3ba-53f0-4fa6-ac12-0a80db31d195", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpwaqsvwxs2l"}, {"timestamp": "2025-05-24T13:51:52.219Z", "date_only": false, "value": "2025-05-24T13:51:52.219476Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpwc42yvjc2l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2f619a42-9e30-47a4-b255-df3e9a2eeb33", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpwc42yvjc2l"}, {"timestamp": "2025-05-24T14:54:44.444Z", "date_only": false, "value": "2025-05-24T14:54:44.444004Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpwfmmdpzk2k", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b0fbfd4d-b50a-416a-83cd-3afbf06bbe8f", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpwfmmdpzk2k"}, {"timestamp": "2025-05-25T02:24:14.068Z", "date_only": false, "value": "2025-05-25T02:24:14.068004Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpxm5jn2ab2u", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0902eb14-74fe-44f2-a7a7-f70226daec2f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpxm5jn2ab2u"}, {"timestamp": "2025-05-25T17:14:24Z", "date_only": false, "value": "2025-05-25T17:14:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/3340", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8c6d5ba7-d559-407d-9d76-162ae937c7ae", "content": "\u26a1\ufe0fLive Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3340"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7c91bc48-7d3c-491d-a239-8c7333431b10"}, {"timestamp": "2025-05-26T02:20:46.064Z", "date_only": false, "value": "2025-05-26T02:20:46.064212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lq24gargcq2z", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "62389536-312d-4af7-a9e0-632b791decc8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lq24gargcq2z"}, {"timestamp": "2025-05-26T15:08:16Z", "date_only": false, "value": "2025-05-26T15:08:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/05/26/chinalinked-apt-unc-started-exploiting.html", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4ba6644f-f467-488e-82a3-cfb42d859b84", "url": "https://threatintel.cc/2025/05/26/chinalinked-apt-unc-started-exploiting.html"}, {"timestamp": "2025-05-26T17:08:08.619Z", "date_only": false, "value": "2025-05-26T17:08:08.619947Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/114575231432805279", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "1e895b06-5e84-41a0-bf61-0561d8e74f24", "url": "https://infosec.exchange/users/edwardk/statuses/114575231432805279"}, {"timestamp": "2025-05-26T20:00:31.895Z", "date_only": false, "value": "2025-05-26T20:00:31.895693Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/verbrecher/statuses/114575909232194901", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "34133a60-d42a-456c-b1b7-d3ecd779e4c7", "url": "https://mastodon.social/users/verbrecher/statuses/114575909232194901"}, {"timestamp": "2025-05-27T00:00:00Z", "date_only": false, "value": "2025-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8cc7f0d1-bdf3-4d8b-8308-23aa1984d95a"}, {"timestamp": "2025-05-27T02:18:00.868Z", "date_only": false, "value": "2025-05-27T02:18:00.868176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lq4mqal7ra2b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2fdc1cae-c66f-49ed-8c84-2a0103d3e192", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lq4mqal7ra2b"}, {"timestamp": "2025-05-27T05:05:05Z", "date_only": false, "value": "2025-05-27T05:05:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberUnderworlds/7", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "772a090b-97a8-4275-924c-030ae14acc5e", "content": "\ud83c\udf11 @CyberUnderworlds | Shadows of the Digital Realm \ud83c\udf11\nMay 27, 2025 \u2013 In the silent pulse of cyberspace, threats weave their intricate dance. Here\u2019s the latest from the frontlines of the digital underworld:\n\n\ud83d\udd0d China\u2019s Silent Strike: The UNC5221 group exploits Ivanti Endpoint Manager flaws (CVE-2025-4427, CVE-2025-4428), infiltrating critical sectors across Europe, North America, and Asia-Pacific. Espionage executed with surgical precision.\n\n\ud83c\uddf7\ud83c\uddfa APT28\u2019s Shadow Play: Russian hackers target NATO-aligned logistics and tech firms aiding Ukraine, wielding malware, phishing, and seven CVEs to spy on vital aid routes.\n\n\ud83d\udc89 Lumma\u2019s Global Plague: 394,000 Windows devices fall to Lumma malware. From Booking.com phishing scams to crypto wallet heists, this digital scourge spares no one.\n\n\ud83c\uddec\ud83c\udde7 UK Retail Under Siege: Scattered Spider is suspected in attacks on Marks & Spencer, Co-op, and Harrods. Customer data stolen, though payment details and passwords remain secure\u2014for now.\n\n\ud83d\udcb0 Coinbase\u2019s Costly Breach: Hackers bribed rogue support agents, siphoning customer data and causing $45M in losses with $400M in damages. Coinbase rejected a $20M ransom, offering a bounty instead.\n\n\ud83e\udd16 AI Ascends as Top Threat: Arctic Wolf\u2019s 2025 Trends Report crowns AI, including LLMs, as the new king of cybersecurity fears, dethroning ransomware.\n\n\u26a0\ufe0f Critical Exploits: Firefox (CVE-2025-4918, CVE-2025-4919) and Chrome (CVE-2025-4664) vulnerabilities are actively exploited for data theft and remote code execution. Patch now, or pay the price later.\n\n@CyberUnderworlds \u2013 #CyberUnderworlds", "url": "https://t.me/CyberUnderworlds/7"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "1027ad0c-39d3-4637-b549-ba4c2d10dabf"}, {"timestamp": "2025-05-28T02:19:18.755Z", "date_only": false, "value": "2025-05-28T02:19:18.755135Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lq75bi67uf2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "919cf43a-7130-4807-b961-166cc6a42843", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lq75bi67uf2w"}, {"timestamp": "2025-05-28T08:43:47.724Z", "date_only": false, "value": "2025-05-28T08:43:47.724806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7so2merkv2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f9f9bcf4-212d-4ddf-a283-1d4c21f8a323", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7so2merkv2"}, {"timestamp": "2025-05-28T09:54:40.750Z", "date_only": false, "value": "2025-05-28T09:54:40.750600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7wplk2522m", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "cce865d6-7e29-485f-9651-029582fe187c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7wplk2522m"}, {"timestamp": "2025-05-28