https://vulnerability.circl.lu/sightings/feed 2026-09-17T09:01:39.613563+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7c7bb28c-3b74-40bf-bd0c-680445a4f02c/export 2026-09-17T09:01:39.747395+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7c7bb28c-3b74-40bf-bd0c-680445a4f02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8424", "type": "exploited", "source": "https://t.me/maxienergy_channel/319", "content": "\u041d\u0430 \u0434\u0430\u0440\u043a\u043d\u0435\u0442-\u0444\u043e\u0440\u0443\u043c\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0418\u0418-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a HexStrike AI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0441\u044f \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f red team, \u043d\u043e \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Citrix (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424) \ud83d\ude0f\n\nHexStrike AI \u0432\u0441\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446 \u043a\u0430\u043a \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u0430 GitHub \u0438 \u0443\u0436\u0435 \u0441\u043e\u0431\u0440\u0430\u043b 2400 \u0437\u0432\u0451\u0437\u0434. \u0415\u0433\u043e \u0430\u0432\u0442\u043e\u0440, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041c\u0443\u0445\u0430\u043c\u043c\u0430\u0434 \u041e\u0441\u0430\u043c\u0430, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u043a\u0430\u043a \u00ab\u0418\u0418-\u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u00bb \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u043e\u0432 \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043c\u0435\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u0435\u0435 150 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 LLM \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0432 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435. \u0418\u0434\u0435\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b. \u041d\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u043e \u0431\u044b\u0432\u0430\u0435\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u043e\u0436\u0435 \u043c\u0438\u043c\u043e \u0442\u0430\u043a\u043e\u0433\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u044c\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c ShadowServer, \u0435\u0449\u0451 \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 28 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 Citrix-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u0432, \u0430 \u0441\u0435\u0439\u0447\u0430\u0441 \u0443\u0436\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 8 \u0442\u044b\u0441\u044f\u0447. \u041d\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HexStrike AI \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u0438 \u043f\u0440\u043e\u0434\u0430\u0436\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 NetScaler. \u0412\u0441\u0451 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0441\u043f\u0443\u0441\u0442\u044f 12 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \ud83d\ude33\n\n\u0418 \u0432\u043e\u0442 \u0442\u0443\u0442 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0431\u0430\u0433\u0430 \u0438 \u0435\u0433\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0438\u0437\u043c\u0435\u0440\u044f\u043b\u043e\u0441\u044c \u0434\u043d\u044f\u043c\u0438, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c, \u0441 \u0418\u0418-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u0432\u0440\u043e\u0434\u0435 HexStrike AI, \u043e\u043d\u043e \u0441\u0436\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0434\u043e \u043f\u0430\u0440\u044b \u0447\u0430\u0441\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 \u0443\u0441\u0438\u043b\u0438\u0439 \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0443\u0442\u0438\u043d\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0434\u043b\u044f \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0440\u043e\u0431\u0443\u0435\u0442 \u0441\u043d\u043e\u0432\u0430 \u0438 \u0441\u043d\u043e\u0432\u0430, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u043e\u0431\u044c\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0443\n\n\u0410\u0432\u0442\u043e\u0440 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430, \u0440\u0430\u0437\u0443\u043c\u0435\u0435\u0442\u0441\u044f, \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0433\u043e \u0446\u0435\u043b\u044c \u2014 \u043f\u043e\u043c\u043e\u0447\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430\u043c, \u0430 \u043d\u0435 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442. \u041d\u043e \u0444\u0430\u043a\u0442 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0444\u0430\u043a\u0442\u043e\u043c: \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0437\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0438, \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \ud83e\udde0\n\n\u0415\u0441\u043b\u0438 \u043f\u043e\u0434\u0443\u043c\u0430\u0442\u044c, \u044d\u0442\u043e \u0432\u0435\u0434\u044c \u043b\u043e\u0433\u0438\u0447\u043d\u043e. \u041b\u044e\u0431\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435\u0442 \u043d\u0438\u0447\u0435\u0433\u043e \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0434\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043c\u043e\u043b\u043e\u0442\u043e\u043a \u043d\u0435 \u0434\u043b\u044f \u0437\u0430\u0431\u0438\u0432\u0430\u043d\u0438\u044f \u0433\u0432\u043e\u0437\u0434\u0435\u0439, \u0430 \u0434\u043b\u044f \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0442\u044f\u0436\u043a\u0438\u0445 \u0442\u0435\u043b\u0435\u0441\u043d\u044b\u0445... \u0442\u0443\u0442 \u0432\u0441\u0435 \u0442\u043e \u0436\u0435 \u0441\u0430\u043c\u043e\u0435. \u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u044f \u0443 \u0441\u0435\u0431\u044f \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u0443\u0436\u0435 \u043a\u0430\u043a-\u0442\u043e \u0434\u0435\u043b\u0430\u043b \u043e\u0431\u0437\u043e\u0440 \u043d\u0430 \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0437\u043d\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043a\u0438\u0434\u0434\u0438\n\n\u0412\u044b\u0432\u043e\u0434 \u0442\u0443\u0442 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e\u0439. \u041c\u044b \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0438 \u043f\u0440\u0430\u0432\u0434\u0430 \u0436\u0438\u0432\u0435\u043c \u0432 \u044d\u043f\u043e\u0445\u0435, \u0433\u0434\u0435 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u044b \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435\u0433\u043e (\u0438 \u0442\u043e \u043b\u0438 \u0435\u0449\u0435 \u0431\u0443\u0434\u0435\u0442). \u0418 \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0443\u0447\u0430\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0431\u044b\u0441\u0442\u0440\u0435\u0435, \u0447\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438 \u0438 \u0431\u043b\u044e\u0441\u0442\u0438\u0442\u0435\u043b\u0438 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u2014 \u0443 \u043d\u0430\u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430 \u0441\u0442\u0430\u0440\u0430\u0435\u043c\u0441\u044f \u0432\u0435\u0440\u0438\u0442\u044c \u0432 \u043b\u0443\u0447\u0448\u0435\u0435 \ud83e\udd42\n\n#\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f_\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-09-15T00:00:27.814452Z"} 2026-09-15T00:00:27.814452+00:00 https://vulnerability.circl.lu/sighting/8ab35cfd-d244-44d4-92ae-794ab3022744/export 2026-09-17T09:01:39.750680+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8ab35cfd-d244-44d4-92ae-794ab3022744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8424", "type": "exploited", "source": "https://t.me/maxienergy_channel/319", "content": "\u041d\u0430 \u0434\u0430\u0440\u043a\u043d\u0435\u0442-\u0444\u043e\u0440\u0443\u043c\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0418\u0418-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a HexStrike AI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0441\u044f \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f red team, \u043d\u043e \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Citrix (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424) \ud83d\ude0f\n\nHexStrike AI \u0432\u0441\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446 \u043a\u0430\u043a \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u0430 GitHub \u0438 \u0443\u0436\u0435 \u0441\u043e\u0431\u0440\u0430\u043b 2400 \u0437\u0432\u0451\u0437\u0434. \u0415\u0433\u043e \u0430\u0432\u0442\u043e\u0440, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041c\u0443\u0445\u0430\u043c\u043c\u0430\u0434 \u041e\u0441\u0430\u043c\u0430, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u043a\u0430\u043a \u00ab\u0418\u0418-\u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u00bb \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u043e\u0432 \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043c\u0435\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u0435\u0435 150 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 LLM \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0432 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435. \u0418\u0434\u0435\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b. \u041d\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u043e \u0431\u044b\u0432\u0430\u0435\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u043e\u0436\u0435 \u043c\u0438\u043c\u043e \u0442\u0430\u043a\u043e\u0433\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u044c\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c ShadowServer, \u0435\u0449\u0451 \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 28 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 Citrix-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u0432, \u0430 \u0441\u0435\u0439\u0447\u0430\u0441 \u0443\u0436\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 8 \u0442\u044b\u0441\u044f\u0447. \u041d\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HexStrike AI \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u0438 \u043f\u0440\u043e\u0434\u0430\u0436\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 NetScaler. \u0412\u0441\u0451 