<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T09:01:35.627360+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5bf83adb-0df2-40c5-a655-385423a79646/export</id>
    <title>5bf83adb-0df2-40c5-a655-385423a79646</title>
    <updated>2026-09-17T09:01:35.638247+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5bf83adb-0df2-40c5-a655-385423a79646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9244", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/3409", "content": "\u2728 Network Security \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u0435\u043b\u044f\u0445 Wi-Fi Linksys \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0446\u0435\u043b\u043e\u0439 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 Wi-Fi \u0443\u0441\u0438\u043b\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 Linksys. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2025-9244 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u0430\u044f \u0432 \u0411\u0430\u043d\u043a \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (BDU) \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c BDU:2025-15465, \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0432\u0441\u044e \u0434\u043e\u043c\u0430\u0448\u043d\u044e\u044e \u0438\u043b\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-12-12 06:26 | Author: Vulner Queen\n\n#wifi #network_security #linksys\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-populyarnyh-usilitelyah-wi-fi-linksys-pozvolyaet-udalenno-vypolnyat-komandy_17097", "creation_timestamp": "2026-09-10T00:00:48.788082Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5bf83adb-0df2-40c5-a655-385423a79646/export"/>
    <published>2026-09-10T00:00:48.788082+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86ac5a14-2e7a-46c6-be58-e46064b12cfc/export</id>
    <title>86ac5a14-2e7a-46c6-be58-e46064b12cfc</title>
    <updated>2026-09-17T09:01:35.639929+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86ac5a14-2e7a-46c6-be58-e46064b12cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9242", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/2346", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Warns of Active Exploitation of WatchGuard Firebox Out-of-Bounds Write Flaw\n\n\u2014\n\nSummary:\nThe Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting WatchGuard Firebox firewalls to its Known Exploited Vulnerabilities (KEV) catalog, warning of active exploitation in the wild. The flaw, tracked as CVE-2025-9242, poses severe risks to organizations relying on these devices for network security. The Vulnerability WatchGuard Firebox firewalls contain an\u00a0out-of-bounds write [\u2026]\nThe post CISA Warns of Active Exploitation of WatchGuard...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-13 05:53 | Author: Divya\n\n#cisa #vulnerabilities__exploits #warns\n\nhttps://gbhackers.com/cisa-warns-watchguard-firebox-out-of-bounds-write-flaw/", "creation_timestamp": "2026-09-10T00:00:40.972058Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86ac5a14-2e7a-46c6-be58-e46064b12cfc/export"/>
    <published>2026-09-10T00:00:40.972058+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ae018d0-89f2-4ed0-81d5-8640a8064f43/export</id>
    <title>2ae018d0-89f2-4ed0-81d5-8640a8064f43</title>
    <updated>2026-09-17T09:01:35.640114+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ae018d0-89f2-4ed0-81d5-8640a8064f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9242", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2346", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Warns of Active Exploitation of WatchGuard Firebox Out-of-Bounds Write Flaw\n\n\u2014\n\nSummary:\nThe Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting WatchGuard Firebox firewalls to its Known Exploited Vulnerabilities (KEV) catalog, warning of active exploitation in the wild. The flaw, tracked as CVE-2025-9242, poses severe risks to organizations relying on these devices for network security. The Vulnerability WatchGuard Firebox firewalls contain an\u00a0out-of-bounds write [\u2026]\nThe post CISA Warns of Active Exploitation of WatchGuard...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-13 05:53 | Author: Divya\n\n#cisa #vulnerabilities__exploits #warns\n\nhttps://gbhackers.com/cisa-warns-watchguard-firebox-out-of-bounds-write-flaw/", "creation_timestamp": "2026-09-09T05:00:12.239774Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ae018d0-89f2-4ed0-81d5-8640a8064f43/export"/>
    <published>2026-09-09T05:00:12.239774+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/733c09e8-a1c5-4509-91fc-5e81293225b4/export</id>
    <title>733c09e8-a1c5-4509-91fc-5e81293225b4</title>
    <updated>2026-09-17T09:01:35.640262+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "733c09e8-a1c5-4509-91fc-5e81293225b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9244", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/3409", "content": "\u2728 Network Security \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0442\u0435\u043b\u044f\u0445 Wi-Fi Linksys \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0446\u0435\u043b\u043e\u0439 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 Wi-Fi \u0443\u0441\u0438\u043b\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 Linksys. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2025-9244 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u0430\u044f \u0432 \u0411\u0430\u043d\u043a \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (BDU) \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c BDU:2025-15465, \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0432\u0441\u044e \u0434\u043e\u043c\u0430\u0448\u043d\u044e\u044e \u0438\u043b\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-12-12 06:26 | Author: Vulner Queen\n\n#wifi #network_security #linksys\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-populyarnyh-usilitelyah-wi-fi-linksys-pozvolyaet-udalenno-vypolnyat-komandy_17097", "creation_timestamp": "2026-09-09T05:00:07.816102Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/733c09e8-a1c5-4509-91fc-5e81293225b4/export"/>
    <published>2026-09-09T05:00:07.816102+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7260dfe0-b71a-430e-a221-df7fbce7bff3/export</id>
    <title>7260dfe0-b71a-430e-a221-df7fbce7bff3</title>