T10:35:01.381Z", "date_only": false, "value": "2025-05-28T10:35:01.381060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7yw3au5zc2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "123c0ced-2780-4ac4-bcbb-38018e90170f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7yw3au5zc2"}, {"timestamp": "2025-05-29T00:00:00Z", "date_only": false, "value": "2025-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-29)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "c6cd98ff-1e9e-442c-aaa1-9564e647547f"}, {"timestamp": "2025-05-29T02:19:14.768Z", "date_only": false, "value": "2025-05-29T02:19:14.768956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqbnqbwyos2p", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b0f06408-3895-47a2-8e2f-e70fecbd84aa", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lqbnqbwyos2p"}, {"timestamp": "2025-05-29T19:33:54.424Z", "date_only": false, "value": "2025-05-29T19:33:54.424206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insightsintothings.com/post/3lqdhkdwgbs2j", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7ef1f591-0d1d-4fc5-998a-26e5fb053ccb", "url": "https://bsky.app/profile/insightsintothings.com/post/3lqdhkdwgbs2j"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "33fe8b7a-af71-46cd-8392-659e78a3cdae"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2b175a8f-6168-49e8-882c-b6be32a42355"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-01)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b25bfeaa-6080-40cd-9b24-7758f24c384f"}, {"timestamp": "2025-06-01T06:31:55.752Z", "date_only": false, "value": "2025-06-01T06:31:55.752020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqjnamhzzxj2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6f40f8a3-ea74-40d0-af3f-13dc82d3149d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqjnamhzzxj2"}, {"timestamp": "2025-06-01T12:43:21.461Z", "date_only": false, "value": "2025-06-01T12:43:21.461338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lqkbyznxqp2w", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "af3e1fad-92d2-4be2-9e26-6c644847cf8d", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lqkbyznxqp2w"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-02)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "71697a96-1139-4a6e-b523-a40e70dc3555"}, {"timestamp": "2025-06-02T13:24:06.811Z", "date_only": false, "value": "2025-06-02T13:24:06.811600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmujp4lnpm2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "87d3028f-c6e1-47fb-a803-46420c366f9e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmujp4lnpm2"}, {"timestamp": "2025-06-03T00:00:00Z", "date_only": false, "value": "2025-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2bf54b87-86cb-4f74-838e-880b82009b67"}, {"timestamp": "2025-06-03T07:59:46.695Z", "date_only": false, "value": "2025-06-03T07:59:46.695859Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqot3kp7lxt2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b4c0ca63-3bb8-45ef-85d7-978f2249d648", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqot3kp7lxt2"}, {"timestamp": "2025-06-04T14:21:27Z", "date_only": false, "value": "2025-06-04T14:21:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d6a64d3c-6aeb-4337-a09f-1a6012d78d04", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb"}, {"timestamp": "2025-06-04T21:03:41.209Z", "date_only": false, "value": "2025-06-04T21:03:41.209024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberspan.bsky.social/post/3lqspef2c7k2j", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "bd6f5567-3799-4356-bbdf-40ecf4168bb2", "url": "https://bsky.app/profile/cyberspan.bsky.social/post/3lqspef2c7k2j"}, {"timestamp": "2025-06-05T21:02:26.521Z", "date_only": false, "value": "2025-06-05T21:02:26.521707Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqv7r2eeyu2v", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "dc667ebd-2173-4e76-a80a-959fc68fe586", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqv7r2eeyu2v"}, {"timestamp": "2025-06-06T22:59:36.089Z", "date_only": false, "value": "2025-06-06T22:59:36.089090Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqxwqcwjlcs2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e1066661-1e3f-4591-a24e-34b7d55fabac", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqxwqcwjlcs2"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "46a61492-7d9c-46bd-a9a2-06b6c5ae3455"}, {"timestamp": "2025-06-07T07:08:50.195Z", "date_only": false, "value": "2025-06-07T07:08:50.195816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqys3ky7tut2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "67531005-1d9c-483a-abf3-28be0d1af30e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqys3ky7tut2"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "bc74e33a-2e62-4e33-8c9c-08bfb74288d6"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": true, "value": "2025-06-09", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-4427", "field": "evidence.0.details.due_date", "uuid": "2da19e29-65b5-4405-8e92-bcf4263e5ff7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-10)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ca33824d-973a-4bc5-b29a-6d4d26feb0d5"}, {"timestamp": "2025-06-10T08:41:14.020Z", "date_only": false, "value": "2025-06-10T08:41:14.020329Z", "kind": "sighting", "label": "Exploited", "source": "Incident in Luxembourg", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7f37a977-76d1-4662-ad70-d386bbc2a1a2"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "17d1ac77-55dd-47f9-b1d2-1af560c1792a"}, {"timestamp": "2025-06-11T08:43:38Z", "date_only": false, "value": "2025-06-11T08:43:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d00bff2f-574f-4ea9-9a41-1fe756392ae1", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "40ddbd17-4493-4cb6-8bcf-b10d70822ced"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b31c5002-d69f-46a5-bce5-bc72186278d8"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "324824c3-0c84-4ad3-a0a6-393a2c0a6a36"}, {"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-16)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "be6e322d-c5cf-4560-bfa0-521bf3cb5aa4"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6132bff7-7e0f-4450-84a1-1b2d0b7aa5ea"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8536f0b2-1df2-4f13-9d9f-8fc309da25a8"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e4fd699c-9f29-457b-bf15-2b27cd72b693"}, {"timestamp": "2025