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0441\u043f\u0443\u0441\u0442\u044f 12 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \ud83d\ude33\n\n\u0418 \u0432\u043e\u0442 \u0442\u0443\u0442 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0431\u0430\u0433\u0430 \u0438 \u0435\u0433\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0438\u0437\u043c\u0435\u0440\u044f\u043b\u043e\u0441\u044c \u0434\u043d\u044f\u043c\u0438, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c, \u0441 \u0418\u0418-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 \u0432\u0440\u043e\u0434\u0435 HexStrike AI, \u043e\u043d\u043e \u0441\u0436\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0434\u043e \u043f\u0430\u0440\u044b \u0447\u0430\u0441\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 \u0443\u0441\u0438\u043b\u0438\u0439 \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0443\u0442\u0438\u043d\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0434\u043b\u044f \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0440\u043e\u0431\u0443\u0435\u0442 \u0441\u043d\u043e\u0432\u0430 \u0438 \u0441\u043d\u043e\u0432\u0430, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u043e\u0431\u044c\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0443\n\n\u0410\u0432\u0442\u043e\u0440 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430, \u0440\u0430\u0437\u0443\u043c\u0435\u0435\u0442\u0441\u044f, \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0433\u043e \u0446\u0435\u043b\u044c \u2014 \u043f\u043e\u043c\u043e\u0447\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430\u043c, \u0430 \u043d\u0435 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442. \u041d\u043e \u0444\u0430\u043a\u0442 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0444\u0430\u043a\u0442\u043e\u043c: \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0437\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0438, \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \ud83e\udde0\n\n\u0415\u0441\u043b\u0438 \u043f\u043e\u0434\u0443\u043c\u0430\u0442\u044c, \u044d\u0442\u043e \u0432\u0435\u0434\u044c \u043b\u043e\u0433\u0438\u0447\u043d\u043e. \u041b\u044e\u0431\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435\u0442 \u043d\u0438\u0447\u0435\u0433\u043e \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0434\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043c\u043e\u043b\u043e\u0442\u043e\u043a \u043d\u0435 \u0434\u043b\u044f \u0437\u0430\u0431\u0438\u0432\u0430\u043d\u0438\u044f \u0433\u0432\u043e\u0437\u0434\u0435\u0439, \u0430 \u0434\u043b\u044f \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0442\u044f\u0436\u043a\u0438\u0445 \u0442\u0435\u043b\u0435\u0441\u043d\u044b\u0445... \u0442\u0443\u0442 \u0432\u0441\u0435 \u0442\u043e \u0436\u0435 \u0441\u0430\u043c\u043e\u0435. \u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u044f \u0443 \u0441\u0435\u0431\u044f \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u0443\u0436\u0435 \u043a\u0430\u043a-\u0442\u043e \u0434\u0435\u043b\u0430\u043b \u043e\u0431\u0437\u043e\u0440 \u043d\u0430 \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0437\u043d\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043a\u0438\u0434\u0434\u0438\n\n\u0412\u044b\u0432\u043e\u0434 \u0442\u0443\u0442 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e\u0439. \u041c\u044b \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0438 \u043f\u0440\u0430\u0432\u0434\u0430 \u0436\u0438\u0432\u0435\u043c \u0432 \u044d\u043f\u043e\u0445\u0435, \u0433\u0434\u0435 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u044b \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435\u0433\u043e (\u0438 \u0442\u043e \u043b\u0438 \u0435\u0449\u0435 \u0431\u0443\u0434\u0435\u0442). \u0418 \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0443\u0447\u0430\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0431\u044b\u0441\u0442\u0440\u0435\u0435, \u0447\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438 \u0438 \u0431\u043b\u044e\u0441\u0442\u0438\u0442\u0435\u043b\u0438 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u2014 \u0443 \u043d\u0430\u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430 \u0441\u0442\u0430\u0440\u0430\u0435\u043c\u0441\u044f \u0432\u0435\u0440\u0438\u0442\u044c \u0432 \u043b\u0443\u0447\u0448\u0435\u0435 \ud83e\udd42\n\n#\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f_\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-09-14T07:00:04.949752Z"} 2026-09-14T07:00:04.949752+00:00 https://vulnerability.circl.lu/sighting/1a54abd9-9b52-4b1f-ae1b-09740fe59e10/export 2026-09-17T09:01:39.750890+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1a54abd9-9b52-4b1f-ae1b-09740fe59e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8424", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-10T00:00:55.399120Z"} 2026-09-10T00:00:55.399120+00:00 https://vulnerability.circl.lu/sighting/77366851-4927-4934-b762-fde1c404c236/export 2026-09-17T09:01:39.751028+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "77366851-4927-4934-b762-fde1c404c236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8424", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-09T03:00:06.453092Z"} 2026-09-09T03:00:06.453092+00:00 https://vulnerability.circl.lu/sighting/77bc5ac6-79d2-4214-8ca9-e4e40e76f48d/export 2026-09-17T09:01:39.751152+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "77bc5ac6-79d2-4214-8ca9-e4e40e76f48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8489", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_king_addons_privilege_escalation.