{"metadata": {"vulnerability": "CVE-2025-57515", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-08-17T00:00:00Z", "date_only": false, "value": "2025-08-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-57515", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-09-20T06:54:50Z", "date_only": false, "value": "2025-09-20T06:54:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/52364", "record": "CVE-2025-57515", "field": "creation_timestamp", "uuid": "0b231d6e-ce12-414f-8069-3fdd55c4602d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee1\ufe0f Exploit Akamai's RepositoryService XXE vulnerability (CVE-2025-49493) with this testbed, aiding in secure coding practices and vulnerability assessments.\nURL\uff1ahttps://github.com/sanchitsahni/CVE-2025-57515\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/52364"}, {"timestamp": "2025-09-20T15:00:07Z", "date_only": false, "value": "2025-09-20T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tLeV2GFthmLcqfdANk2cYmhzWA2PnZkeEUlVG3x5z25Dw8g", "record": "CVE-2025-57515", "field": "creation_timestamp", "uuid": "098f4fa0-b3ff-4f15-8b34-3b954fddf55a"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-57515", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-06T18:08:06.018Z", "date_only": false, "value": "2025-10-06T18:08:06.018Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-57515", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-06T18:15:51Z", "date_only": false, "value": "2025-10-06T18:15:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FHHM-4GP8-H265", "record": "GHSA-FHHM-4GP8-H265", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-06T18:15:51.663Z", "date_only": false, "value": "2025-10-06T18:15:51.663", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-57515", "record": "FKIE_CVE-2025-57515", "field": "published"}, {"timestamp": "2025-10-06T18:31:07Z", "date_only": false, "value": "2025-10-06T18:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FHHM-4GP8-H265", "record": "GHSA-FHHM-4GP8-H265", "field": "published"}, {"timestamp": "2025-10-06T19:14:17.815Z", "date_only": false, "value": "2025-10-06T19:14:17.815260Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-57515", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-10-06T19:14:17.815Z", "date_only": false, "value": "2025-10-06T19:14:17.815260Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-57515", "record": "FKIE_CVE-2025-57515", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-06T19:16:55.695Z", "date_only": false, "value": "2025-10-06T19:16:55.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-57515", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-06T19:16:55.695Z", "date_only": false, "value": "2025-10-06T19:16:55.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-57515", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-06T21:30:45Z", "date_only": false, "value": "2025-10-06T21:30:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FHHM-4GP8-H265", "record": "GHSA-FHHM-4GP8-H265", "field": "modified"}, {"timestamp": "2025-10-08T21:02:28.033Z", "date_only": false, "value": "2025-10-08T21:02:28.033231Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk25dh332q", "record": "CVE-2025-57515", "field": "creation_timestamp", "uuid": "d64351b0-3756-4d00-be94-c241f97e6254", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk25dh332q"}, {"timestamp": "2025-10-14T04:36:10Z", "date_only": false, "value": "2025-10-14T04:36:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1168", "record": "CVE-2025-57515", "field": "creation_timestamp", "uuid": "32d603c2-7574-456e-a48a-2fdf12d52218", "content": "Weekly brief \u2014 Notable vulns\n\nSSH parsing bugs in OpenSSH, a high-impact XXE in LangChain, and multiple exploitable web-app flaws dominated the week. The urgent items: a public SQLi PoC (Uniclare portal) that enables full DB takeover, an XXE in langchain-text-splitters that can leak local secrets from AI pipelines, and two OpenSSH username/NULL-byte injection issues that allow ProxyCommand command execution in affected clients. Patch or mitigate these first; many of the other findings are configuration-specific but still dangerous in education and POS ecosystems.\n\nTop highlights:\n\n\u2b50\ufe0f CVE-2025-57515 \u2014 Uniclare Student Portal (SQLi, CVSS 9.8)\nRemote, unauthenticated SQL injection with a public PoC. Threat: full DB compromise / credential theft. Action: take vulnerable endpoints offline or block inputs with WAF rules; apply vendor fix or remove the affected instance immediately.\n\n\u2b50\ufe0f CVE-2025-6985 \u2014 LangChain `langchain-text-splitters` (XXE, CVSS 7.5)\nUnsafe XSLT parsing in HTMLSectionSplitter \u2192 arbitrary file read / SSRF / secret leakage from AI pipelines that process untrusted HTML/XML. Action: disable custom XSLT, enforce safe parser flags (e.g., restrict external entity resolution / use `XSLTAccessControl`), audit ingestion pipelines for user-supplied XML.\n\n\u2b50\ufe0f CVE-2025-11344 / CVE-2025-11345 \u2014 ILIAS e-learning (RCE & insecure unserialize)\nAuthenticated upload/deserialization paths enable RCE / object injection. Action: patch to 10.2+ (or 8.24/9.14 where applicable); restrict cert upload features and sanitize serialized inputs.", "url": "https://t.me/bhhub/1168"}, {"timestamp": "2026-06-17T09:43:10.007Z", "date_only": false, "value": "2026-06-17T09:43:10.007", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-57515", "record": "FKIE_CVE-2025-57515", "field": "lastModified"}]}