-06-20T11:56:42.921Z", "date_only": false, "value": "2025-06-20T11:56:42.921899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rhisac.org/post/3lrzyb2i3ic2l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e590feee-3814-48ff-bd50-2fd4842fb84b", "url": "https://bsky.app/profile/rhisac.org/post/3lrzyb2i3ic2l"}, {"timestamp": "2025-06-23T00:00:00Z", "date_only": false, "value": "2025-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-23)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7a1caf89-3561-44b7-b270-1913bed59380"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9aaa11a0-06e4-4219-b391-16991d0cc212"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-007", "record": "CERTFR-2025-ALE-007", "field": "revisions.2.revision_date"}, {"timestamp": "2025-06-28T00:00:00Z", "date_only": false, "value": "2025-06-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-28)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "16435a01-c81e-44c2-8c70-001cb0c098fc"}, {"timestamp": "2025-06-30T00:00:00Z", "date_only": false, "value": "2025-06-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "99abc198-a5d9-4bab-9443-5135939c9603"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-08)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ad93e653-9042-4004-a84a-6dffcc6b2b19"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "a2d49371-5649-4355-ae77-84c0f9931630"}, {"timestamp": "2025-07-15T00:00:00Z", "date_only": false, "value": "2025-07-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-15)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "614eb339-4887-4351-a6d2-e50103fa9a42"}, {"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8480f3c8-0a31-40ee-a657-a1ce30e6eb1a"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f6c9d5d5-8b9e-456d-8ec3-82716b05b72f"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-25)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "03d6cd16-22b9-4780-a08d-34b65a740c68"}, {"timestamp": "2025-07-27T00:00:00Z", "date_only": false, "value": "2025-07-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-27)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "22755a9c-7234-410f-8d58-cdcf8ff35db7"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "fcef47e0-ae23-4556-8033-49f2a11d03d5"}, {"timestamp": "2025-08-07T00:00:00Z", "date_only": false, "value": "2025-08-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-07)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "83e5124d-6ee4-4758-84d2-367529a62195"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-12)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5cb36fca-707c-46dc-8a08-5b92ef6aa886"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "dac0f075-8887-471f-b043-5053413a4540"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "29497660-24fb-4ad8-89a6-74a118dc34c6"}, {"timestamp": "2025-08-22T00:00:00Z", "date_only": false, "value": "2025-08-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "cc7ed763-b4b6-4f89-9a5a-bf061afdc2bf"}, {"timestamp": "2025-08-27T00:00:00Z", "date_only": false, "value": "2025-08-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "06eb6353-3313-4af3-8c26-8e15e838e7ea"}, {"timestamp": "2025-08-31T19:07:57Z", "date_only": false, "value": "2025-08-31T19:07:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/49773", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e9b8659c-7951-4b98-9567-a8cba21f623e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDetection for CVE-2025-4427 and CVE-2025-4428\nURL\uff1ahttps://github.com/rxerium/CVE-2025-4427-CVE-2025-4428\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/49773"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "1b9a8ea0-87ed-414d-b690-bb119d225302"}, {"timestamp": "2025-09-09T20:56:46Z", "date_only": false, "value": "2025-09-09T20:56:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ac2bf92a-bfdf-4388-be1e-64e147814223"}, {"timestamp": "2025-09-18T15:31:16Z", "date_only": false, "value": "2025-09-18T15:31:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/4aa647ab917828c81944edf0c4ea208f", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "56177072-32e0-4832-aa56-95a2e28916a2", "url": "https://gist.github.com/Darkcrai86/4aa647ab917828c81944edf0c4ea208f"}, {"timestamp": "2025-09-18T16:03:54.871Z", "date_only": false, "value": "2025-09-18T16:03:54.871238Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz4pzzkhy52o", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7154f20a-9add-4ed2-8701-64eed5eb3138", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz4pzzkhy52o"}, {"timestamp": "2025-09-18T16:04:42.015Z", "date_only": false, "value": "2025-09-18T16:04:42.015033Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz4q3gdrxb23", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5dea5264-fea1-4fa1-9087-0419139f241d", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz4q3gdrxb23"}, {"timestamp": "2025-09-19T02:10:00Z", "date_only": false, "value": "2025-09-19T02:10:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/09/cisa-warns-of-two-malware-strains.html", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "169928ec-a53f-4301-8a59-d1e89e762bcc", "url": "https://thehackernews.com/2025/09/cisa-warns-of-two-malware-strains.html"}, {"timestamp": "2025-09-19T04:28:40Z", "date_only": false, "value": "2025-09-19T04:28:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_News/8630", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b54c3d81-6057-498b-92a7-45a8ef52c83e", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428\nLink: https://thehackernews.com/2025/09/cisa-warns-of-two-malware-strains.html", "url": "https://t.me/DarkWebInformer_News/8630"}, {"timestamp": "2025-09-19T04:30:06.618Z", "date_only": false, "value": "2025-09-19T04:30:06.618297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lz5zqbfny52t", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "173161fd-a47a-4b0b-96ae-11ddc08a0796", "url": "https://bsky.app/profile/techit.bsky.social/post/3lz5zqbfny52t"}, {"timestamp": "2025-09-19T04:30:14Z", "date_only": false, "value": "2025-09-19T04:30:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/86991", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "444ff4fb-a080-4d0e-bb68-f73068be9b33", "content": "\ud83d\udd8b\ufe0f CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428 \ud83d\udd8b\ufe0f\n\nThe U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday released details of two sets of malware that were discovered in an unnamed organization's network following the exploitation of security flaws in Ivanti Endpoint Manager Mobile EPMM. \"Each set contains loaders for malicious listeners that enable cyber threat actors to run arbitrary code on the compromised server,\".