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Peter Thaleikis\", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated privilege escalation vulnerability in the WordPress\\n King Addons for Elementor plugin (versions 24.12.92 to 51.1.14). The vulnerability exists\\n in the handle_register_ajax() function which allows unauthenticated attackers to specify\\n the user_role parameter during registration, enabling them to create administrator accounts.\\n\\n This exploit requires a WordPress page containing the King Addons \\\"Login Register Form\\\"\\n Elementor widget, which exposes the required nonce token in the page's JavaScript.\\n The NONCE_PAGE option must be set to the path of such a page.\\n\\n Once an administrator account is created, the module uploads and executes a malicious\\n plugin to achieve remote code execution (RCE).\", \"disclosure_date\": \"2025-10-30\", \"fullname\": \"exploit/multi/http/wp_king_addons_privilege_escalation\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"WordPress King Addons for Elementor Unauthenticated Privilege Escalation to RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_king_addons_privilege_escalation.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_king_addons_privilege_escalation\", \"references\": [\"CVE-2025-8489\", \"URL-https://www.wordfence.com/blog/2025/12/attackers-actively-exploiting-critical-vulnerability-in-king-addons-for-elementor-plugin/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.756623Z"} 2026-09-08T06:50:21.756623+00:00 https://vulnerability.circl.lu/sighting/efeb423d-c0f6-466d-92ed-3cf1b2dcbe49/export 2026-09-17T09:01:39.751270+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "efeb423d-c0f6-466d-92ed-3cf1b2dcbe49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8424", "type": "seen", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-02T01:03:47.742104Z"} 2026-09-02T01:03:47.742104+00:00 https://vulnerability.circl.lu/sighting/74ab54b4-ec83-4fe3-bf3f-32d65c80f1da/export 2026-09-17T09:01:39.751391+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "74ab54b4-ec83-4fe3-bf3f-32d65c80f1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8424", "type": "seen", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-01T17:00:13.221918Z"} 2026-09-01T17:00:13.221918+00:00 https://vulnerability.circl.lu/sighting/aeebd4d0-b12b-4677-9c8c-6a72061e0bd6/export 2026-09-17T09:01:39.751510+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "aeebd4d0-b12b-4677-9c8c-6a72061e0bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8447", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtqu4sqkaz24", "content": "CVE-2025-8447 is trending. Hype score 4, currently #6 on cvemon.\n\nAn improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-8447", "creation_timestamp": "2026-08-23T13:05:20.631343Z"} 2026-08-23T13:05:20.631343+00:00 https://vulnerability.circl.lu/sighting/cd7fb0cb-6cc1-4082-acd2-ac26b28425f7/export 2026-09-17T09:01:39.751608+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cd7fb0cb-6cc1-4082-acd2-ac26b28425f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8489", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/990", "content": "CVE-2025-8489: Path Traversal in ShopLentor WordPress Plugin, 9.8 rating \ud83d\udd25\n\nA recent vulnerability in the ShopLentor (formerly WooLentor) plugin allows unauthenticated attackers to execute any code from PHP files on the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/wKuHH\n\ud83d\udc49 Dork: http.body:\"plugins/woolentor-addons\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woolentor-addons/shoplentor-325-unauthenticated-local-php-file-inclusion-via-load-template", "creation_timestamp": "2026-07-27T00:00:32.850984Z"} 2026-07-27T00:00:32.850984+00:00 https://vulnerability.circl.lu/sighting/4c58603a-cc2a-4d10-b657-43f9d7b14768/export 2026-09-17T09:01:39.751708+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4c58603a-cc2a-4d10-b657-43f9d7b14768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8489", "type": "seen", "source": "https://t.me/cyberwarehouse/990", "content": "CVE-2025-8489: Path Traversal in ShopLentor WordPress Plugin, 9.8 rating \ud83d\udd25\n\nA recent vulnerability in the ShopLentor (formerly WooLentor) plugin allows unauthenticated attackers to execute any code from PHP files on the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/wKuHH\n\ud83d\udc49 Dork: http.body:\"plugins/woolentor-addons\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woolentor-addons/shoplentor-325-unauthenticated-local-php-file-inclusion-via-load-template", "creation_timestamp": "2026-07-26T02:00:08.248085Z"} 2026-07-26T02:00:08.248085+00:00