    <updated>2026-09-17T09:01:35.640409+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7260dfe0-b71a-430e-a221-df7fbce7bff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9210", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtf64snzq42w", "content": "Otalio Ship Property Management System v2.22.0\u672a\u6e80\u3067\u3001JWT\u306e\u7f72\u540d\u691c\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u304c\u6a29\u9650\u6607\u683c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2025-9210 CVSS 8.1 | HIGH", "creation_timestamp": "2026-08-18T21:32:20.927057Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7260dfe0-b71a-430e-a221-df7fbce7bff3/export"/>
    <published>2026-08-18T21:32:20.927057+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0235d8eb-37eb-4baf-bf52-f95dbee460f4/export</id>
    <title>0235d8eb-37eb-4baf-bf52-f95dbee460f4</title>
    <updated>2026-09-17T09:01:35.640545+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0235d8eb-37eb-4baf-bf52-f95dbee460f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/csbkkewf77pfs", "content": "CVE-2025-9210 - Missing JSON Web Token signature validation in Otalio Ship Property Management System\nCVE ID : CVE-2025-9210\n \n Published : 18 ao\u00fbt 2026 19:16 | 32\u00a0minutes ago\n \n Description : Missing signature validation in JSON Web Tokens in Otalio Ship Property Management S...", "creation_timestamp": "2026-08-18T20:30:51.604698Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0235d8eb-37eb-4baf-bf52-f95dbee460f4/export"/>
    <published>2026-08-18T20:30:51.604698+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4a78db98-da90-49b6-a154-0ca271128a11/export</id>
    <title>4a78db98-da90-49b6-a154-0ca271128a11</title>
    <updated>2026-09-17T09:01:35.640694+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4a78db98-da90-49b6-a154-0ca271128a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9242", "type": "seen", "source": "https://t.me/purp_sec/1215", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-9242 \u2014 \u0431\u0430\u0433 \u0432 WatchGuard Fireware OS. \u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 IKEv2 \u0444\u0443\u043d\u043a\u0446\u0438\u044f ike2_ProcessPayload_CERT \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u043b\u0435 Identification \u0432 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0442\u0435\u043a\u043e\u0432\u044b\u0439 \u0431\u0443\u0444\u0435\u0440 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043b\u0438\u043d\u044b. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 IKE_SA_INIT+IKE_SA_AUTH \u043f\u043e\u0442\u043e\u043a \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c stack-based buffer overflow \u2014 out-of-bounds write \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE \u043d\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 (IKEv2 VPN).\n\n\ud83d\udd35 CVE-2025-11001 \u2014 \u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 Linux/WSL \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u043e\u0432 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 ZIP. \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043c\u0435\u0442\u0438\u0442\u044c \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 C:\\... \u043a\u0430\u043a \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0437\u0430\u0442\u0435\u043c \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043c\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0440\u0435\u0444\u0438\u043a\u0441 \u0438\u0437 \u0430\u0440\u0445\u0438\u0432\u0430 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 IsSafePath. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u0449\u0438\u043a \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0432 \u043d\u0435\u0436\u0435\u043b\u0430\u043d\u043d\u0443\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0442\u0443\u0434\u0430 \u0444\u0430\u0439\u043b. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 Windows \u043f\u0440\u0438 \u043f\u0440\u0430\u0432\u0430\u0445 elevated \u0438\u043b\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\ud83d\udd35 CVE-2025-55315 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u043c \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Kestrel (ASP.NET Core). \u041d\u0435\u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0446\u0438\u044f \u0433\u0440\u0430\u043d\u0438\u0446 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0442\u0430\u0449\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u0440\u043e\u043a\u0441\u0438\u2014\u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u0440\u044f\u0434\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u0442\u044c CSRF-\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u043b\u0438 \u0438\u043d\u0436\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c.\n\n\ud83d\udd35 GHSL-2025-094 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ag2ai/faststream \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 .github/workflows/pr_autoupdate.yaml. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 pull_request_target \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0447\u0435\u043a\u0430\u043b out \u043a\u043e\u0434 \u0438\u0437 \u0441\u0430\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 PR \u0438 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b pip install/\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u0430 AUTOMERGE_TOKEN \u0438 \u043f\u0440\u0430\u0432 contents: write. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u0432\u0435\u0442\u043a\u0443 PR \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 setup.py \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u0430.\n\n\ud83d\udd35 GHSL-2025-090 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 harvester/harvester \u0432 workflow .github/workflows/issue-management-link-backport-pr.yaml. \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 pull_request_target \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 github.event.pull_request.title \u0432 shell-heredoc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u0434\u0430 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 PR \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043a\u0440\u0430\u0436\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:32.663450Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4a78db98-da90-49b6-a154-0ca271128a11/export"/>
    <published>2026-08-15T00:00:32.663450+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aad22eb1-847d-4d8b-b2fe-669ad27d00c0/export</id>
    <title>aad22eb1-847d-4d8b-b2fe-669ad27d00c0</title>