\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/86991"}, {"timestamp": "2025-09-19T04:33:15.917Z", "date_only": false, "value": "2025-09-19T04:33:15.917065Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lz5zvxew7k2o", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4af7e751-6aff-428a-a702-820e62e04b7c", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lz5zvxew7k2o"}, {"timestamp": "2025-09-19T04:38:00.942Z", "date_only": false, "value": "2025-09-19T04:38:00.942200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lz6265k4tm42", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ce9025d9-c87c-4b26-966e-c98ecb1edbf3", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lz6265k4tm42"}, {"timestamp": "2025-09-19T04:38:15.849Z", "date_only": false, "value": "2025-09-19T04:38:15.849589Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lz626v6pfk2t", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0ccc3023-1c92-4ad7-bf8a-afda1508e980", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lz626v6pfk2t"}, {"timestamp": "2025-09-19T05:53:43.467Z", "date_only": false, "value": "2025-09-19T05:53:43.467216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lz66frvgg225", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "947ee2af-e740-4391-ad11-00cf21eeedf2", "url": "https://bsky.app/profile/shiojiri.com/post/3lz66frvgg225"}, {"timestamp": "2025-09-19T06:01:51.838Z", "date_only": false, "value": "2025-09-19T06:01:51.838648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lz66ufhj352s", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3a84c2f6-7f36-4a4e-9c3b-8098a05deda1", "url": "https://bsky.app/profile/potato.software/post/3lz66ufhj352s"}, {"timestamp": "2025-09-19T06:02:52.976Z", "date_only": false, "value": "2025-09-19T06:02:52.976389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/softfantw.bsky.social/post/3lz66w53z4c27", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "79ff334e-9ff1-4451-9140-2a92f9e22b10", "url": "https://bsky.app/profile/softfantw.bsky.social/post/3lz66w53z4c27"}, {"timestamp": "2025-09-19T06:11:37Z", "date_only": false, "value": "2025-09-19T06:11:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/5zUhAYtMH2O_W5ND_SD4Wi9c0BTxNX5S_MIQo35NRI_l1A", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "495f242f-e6b9-4f78-88da-ebebaffc7441"}, {"timestamp": "2025-09-19T08:03:03Z", "date_only": false, "value": "2025-09-19T08:03:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/16274", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "febd2630-5a9a-4199-a1a7-f9b1616d6923", "content": "CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428 \u2013 thehackernews.com\n\nFri, 19 Sep 2025 12:10:00", "url": "https://t.me/MalaysiaHacktivistz/16274"}, {"timestamp": "2025-09-19T08:03:03Z", "date_only": false, "value": "2025-09-19T08:03:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/5399", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6d644332-5a14-4568-a0ff-8e2b103f8ca0", "content": "CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428 \u2013 thehackernews.com\n\nFri, 19 Sep 2025 12:10:00", "url": "https://t.me/TengkorakCyberCrewzz/5399"}, {"timestamp": "2025-09-19T08:48:08.968Z", "date_only": false, "value": "2025-09-19T08:48:08.968615Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3lz6i5e5khc2o", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f9c12549-4e4c-4415-919f-a699944cee5d", "url": "https://bsky.app/profile/technadu.com/post/3lz6i5e5khc2o"}, {"timestamp": "2025-09-19T08:48:09.563Z", "date_only": false, "value": "2025-09-19T08:48:09.563930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3lz6i5kjmq22o", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4647e53e-8a4a-4b87-929a-1ef1a22617bc", "url": "https://bsky.app/profile/technadu.com/post/3lz6i5kjmq22o"}, {"timestamp": "2025-09-19T10:21:53Z", "date_only": false, "value": "2025-09-19T10:21:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/09/19/cyber-threat-intelligence-sept.html", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5a0ddb90-f14d-452f-acff-ae44f20faabe", "url": "https://threatintel.cc/2025/09/19/cyber-threat-intelligence-sept.html"}, {"timestamp": "2025-09-19T13:57:50.676Z", "date_only": false, "value": "2025-09-19T13:57:50.676405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lz6zhi77kq2f", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "502f04b4-f435-445d-89f8-af73ce0bd3da", "url": "https://bsky.app/profile/ninjaowl.ai/post/3lz6zhi77kq2f"}, {"timestamp": "2025-09-19T15:53:59.786Z", "date_only": false, "value": "2025-09-19T15:53:59.786902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3lz77x6vhjz2z", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ee0ba1ec-9f9e-4ea9-a4f4-d230d2aadf78", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3lz77x6vhjz2z"}, {"timestamp": "2025-09-19T16:04:16.881Z", "date_only": false, "value": "2025-09-19T16:04:16.881326Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lz7ajlewrb2e", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "63438301-9002-469c-b4a8-bf6f4c7c5224", "url": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lz7ajlewrb2e"}, {"timestamp": "2025-09-19T16:08:18.232Z", "date_only": false, "value": "2025-09-19T16:08:18.232979Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115231824062961021", "record": "cve-2025-4427", "field": "creation_timestamp", "uuid": "630e33a8-b1bd-4614-93b7-9340366b408b", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115231824062961021"}, {"timestamp": "2025-09-19T16:15:21.978Z", "date_only": false, "value": "2025-09-19T16:15:21.978236Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lz7b5bbkj226", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "40990618-a487-433f-aabd-abe884b7e940", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lz7b5bbkj226"}, {"timestamp": "2025-09-19T16:38:23.147Z", "date_only": false, "value": "2025-09-19T16:38:23.147254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lz7cgeb4fs2x", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "cee17e2c-2328-44b3-adc6-91715f1b4107", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lz7cgeb4fs2x"}, {"timestamp": "2025-09-19T16:55:14.568Z", "date_only": false, "value": "2025-09-19T16:55:14.568851