https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 03 Sep 2026 18:08:23 +0000 https://vulnerability.circl.lu/sighting/fa5087ee-5d01-4ed1-80d3-434b0a13c841/export {"uuid": "fa5087ee-5d01-4ed1-80d3-434b0a13c841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/HackerNewscyber/3396", "content": "\u2708 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0647\u0633\u062a\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632\n\n\u00a9\ufe0f \u06cc\u06a9 \u067e\u0698\u0648\u0647\u0634 \u062c\u062f\u06cc\u062f \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646\u06cc \u0628\u0632\u0631\u06af (LLM) \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0641\u0631\u0627\u06cc\u0646\u062f \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0634\u06a9\u0644 \u0686\u0634\u0645\u06af\u06cc\u0631\u06cc \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u06cc\u0646 \u0628\u0631\u0631\u0633\u06cc\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0645\u062d\u0644\u06cc \u0648 \u0627\u0628\u0632\u0627\u0631 \u067e\u0627\u06cc\u200c\u06af\u06cc\u062f\u0631\u0627-\u0627\u0645\u200c\u0633\u06cc\u200c\u067e\u06cc (pyghidra-mcp)\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-29824 \u062f\u0631 \u062f\u0631\u0627\u06cc\u0648\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u0644\u0627\u06af \u0645\u0634\u062a\u0631\u06a9 \u0648\u06cc\u0646\u062f\u0648\u0632 (CLFS) \u0631\u0627 \u062a\u062d\u0644\u06cc\u0644 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u0646\u0648\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u067e\u0633 \u0627\u0632 \u0622\u0632\u0627\u062f\u0633\u0627\u0632\u06cc (Use-After-Free) \u0627\u0633\u062a \u0648 \u062f\u0631 \u0627\u062b\u0631 \u06cc\u06a9 \u0648\u0636\u0639\u06cc\u062a \u0631\u0642\u0627\u0628\u062a\u06cc \u0645\u06cc\u0627\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc/\u062e\u0631\u0648\u062c\u06cc \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u00a9\ufe0f \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0628\u0627 \u0628\u0631\u0631\u0633\u06cc \u062a\u0641\u0627\u0648\u062a \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0648 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647\u060c \u062a\u062d\u0644\u06cc\u0644 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc\u060c \u062a\u0648\u0627\u0646\u0633\u062a \u062a\u0648\u0627\u0628\u0639 \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u0645\u0633\u06cc\u0631 \u0627\u06cc\u062c\u0627\u062f \u062e\u0637\u0627 \u0631\u0627 \u0628\u0627\u0632\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0637\u0628\u0642 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634\u060c \u0641\u0631\u0627\u06cc\u0646\u062f\u06cc \u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u06f2 \u062a\u0627 \u06f3 \u0633\u0627\u0639\u062a \u062a\u062d\u0644\u06cc\u0644 \u062f\u0633\u062a\u06cc \u0632\u0645\u0627\u0646 \u0645\u06cc\u200c\u0628\u0631\u062f\u060c \u0628\u0627 \u06a9\u0645\u06a9 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0647 \u062d\u062f\u0648\u062f \u06f2\u06f0 \u062f\u0642\u06cc\u0642\u0647 \u06a9\u0627\u0647\u0634 \u06cc\u0627\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u062a\u062d\u0644\u06cc\u0644\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u06cc\u0633\u062a\u061b \u0628\u0644\u06a9\u0647 \u0628\u0627 \u062e\u0648\u062f\u06a9\u0627\u0631\u0633\u0627\u0632\u06cc \u062c\u0633\u062a\u200c\u0648\u062c\u0648\u060c \u062a\u062d\u0644\u06cc\u0644 \u06a9\u062f \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631 \u062f\u0627\u062f\u0647\u060c \u0633\u0631\u0639\u062a \u0648 \u0628\u0647\u0631\u0647\u200c\u0648\u0631\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-02T01:05:08.257491Z"} {"uuid": "fa5087ee-5d01-4ed1-80d3-434b0a13c841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/HackerNewscyber/3396", "content": "\u2708 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0647\u0633\u062a\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632\n\n\u00a9\ufe0f \u06cc\u06a9 \u067e\u0698\u0648\u0647\u0634 \u062c\u062f\u06cc\u062f \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646\u06cc \u0628\u0632\u0631\u06af (LLM) \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0641\u0631\u0627\u06cc\u0646\u062f \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0634\u06a9\u0644 \u0686\u0634\u0645\u06af\u06cc\u0631\u06cc \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u06cc\u0646 \u0628\u0631\u0631\u0633\u06cc\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0645\u062d\u0644\u06cc \u0648 \u0627\u0628\u0632\u0627\u0631 \u067e\u0627\u06cc\u200c\u06af\u06cc\u062f\u0631\u0627-\u0627\u0645\u200c\u0633\u06cc\u200c\u067e\u06cc (pyghidra-mcp)\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-29824 \u062f\u0631 \u062f\u0631\u0627\u06cc\u0648\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u0644\u0627\u06af \u0645\u0634\u062a\u0631\u06a9 \u0648\u06cc\u0646\u062f\u0648\u0632 (CLFS) \u0631\u0627 \u062a\u062d\u0644\u06cc\u0644 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u0646\u0648\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u067e\u0633 \u0627\u0632 \u0622\u0632\u0627\u062f\u0633\u0627\u0632\u06cc (Use-After-Free) \u0627\u0633\u062a \u0648 \u062f\u0631 \u0627\u062b\u0631 \u06cc\u06a9 \u0648\u0636\u0639\u06cc\u062a \u0631\u0642\u0627\u0628\u062a\u06cc \u0645\u06cc\u0627\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc/\u062e\u0631\u0648\u062c\u06cc \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u00a9\ufe0f \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0628\u0627 \u0628\u0631\u0631\u0633\u06cc \u062a\u0641\u0627\u0648\u062a \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0648 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647\u060c \u062a\u062d\u0644\u06cc\u0644 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc\u060c \u062a\u0648\u0627\u0646\u0633\u062a \u062a\u0648\u0627\u0628\u0639 \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u0645\u0633\u06cc\u0631 \u0627\u06cc\u062c\u0627\u062f \u062e\u0637\u0627 \u0631\u0627 \u0628\u0627\u0632\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0637\u0628\u0642 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634\u060c \u0641\u0631\u0627\u06cc\u0646\u062f\u06cc \u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u06f2 \u062a\u0627 \u06f3 \u0633\u0627\u0639\u062a \u062a\u062d\u0644\u06cc\u0644 \u062f\u0633\u062a\u06cc \u0632\u0645\u0627\u0646 \u0645\u06cc\u200c\u0628\u0631\u062f\u060c \u0628\u0627 \u06a9\u0645\u06a9 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0647 \u062d\u062f\u0648\u062f \u06f2\u06f0 \u062f\u0642\u06cc\u0642\u0647 \u06a9\u0627\u0647\u0634 \u06cc\u0627\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u062a\u062d\u0644\u06cc\u0644\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u06cc\u0633\u062a\u061b \u0628\u0644\u06a9\u0647 \u0628\u0627 \u062e\u0648\u062f\u06a9\u0627\u0631\u0633\u0627\u0632\u06cc \u062c\u0633\u062a\u200c\u0648\u062c\u0648\u060c \u062a\u062d\u0644\u06cc\u0644 \u06a9\u062f \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631 \u062f\u0627\u062f\u0647\u060c \u0633\u0631\u0639\u062a \u0648 \u0628\u0647\u0631\u0647\u200c\u0648\u0631\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-02T01:05:08.257491Z"} https://vulnerability.circl.lu/sighting/fa5087ee-5d01-4ed1-80d3-434b0a13c841/export Wed, 02 Sep 2026 01:05:08 +0000 https://vulnerability.circl.lu/sighting/b0fc35b0-df9f-4db7-983e-00b83f5e2119/export {"uuid": "b0fc35b0-df9f-4db7-983e-00b83f5e2119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/HackerNewscyber/3396", "content": "\u2708 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0647\u0633\u062a\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632\n\n\u00a9\ufe0f \u06cc\u06a9 \u067e\u0698\u0648\u0647\u0634 \u062c\u062f\u06cc\u062f \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646\u06cc \u0628\u0632\u0631\u06af (LLM) \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0641\u0631\u0627\u06cc\u0646\u062f \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0634\u06a9\u0644 \u0686\u0634\u0645\u06af\u06cc\u0631\u06cc \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u06cc\u0646 \u0628\u0631\u0631\u0633\u06cc\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0645\u062d\u0644\u06cc \u0648 \u0627\u0628\u0632\u0627\u0631 \u067e\u0627\u06cc\u200c\u06af\u06cc\u062f\u0631\u0627-\u0627\u0645\u200c\u0633\u06cc\u200c\u067e\u06cc (pyghidra-mcp)\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-29824 \u062f\u0631 \u062f\u0631\u0627\u06cc\u0648\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u0644\u0627\u06af \u0645\u0634\u062a\u0631\u06a9 \u0648\u06cc\u0646\u062f\u0648\u0632 (CLFS) \u0631\u0627 \u062a\u062d\u0644\u06cc\u0644 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u0646\u0648\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u067e\u0633 \u0627\u0632 \u0622\u0632\u0627\u062f\u0633\u0627\u0632\u06cc (Use-After-Free) \u0627\u0633\u062a \u0648 \u062f\u0631 \u0627\u062b\u0631 \u06cc\u06a9 \u0648\u0636\u0639\u06cc\u062a \u0631\u0642\u0627\u0628\u062a\u06cc \u0645\u06cc\u0627\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc/\u062e\u0631\u0648\u062c\u06cc \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u00a9\ufe0f \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0628\u0627 \u0628\u0631\u0631\u0633\u06cc \u062a\u0641\u0627\u0648\u062a \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0648 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647\u060c \u062a\u062d\u0644\u06cc\u0644 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc\u060c \u062a\u0648\u0627\u0646\u0633\u062a \u062a\u0648\u0627\u0628\u0639 \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u0645\u0633\u06cc\u0631 \u0627\u06cc\u062c\u0627\u062f \u062e\u0637\u0627 \u0631\u0627 \u0628\u0627\u0632\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0637\u0628\u0642 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634\u060c \u0641\u0631\u0627\u06cc\u0646\u062f\u06cc \u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u06f2 \u062a\u0627 \u06f3 \u0633\u0627\u0639\u062a \u062a\u062d\u0644\u06cc\u0644 \u062f\u0633\u062a\u06cc \u0632\u0645\u0627\u0646 \u0645\u06cc\u200c\u0628\u0631\u062f\u060c \u0628\u0627 \u06a9\u0645\u06a9 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0647 \u062d\u062f\u0648\u062f \u06f2\u06f0 \u062f\u0642\u06cc\u0642\u0647 \u06a9\u0627\u0647\u0634 \u06cc\u0627\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u062a\u062d\u0644\u06cc\u0644\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u06cc\u0633\u062a\u061b \u0628\u0644\u06a9\u0647 \u0628\u0627 \u062e\u0648\u062f\u06a9\u0627\u0631\u0633\u0627\u0632\u06cc \u062c\u0633\u062a\u200c\u0648\u062c\u0648\u060c \u062a\u062d\u0644\u06cc\u0644 \u06a9\u062f \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631 \u062f\u0627\u062f\u0647\u060c \u0633\u0631\u0639\u062a \u0648 \u0628\u0647\u0631\u0647\u200c\u0648\u0631\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-01T14:00:05.762734Z"} {"uuid": "b0fc35b0-df9f-4db7-983e-00b83f5e2119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/HackerNewscyber/3396", "content": "\u2708 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0647\u0633\u062a\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632\n\n\u00a9\ufe0f \u06cc\u06a9 \u067e\u0698\u0648\u0647\u0634 \u062c\u062f\u06cc\u062f \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646\u06cc \u0628\u0632\u0631\u06af (LLM) \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0641\u0631\u0627\u06cc\u0646\u062f \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0634\u06a9\u0644 \u0686\u0634\u0645\u06af\u06cc\u0631\u06cc \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u06cc\u0646 \u0628\u0631\u0631\u0633\u06cc\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0645\u062d\u0644\u06cc \u0648 \u0627\u0628\u0632\u0627\u0631 \u067e\u0627\u06cc\u200c\u06af\u06cc\u062f\u0631\u0627-\u0627\u0645\u200c\u0633\u06cc\u200c\u067e\u06cc (pyghidra-mcp)\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-29824 \u062f\u0631 \u062f\u0631\u0627\u06cc\u0648\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u0644\u0627\u06af \u0645\u0634\u062a\u0631\u06a9 \u0648\u06cc\u0646\u062f\u0648\u0632 (CLFS) \u0631\u0627 \u062a\u062d\u0644\u06cc\u0644 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u0646\u0648\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u067e\u0633 \u0627\u0632 \u0622\u0632\u0627\u062f\u0633\u0627\u0632\u06cc (Use-After-Free) \u0627\u0633\u062a \u0648 \u062f\u0631 \u0627\u062b\u0631 \u06cc\u06a9 \u0648\u0636\u0639\u06cc\u062a \u0631\u0642\u0627\u0628\u062a\u06cc \u0645\u06cc\u0627\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc/\u062e\u0631\u0648\u062c\u06cc \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u00a9\ufe0f \u0645\u062f\u0644 \u0632\u0628\u0627\u0646\u06cc \u0628\u0627 \u0628\u0631\u0631\u0633\u06cc \u062a\u0641\u0627\u0648\u062a \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0648 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647\u060c \u062a\u062d\u0644\u06cc\u0644 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc\u060c \u062a\u0648\u0627\u0646\u0633\u062a \u062a\u0648\u0627\u0628\u0639 \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u0645\u0633\u06cc\u0631 \u0627\u06cc\u062c\u0627\u062f \u062e\u0637\u0627 \u0631\u0627 \u0628\u0627\u0632\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0637\u0628\u0642 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634\u060c \u0641\u0631\u0627\u06cc\u0646\u062f\u06cc \u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u06f2 \u062a\u0627 \u06f3 \u0633\u0627\u0639\u062a \u062a\u062d\u0644\u06cc\u0644 \u062f\u0633\u062a\u06cc \u0632\u0645\u0627\u0646 \u0645\u06cc\u200c\u0628\u0631\u062f\u060c \u0628\u0627 \u06a9\u0645\u06a9 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u0628\u0647 \u062d\u062f\u0648\u062f \u06f2\u06f0 \u062f\u0642\u06cc\u0642\u0647 \u06a9\u0627\u0647\u0634 \u06cc\u0627\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u062a\u062d\u0644\u06cc\u0644\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u06cc\u0633\u062a\u061b \u0628\u0644\u06a9\u0647 \u0628\u0627 \u062e\u0648\u062f\u06a9\u0627\u0631\u0633\u0627\u0632\u06cc \u062c\u0633\u062a\u200c\u0648\u062c\u0648\u060c \u062a\u062d\u0644\u06cc\u0644 \u06a9\u062f \u0648 \u062f\u0646\u0628\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0645\u0633\u06cc\u0631 \u062f\u0627\u062f\u0647\u060c \u0633\u0631\u0639\u062a \u0648 \u0628\u0647\u0631\u0647\u200c\u0648\u0631\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-01T14:00:05.762734Z"} https://vulnerability.circl.lu/sighting/b0fc35b0-df9f-4db7-983e-00b83f5e2119/export Tue, 01 Sep 2026 14:00:05 +0000 https://vulnerability.circl.lu/sighting/1f72d5b8-1786-4ef8-8378-0c777ebbd197/export {"uuid": "1f72d5b8-1786-4ef8-8378-0c777ebbd197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17180", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.552184Z"} {"uuid": "1f72d5b8-1786-4ef8-8378-0c777ebbd197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17180", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.552184Z"} https://vulnerability.circl.lu/sighting/1f72d5b8-1786-4ef8-8378-0c777ebbd197/export Fri, 28 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/a9267682-5b0c-4394-a8b2-2899cee46ff9/export {"uuid": "a9267682-5b0c-4394-a8b2-2899cee46ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17180", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.898736Z"} {"uuid": "a9267682-5b0c-4394-a8b2-2899cee46ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17180", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.898736Z"} https://vulnerability.circl.lu/sighting/a9267682-5b0c-4394-a8b2-2899cee46ff9/export Thu, 27 Aug 2026 20:00:04 +0000 https://vulnerability.circl.lu/sighting/c1112ac9-9c97-4229-9d3a-d82e41c5fe85/export {"uuid": "c1112ac9-9c97-4229-9d3a-d82e41c5fe85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/purp_sec/488", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u2014 \u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e 62 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Google \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0441\u043e\u0431\u043e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 CVE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 USB-\u043f\u043e\u0434\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-3155 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Yelp (\u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0440\u0435\u0434\u0435 GNOME). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438, \u0431\u0435\u0437 \u0432\u0435\u0434\u043e\u043c\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-30401 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WatsApp. \u0414\u043e \u043f\u0430\u0442\u0447\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u043e \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0438\u0445 MIME-\u0442\u0438\u043f\u043e\u043c, \u043d\u043e \u0432\u044b\u0431\u0438\u0440\u0430\u043b\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0434\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0438\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0418\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044c \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0430 \u043d\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-29824 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows Common Log File System (CLFS). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-31161 \u2014 \u0431\u0430\u0433 \u0432 CrushFTP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 AWS4-HMAC \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 HTTP FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u0445\u043e\u0434\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0438\u043c \u0441\u043b\u044d\u0448\u0435\u043c (/).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:54.457116Z"} {"uuid": "c1112ac9-9c97-4229-9d3a-d82e41c5fe85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/purp_sec/488", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u2014 \u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e 62 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Google \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0441\u043e\u0431\u043e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 CVE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 USB-\u043f\u043e\u0434\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-3155 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Yelp (\u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0440\u0435\u0434\u0435 GNOME). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438, \u0431\u0435\u0437 \u0432\u0435\u0434\u043e\u043c\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-30401 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WatsApp. \u0414\u043e \u043f\u0430\u0442\u0447\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u043e \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0438\u0445 MIME-\u0442\u0438\u043f\u043e\u043c, \u043d\u043e \u0432\u044b\u0431\u0438\u0440\u0430\u043b\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0434\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0438\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0418\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044c \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0430 \u043d\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-29824 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows Common Log File System (CLFS). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2025-31161 \u2014 \u0431\u0430\u0433 \u0432 CrushFTP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 AWS4-HMAC \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 HTTP FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u0445\u043e\u0434\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0438\u043c \u0441\u043b\u044d\u0448\u0435\u043c (/).