    <updated>2026-09-17T09:01:35.640891+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aad22eb1-847d-4d8b-b2fe-669ad27d00c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9242", "type": "seen", "source": "https://t.me/purp_sec/1215", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-9242 \u2014 \u0431\u0430\u0433 \u0432 WatchGuard Fireware OS. \u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 IKEv2 \u0444\u0443\u043d\u043a\u0446\u0438\u044f ike2_ProcessPayload_CERT \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u043b\u0435 Identification \u0432 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0442\u0435\u043a\u043e\u0432\u044b\u0439 \u0431\u0443\u0444\u0435\u0440 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043b\u0438\u043d\u044b. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 IKE_SA_INIT+IKE_SA_AUTH \u043f\u043e\u0442\u043e\u043a \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c stack-based buffer overflow \u2014 out-of-bounds write \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE \u043d\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 (IKEv2 VPN).\n\n\ud83d\udd35 CVE-2025-11001 \u2014 \u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 Linux/WSL \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u043e\u0432 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 ZIP. \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043c\u0435\u0442\u0438\u0442\u044c \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 C:\\... \u043a\u0430\u043a \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0437\u0430\u0442\u0435\u043c \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043c\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0440\u0435\u0444\u0438\u043a\u0441 \u0438\u0437 \u0430\u0440\u0445\u0438\u0432\u0430 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 IsSafePath. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u0449\u0438\u043a \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0432 \u043d\u0435\u0436\u0435\u043b\u0430\u043d\u043d\u0443\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0442\u0443\u0434\u0430 \u0444\u0430\u0439\u043b. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 Windows \u043f\u0440\u0438 \u043f\u0440\u0430\u0432\u0430\u0445 elevated \u0438\u043b\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\ud83d\udd35 CVE-2025-55315 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u043c \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Kestrel (ASP.NET Core). \u041d\u0435\u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0446\u0438\u044f \u0433\u0440\u0430\u043d\u0438\u0446 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0442\u0430\u0449\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u0440\u043e\u043a\u0441\u0438\u2014\u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u0440\u044f\u0434\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u0442\u044c CSRF-\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u043b\u0438 \u0438\u043d\u0436\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c.\n\n\ud83d\udd35 GHSL-2025-094 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ag2ai/faststream \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 .github/workflows/pr_autoupdate.yaml. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 pull_request_target \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0447\u0435\u043a\u0430\u043b out \u043a\u043e\u0434 \u0438\u0437 \u0441\u0430\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 PR \u0438 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b pip install/\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u0430 AUTOMERGE_TOKEN \u0438 \u043f\u0440\u0430\u0432 contents: write. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u0432\u0435\u0442\u043a\u0443 PR \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 setup.py \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u0430.\n\n\ud83d\udd35 GHSL-2025-090 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 harvester/harvester \u0432 workflow .github/workflows/issue-management-link-backport-pr.yaml. \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 pull_request_target \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 github.event.pull_request.title \u0432 shell-heredoc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u0434\u0430 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 PR \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043a\u0440\u0430\u0436\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:05.617623Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aad22eb1-847d-4d8b-b2fe-669ad27d00c0/export"/>
    <published>2026-08-14T16:00:05.617623+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ff138e41-e0ab-4d92-b8da-1b4f8f3cb409/export</id>
    <title>ff138e41-e0ab-4d92-b8da-1b4f8f3cb409</title>
    <updated>2026-09-17T09:01:35.641057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ff138e41-e0ab-4d92-b8da-1b4f8f3cb409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9242", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mstg4ls23f2r", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2025-9242: An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to \u2026\nCVSS 9.8 \u00b7 EPSS 91.3% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2025-9242\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-11T20:07:28.184855Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ff138e41-e0ab-4d92-b8da-1b4f8f3cb409/export"/>
    <published>2026-08-11T20:07:28.184855+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8a7a175d-ae94-4c67-a150-d1caabac6cb9/export</id>
    <title>8a7a175d-ae94-4c67-a150-d1caabac6cb9</title>
    <updated>2026-09-17T09:01:35.641158+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8a7a175d-ae94-4c67-a150-d1caabac6cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9242", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1088", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nyIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242)\n\n\u2014\n\nSummary:\nNote from editor: Before we begin, a big welcome to McCaulay Hudson, the newest member of the watchTowr Labs team with his inaugural blog post! Welcome to the mayhem, McCaulay!\n\nToday is the 8th of November 1996, and we\u2019re thrilled to be exploring this new primitive we call Sack-based Buffer Overflows. It\u2019s a great time to be alive, especially because we don\u2019t have to deal with any of the pain of modern/not-so-modern mitigations.\n\nOh no, wait, it\u2019s 2025 and we are still seeing Stack-based Buffer\n\n\u2014\n\nSource: 0day Fans\nPublished: 2025-10-16 10:04 | Author: McCaulay Hudson\n\n#yikes #(watchguard #vulnerabilitiesexploits", "creation_timestamp": "2026-08-10T00:00:33.143000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8a7a175d-ae94-4c67-a150-d1caabac6cb9/export"/>
    <published>2026-08-10T00:00:33.143000+00:00</published>
  </entry>
</feed>