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lz7dekijck2m", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2e8d057c-6b4f-4225-84c9-d3a0a8369f5a", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lz7dekijck2m"}, {"timestamp": "2025-09-19T17:03:55.588Z", "date_only": false, "value": "2025-09-19T17:03:55.588129Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3lz7du5inrk2v", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "34702d1f-84c2-4ae9-adae-18079817deb1", "url": "https://bsky.app/profile/technadu.com/post/3lz7du5inrk2v"}, {"timestamp": "2025-09-19T23:51:09.037Z", "date_only": false, "value": "2025-09-19T23:51:09.037181Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lza2mewnis2t", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d9e0d9cd-87f3-4ef6-a00a-e705923807cf", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lza2mewnis2t"}, {"timestamp": "2025-09-20T03:40:21.329Z", "date_only": false, "value": "2025-09-20T03:40:21.329249Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lzahgbgkhs27", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "90a20f80-0ba6-462b-86a4-724b32d69971", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lzahgbgkhs27"}, {"timestamp": "2025-09-20T14:01:18.694Z", "date_only": false, "value": "2025-09-20T14:01:18.694584Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lzbk4htvas2t", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "99f5f875-b273-4387-8dfb-f83ebca81fa0", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3lzbk4htvas2t"}, {"timestamp": "2025-09-20T15:02:11.822Z", "date_only": false, "value": "2025-09-20T15:02:11.822504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lzbnjiit7f2q", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9ffe88cf-3c0e-4fac-a627-2921b0c9086c", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lzbnjiit7f2q"}, {"timestamp": "2025-09-20T16:08:05.052Z", "date_only": false, "value": "2025-09-20T16:08:05.052462Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cwealthsentinel.bsky.social/post/3lzbr7b6duy23", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "d7ea573e-a5e7-4f0b-bcb1-4f3a7fcd513b", "url": "https://bsky.app/profile/cwealthsentinel.bsky.social/post/3lzbr7b6duy23"}, {"timestamp": "2025-09-21T00:50:03.576Z", "date_only": false, "value": "2025-09-21T00:50:03.576375Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzcoeksy422l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "90f73b83-c8b7-4c2a-8e9e-dd217f2eccee", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzcoeksy422l"}, {"timestamp": "2025-09-21T00:58:27.307Z", "date_only": false, "value": "2025-09-21T00:58:27.307854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzcotkxk4k2l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2cf20e9a-65c4-4172-89a6-406e6b05445f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzcotkxk4k2l"}, {"timestamp": "2025-09-21T01:05:57.534Z", "date_only": false, "value": "2025-09-21T01:05:57.534332Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzcpaygfm22l", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9f47088c-a0f0-4f18-a7f7-98244167aad0", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzcpaygfm22l"}, {"timestamp": "2025-09-21T02:16:53.743Z", "date_only": false, "value": "2025-09-21T02:16:53.743725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lzct7x73so2s", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8b2bf85f-4d1b-46d4-8ec5-f7d1866414f6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lzct7x73so2s"}, {"timestamp": "2025-09-21T07:01:14.651Z", "date_only": false, "value": "2025-09-21T07:01:14.651314Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-07ad32ac-ae37d4f282db0a22", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "637f8d39-1079-4fb9-b61b-951915e0ed89", "url": "https://poliverso.org/objects/0477a01e-07ad32ac-ae37d4f282db0a22"}, {"timestamp": "2025-09-22T02:16:41.240Z", "date_only": false, "value": "2025-09-22T02:16:41.240627Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lzfdoiodpe2b", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "33c78631-9e9d-485d-9612-ca777a858eb6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lzfdoiodpe2b"}, {"timestamp": "2025-09-22T10:09:35.653Z", "date_only": false, "value": "2025-09-22T10:09:35.653316Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lzg5vsn5chp2", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f76a10a4-a125-49f6-82bc-59df028bb4a2", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lzg5vsn5chp2"}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "27289a25-cd71-4f70-af5e-70ecba5388b0"}, {"timestamp": "2025-09-29T00:00:00Z", "date_only": false, "value": "2025-09-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "5848b95b-6509-47f5-9ddc-e3e9edfe01cc"}, {"timestamp": "2025-09-29T03:12:18Z", "date_only": false, "value": "2025-09-29T03:12:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7e0712f1-28e9-44f7-b0c0-d35a9ece18ef"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0185b761-168b-42cb-b035-51c4ee79b84a"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": false, "value": "2025-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-10)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3d5bf048-1785-485b-baa3-73da25a868fa"}, {"timestamp": "2025-10-16T14:25:04.636Z", "date_only": false, "value": "2025-10-16T14:25:04.636516Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/krenaud1.bsky.social/post/3m3cxkwvbuc2u", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "7513e05b-9947-4a46-a26e-c3bbf881e73b", "url": "https://bsky.app/profile/krenaud1.bsky.social/post/3m3cxkwvbuc2u"}, {"timestamp": "2025-10-19T00:00:00Z", "date_only": false, "value": "2025-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-19)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6827d6f2-96dc-4cb2-be09-4e6ee8e07269"}, {"timestamp": "2025-10-22T00:33:18Z", "date_only": false, "value": "2025-10-22T00:33:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9WCP-Q959-7MQ8", "record": "GHSA-9WCP-Q959-7MQ8", "field": "modified"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "fa15e968-f3f0-428b-9abe-9567caee58b0"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-14)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "bdbdbc17-3776-41aa-8cb9-ae4d7beeafef"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "25148abc-98fc-48a5-89d9-2075ce504136"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "b821eae2-d78a-4ac5-9a39-98cccee1c405"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