{"metadata": {"vulnerability": "cve-2025-50472", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-50472", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-07-30T02:06:44Z", "date_only": false, "value": "2025-07-30T02:06:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45877", "record": "CVE-2025-50472", "field": "creation_timestamp", "uuid": "42d322ad-8ffe-4ad7-a4ae-ea0cbe58969c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTechnical Details and Exploit for CVE-2025-50472\nURL\uff1ahttps://github.com/xhjy2020/CVE-2025-50472\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45877"}, {"timestamp": "2025-07-30T09:00:04Z", "date_only": false, "value": "2025-07-30T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VpSLWgrXHtrmcOPs4PM1cQJBzzMAPYN1YtPGDHOJLYwyRYo", "record": "CVE-2025-50472", "field": "creation_timestamp", "uuid": "6498f476-abc3-4bd8-86b0-7df4a157df94"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-50472", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-08-01T16:03:37.164Z", "date_only": false, "value": "2025-08-01T16:03:37.164Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2025-50472", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-01T16:15:41Z", "date_only": false, "value": "2025-08-01T16:15:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QGM9-FP3R-VM5V", "record": "GHSA-QGM9-FP3R-VM5V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-08-01T16:15:41.750Z", "date_only": false, "value": "2025-08-01T16:15:41.750", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-50472", "record": "FKIE_CVE-2025-50472", "field": "published"}, {"timestamp": "2025-08-01T17:16:31.099Z", "date_only": false, "value": "2025-08-01T17:16:31.099387Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-50472", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-08-01T17:16:31.099Z", "date_only": false, "value": "2025-08-01T17:16:31.099387Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-50472", "record": "FKIE_CVE-2025-50472", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-08-01T17:17:49.928Z", "date_only": false, "value": "2025-08-01T17:17:49.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-50472", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-08-01T17:17:49.928Z", "date_only": false, "value": "2025-08-01T17:17:49.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-50472", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-01T18:31:17Z", "date_only": false, "value": "2025-08-01T18:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QGM9-FP3R-VM5V", "record": "GHSA-QGM9-FP3R-VM5V", "field": "published"}, {"timestamp": "2025-08-01T18:31:17Z", "date_only": false, "value": "2025-08-01T18:31:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QGM9-FP3R-VM5V", "record": "GHSA-QGM9-FP3R-VM5V", "field": "modified"}, {"timestamp": "2025-08-10T17:27:27Z", "date_only": false, "value": "2025-08-10T17:27:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1127", "record": "CVE-2025-50472", "field": "creation_timestamp", "uuid": "c3387d66-59b7-4d41-84d2-96b4a8b870fe", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "url": "https://t.me/bhhub/1127"}, {"timestamp": "2025-08-10T17:27:27Z", "date_only": false, "value": "2025-08-10T17:27:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/866", "record": "CVE-2025-50472", "field": "creation_timestamp", "uuid": "4182d81c-43a7-4f9a-8cc9-a0b0f36240ee", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "url": "https://t.me/bhhub/866"}, {"timestamp": "2026-06-17T09:35:05.890Z", "date_only": false, "value": "2026-06-17T09:35:05.890", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-50472", "record": "FKIE_CVE-2025-50472", "field": "lastModified"}]}