8577d83a-5c93-4e9b-8137-9ee47e26a4f3"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-01)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "53db2949-b749-4109-b6a4-01e0b28d35b9"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-01)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2af56d7b-7625-470c-bf1f-0089a8636039"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "dddf5d8a-99a1-4cfe-a940-7a0990c6e0eb"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-09)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "32449117-adcc-4e71-8416-d38c3dde19a2"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-09)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "bbe9a36b-061f-41f6-94bc-878f93c65e6a"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "77999ed2-e0b0-4036-869b-7d21dbc10fe4"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "160f6bed-8cd9-45d5-8565-f6335c34181d"}, {"timestamp": "2026-02-01T00:00:00Z", "date_only": false, "value": "2026-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-01)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "67db36b2-57fc-4b95-baf4-e20325ea311d"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-4427", "field": "timestamps.recorded_at", "uuid": "2da19e29-65b5-4405-8e92-bcf4263e5ff7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:00.979Z", "date_only": false, "value": "2026-02-02T12:26:00.979808Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2da19e29-65b5-4405-8e92-bcf4263e5ff7", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "08487162-2853-4ef9-a176-f33914d216ab", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2da19e29-65b5-4405-8e92-bcf4263e5ff7"}, {"timestamp": "2026-02-26T18:28:36.303Z", "date_only": false, "value": "2026-02-26T18:28:36.303Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-4427", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:28:36.303Z", "date_only": false, "value": "2026-02-26T18:28:36.303Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4427", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-03)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "0f09866b-edfa-4478-894b-f04eaafea816"}, {"timestamp": "2026-04-04T00:00:00Z", "date_only": false, "value": "2026-04-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-04)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4576bf77-6072-4b4e-9fb1-c8410beabdab"}, {"timestamp": "2026-04-06T12:58:19.452Z", "date_only": false, "value": "2026-04-06T12:58:19.452093Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mitcwccpbk26", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ff086668-ad59-4ceb-8cc2-6211835beb84", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mitcwccpbk26"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2025-4427", "field": "timestamps.asserted_at", "uuid": "86a07958-6869-455d-a95f-2d0bedd78001", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2025-4427", "field": "timestamps.first_seen_at", "uuid": "86a07958-6869-455d-a95f-2d0bedd78001", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2025-4427", "field": "status.status_updated_at", "uuid": "86a07958-6869-455d-a95f-2d0bedd78001", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-09)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "13b6146c-6c38-46cb-8196-498d9ace6f42"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "02f787e8-2dba-4dd0-a019-1f1c7939a34b"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-29)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "1a2778a6-f7e3-475a-b5b1-3d85d589d9b0"}, {"timestamp": "2026-05-10T00:00:00Z", "date_only": false, "value": "2026-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-10)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "577667d9-92fd-4e56-be91-f7cbf1fecd38"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "c33953d4-929f-4b4e-8f10-4ddec2d8a8e4"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "25a12bd5-9d98-4ad6-8bb2-d71e22f173fb"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6d3eef91-e8ed-49ae-baa0-494b413235e6"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "01b08b79-4ca3-40a3-8f6d-993342942cbe"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "2978e55c-3416-47de-8ccd-fa1c668156b5"}, {"timestamp": "2026-06-05T16:57:54Z", "date_only": false, "value": "2026-06-05T16:57:54+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2025-4427", "field": "timestamps.recorded_at", "uuid": "86a07958-6869-455d-a95f-2d0bedd78001", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T16:59:25.037Z", "date_only": false, "value": "2026-06-05T16:59:25.037993Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/86a07958-6869-455d-a95f-2d0bedd78001", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f62da062-1ca9-4ae2-b35c-25e0d66c272b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/86a07958-6869-455d-a95f-2d0bedd78001"}, {"timestamp": "2026-06-17T09:33:13.873Z", "date_only": false, "value": "2026-06-17T09:33:13.873", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4427", "record": "FKIE_CVE-2025-4427", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:15.174Z", "date_only": false, "value": "2026-06-19T12:46:15.174856Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dfbc9161-8dfc-48b8-b07a-fbaf4aec4cd9", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3c027325-7e4a-48e5-b913-ec00ceb33f69", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dfbc9161-8dfc-48b8-b07a-fbaf4aec4cd9"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "6332e692-da33-43bd-9e88-d5f2b9fdf996"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-4427", "field": "timestamps.recorded_at", "uuid": "b5f665c5-4403-4d9e-9a92-121cba2434de", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:00.714Z", "date_only": false, "value": "2026-06-23T14:04:00.714083Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5f665c5-4403-4d9e-9a92-121cba2434de", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "13b839a0-f3c2-4181-b7ac-7948e4c148da", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5f665c5-4403-4d9e-9a92-121cba2434de"}, {"timestamp": "2026-06-30T09:23:53.581Z", "date_only": false, "value": "2026-06-30T09:23:53.581162Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98a98e06-fb41-4ffc-8c10-093709dadaf7", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "8b366c2b-ffbb-433a-a30f-95e28e6d1180", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98a98e06-fb41-4ffc-8c10-093709dadaf7"}, {"timestamp": "2026-06-30T10:15:05.927Z", "date_only": false, "value": "2026-06-30T10:15:05.927269Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "c4743716-873a-40b8-8b09-e187e809fe01"}, {"timestamp": "2026-07-13T10:15:07.762Z", "date_only": false, "value": "2026-07-13T10:15:07.762059Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "f8fbc6cb-6a9e-4c33-86bb-1eca9cc5267c"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-4427", "field": "timestamps.last_seen_at", "uuid": "98a98e06-fb41-4ffc-8c10-093709dadaf7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-4427", "field": "evidence.0.details.observation_date", "uuid": "98a98e06-fb41-4ffc-8c10-093709dadaf7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-4427", "field": "status.status_updated_at", "uuid": "98a98e06-fb41-4ffc-8c10-093709dadaf7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T19:00:06.037Z", "date_only": false, "value": "2026-07-20T19:00:06.037102Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/7217", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "292d28b8-ead8-4565-af6f-330b90795655", "content": "CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428 \u2013 thehackernews.com\n\nFri, 19 Sep 2025 12:10:00", "url": "https://t.me/MalaysiaHacktivistz/7217"}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-4427", "field": "timestamps.recorded_at", "uuid": "98a98e06-fb41-4ffc-8c10-093709dadaf7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T15:00:13.532Z", "date_only": false, "value": "2026-07-25T15:00:13.532703Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/503", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "28b4003e-f69c-4cd6-afaf-52951fccd30a", "content": "\ud83d\udca5 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ivanti: \u043a\u043e\u0433\u0434\u0430 API \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u043d\u044b\u043c \u0445\u043e\u0434\u043e\u043c\n\n\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u043b\u0430\u0431\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Ivanti \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u043a\u043e\u043d\u043e\u043c\u0435\u0440\u043d\u043e\u0441\u0442\u044c \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0432\u044f\u0437\u043e\u043a \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 CVE-2025-4427 \u0438 CVE-2025-4428 \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043f\u0440\u043e\u0441\u0447\u0451\u0442\u0430\u0445 \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 API, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u2014 \u0431\u0435\u0437 \u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439.\n\n\u0422\u0430\u043a\u043e\u0435 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u0447\u0442\u0438 \u0431\u0435\u0437\u0437\u0432\u0443\u0447\u043d\u043e\u0439: \u043e\u043d\u0430 \u0443\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0448\u0442\u0430\u0442\u043d\u0443\u044e \u043b\u043e\u0433\u0438\u043a\u0443 \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043e\u0431\u0445\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u0410 \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u044f\u0445 EPMM, \u043c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u043d\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435. \u041d\u0438 \u043e\u0431\u043b\u0430\u043a\u043e, \u043d\u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 \u0437\u0434\u0435\u0441\u044c \u043d\u0435 \u043f\u043e\u043c\u043e\u0433\u0443\u0442.\n\n\u0417\u0430 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439 \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0430\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u2014 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ivanti \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438 \u0437\u0430 \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 \u0441\u0440\u043e\u043a. \u042d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u042d\u0442\u043e \u0441\u0438\u0433\u043d\u0430\u043b \u043a \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0443 \u0441\u0430\u043c\u043e\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u0442\u0430\u043a\u0438\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n#ivanti #epmm #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u0437\u043b\u043e\u043c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/503"}, {"timestamp": "2026-07-29T12:02:03.582Z", "date_only": false, "value": "2026-07-29T12:02:03.582115Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5175", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e3f1b0d1-d5bd-45c5-ad8b-156c1843c9f2", "content": "Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428) #LiveForensicCollection #IvantiEPMMAppliances #CVE20254427 #CVE20254428 #ProferoInsights https://profero.io/blog/ivanti-epmm-attacks", "url": "https://t.me/reverseame/5175"}, {"timestamp": "2026-08-02T02:00:04.513Z", "date_only": false, "value": "2026-08-02T02:00:04.513203Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5175", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "99ae3196-645e-4e8a-80f5-fc02b2b2d2db", "content": "Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428) #LiveForensicCollection #IvantiEPMMAppliances #CVE20254427 #CVE20254428 #ProferoInsights https://profero.io/blog/ivanti-epmm-attacks", "url": "https://t.me/reverseame/5175"}, {"timestamp": "2026-08-09T04:19:14.171Z", "date_only": false, "value": "2026-08-09T04:19:14.171053Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/689", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "108bf3c5-0f2d-46cf-9728-7ce3db525f76", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nMalicious Listener for Ivanti Endpoint Mobile Management Systems\nMalware Analysis at a Glance Executive Summary The Cybersecurity and Infrastructure Security Agency (CISA) obtained two sets of malware from an organization compromised by cyber threat actors exploiting CVE-2025-4427 and CVE-2025-4428 in Ivanti Endpoint Manager Mobile (Ivanti EPMM). Each set contains loaders for malicious listeners that enable cyber threat actors to run arbitrary code on the compromised server. Affected Products Ivanti EPMM, versions 11.12.0.4 and prior, 12.3.0.1 and prior, 12.4.0.1 and prior, and 12.5.0.0 and prior. (Ivanti provided a patch and disclosed the vulnerabilities o\n\nSource: us-cert.cisa.gov \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/689"}, {"timestamp": "2026-08-11T10:15:14.916Z", "date_only": false, "value": "2026-08-11T10:15:14.916945Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-10)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "4f469f59-623a-4774-ac39-b28d23123c09"}, {"timestamp": "2026-08-14T16:00:12.794Z", "date_only": false, "value": "2026-08-14T16:00:12.794524Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/673", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ffb36fe2-05db-45b6-9505-f8cf7839fc00", "content": "\ud83d\udd12 \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ivanti Endpoint Manager Mobile (EPMM), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435\u043f\u0435\u0440\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Wiz, \u0441 16 \u043c\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2025-4427 \u0438 CVE-2025-4428 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 EPMM. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Sliver \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0410\u0433\u0435\u043d\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 77.221.158[.]154, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0423\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 EPMM. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 mifs, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f \u0442\u0430\u0431\u043b\u0438\u0446\u044b mifs_ldap_server_config, mifs_ldap_users \u0438 mi_user, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 JSP-\u0444\u0430\u0439\u043b\u044b \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a /mi/tomcat/webapps/mifs/401.jsp, \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044f \u0438\u0445 \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u043e\u0439 \u0430\u0442\u0430\u043a. Sliver \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0447\u0435\u043d\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043a\u0440\u0443\u0433 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a, \u0442\u0430\u043a \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0443 \u043a\u0440\u0443\u0433 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u0435\u043c\u044b\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043a\u0440\u0430\u0439\u043d\u0435 \u0441\u043b\u043e\u0436\u043d\u043e. \u0412 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0434\u0432\u0443\u0445 CVE.\n\n#blue_team #Ivanti", "url": "https://t.me/purp_sec/673"}, {"timestamp": "2026-08-15T00:00:07.733Z", "date_only": false, "value": "2026-08-15T00:00:07.733010Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/purp_sec/673", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "9c159f9a-539a-4734-8877-fb04a57a8006", "content": "\ud83d\udd12 \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ivanti Endpoint Manager Mobile (EPMM), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435\u043f\u0435\u0440\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u043d\u043e \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Wiz, \u0441 16 \u043c\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2025-4427 \u0438 CVE-2025-4428 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 EPMM. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Sliver \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0410\u0433\u0435\u043d\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 77.221.158[.]154, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0423\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 EPMM. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 mifs, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f \u0442\u0430\u0431\u043b\u0438\u0446\u044b mifs_ldap_server_config, mifs_ldap_users \u0438 mi_user, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 JSP-\u0444\u0430\u0439\u043b\u044b \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a /mi/tomcat/webapps/mifs/401.jsp, \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044f \u0438\u0445 \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u043e\u0439 \u0430\u0442\u0430\u043a. Sliver \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0447\u0435\u043d\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043a\u0440\u0443\u0433 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a, \u0442\u0430\u043a \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0443 \u043a\u0440\u0443\u0433 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u0435\u043c\u044b\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043a\u0440\u0430\u0439\u043d\u0435 \u0441\u043b\u043e\u0436\u043d\u043e. \u0412 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0434\u0432\u0443\u0445 CVE.\n\n#blue_team #Ivanti", "url": "https://t.me/purp_sec/673"}, {"timestamp": "2026-08-16T10:15:07.078Z", "date_only": false, "value": "2026-08-16T10:15:07.078362Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "14392520-1f91-407b-9b58-07f88f228b6e"}, {"timestamp": "2026-09-21T14:37:49.114Z", "date_only": false, "value": "2026-09-21T14:37:49.114127Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mvzwssv23c2r", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e8de05d3-9471-4243-a6a4-ea76e4f74106", "content": "\ud83d\udea8 This week\u2019s Threat Alert covers CVE-2025-4427, an Ivanti EPMM authentication bypass that can lead to unauthenticated RCE when chained with CVE-2025-4428. CrowdSec has observed 865 unique IPs matching the exploitation pattern since May 2025.\n\nRead more: www.crowdsec.net/vulntracking...", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3mvzwssv23c2r"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "e41ba652-79e6-4d4b-9edc-171f3ee8f7ca"}, {"timestamp": "2026-10-03T18:02:05.327Z", "date_only": false, "value": "2026-10-03T18:02:05.327119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwyht6rlbu23", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "ba33cd43-50ac-4365-bd1e-c42a6350da8e", "content": "CVE-2025-4427 is trending. Hype score 4, currently #8 on cvemon.\n\nAn authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.\n\nhttps://cvemon.intruder.io/cves/CVE-2025-4427", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mwyht6rlbu23"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-05)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "3ccf009c-93f5-4237-ae68-fe8332eb6d75"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-06)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "97a83100-a271-42e0-becb-0fff33e21f68"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-08)", "record": "CVE-2025-4427", "field": "creation_timestamp", "uuid": "546f3bca-d93d-4543-adc3-3de0e928ba06"}]}