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:54.457116Z"} https://vulnerability.circl.lu/sighting/c1112ac9-9c97-4229-9d3a-d82e41c5fe85/export Sun, 16 Aug 2026 00:00:54 +0000 https://vulnerability.circl.lu/sighting/77131626-de5e-45b1-adc4-fc5114af3d37/export {"uuid": "77131626-de5e-45b1-adc4-fc5114af3d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "exploited", "source": "https://t.me/purp_sec/489", "content": "\ud83d\udd12 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day (CVE-2025-29824) \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows Common Log File System (CLFS) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439\n\nCVE-2025-29824 \u2014 \u044d\u0442\u043e \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 CLFS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. 8 \u0430\u043f\u0440\u0435\u043b\u044f Microsoft \u043f\u0430\u0442\u0447 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043f\u043e\u043f\u0443\u0442\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 CVE.\n\n\u041a\u0430\u043a \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0442\u0440\u043e\u044f\u043d PipeMagic, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 RansomEXX (\u043e\u043d\u0430 \u0436\u0435 Storm-2460). \u042d\u0442\u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 2022 \u0433\u043e\u0434\u0430. \u041e\u043d \u043c\u043e\u0436\u0435\u0442 \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0442\u0430\u043a \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0436\u0435\u0440\u0442\u0432.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u044d\u0442\u0430\u043f\u044b \u0430\u0442\u0430\u043a\u0438:\n\n\ud83d\udd35 \u041f\u043e\u0441\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 PipeMagic \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0447\u0435\u0440\u0435\u0437 dllhost.exe.\n\ud83d\udd35 \u0427\u0435\u0440\u0435\u0437 API NtQuerySystemInformation \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u0440\u0435\u0441\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u0430\u0442\u0430\u043a\u0438.\n\ud83d\udd35 \u0414\u0430\u043b\u0435\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0442\u043e\u043a\u0435\u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c 0xFFFFFFFF \u0447\u0435\u0440\u0435\u0437 RtlSetAllBits, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430. \u0421\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u0444\u0430\u0439\u043b C:\\ProgramData\\SkyPDF\\PDUDrv.blf \u2014 \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 CLFS-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\ud83d\udd35 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 procdump.exe \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 lsass.exe.\n\ud83d\udd35 \u0418\u0437 dllhost.exe \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c. \u0424\u0430\u0439\u043b\u044b \u0448\u0438\u0444\u0440\u0443\u044e\u0442\u0441\u044f, \u043a \u043d\u0438\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435.\n\ud83d\udd35\u041f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 !_READ_ME_REXX2_!.txt.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #CVE", "creation_timestamp": "2026-08-16T00:00:54.371810Z"} {"uuid": "77131626-de5e-45b1-adc4-fc5114af3d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "exploited", "source": "https://t.me/purp_sec/489", "content": "\ud83d\udd12 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day (CVE-2025-29824) \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows Common Log File System (CLFS) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439\n\nCVE-2025-29824 \u2014 \u044d\u0442\u043e \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 CLFS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. 8 \u0430\u043f\u0440\u0435\u043b\u044f Microsoft \u043f\u0430\u0442\u0447 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043f\u043e\u043f\u0443\u0442\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 CVE.\n\n\u041a\u0430\u043a \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0442\u0440\u043e\u044f\u043d PipeMagic, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 RansomEXX (\u043e\u043d\u0430 \u0436\u0435 Storm-2460). \u042d\u0442\u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 2022 \u0433\u043e\u0434\u0430. \u041e\u043d \u043c\u043e\u0436\u0435\u0442 \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0442\u0430\u043a \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0436\u0435\u0440\u0442\u0432.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u044d\u0442\u0430\u043f\u044b \u0430\u0442\u0430\u043a\u0438:\n\n\ud83d\udd35 \u041f\u043e\u0441\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 PipeMagic \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0447\u0435\u0440\u0435\u0437 dllhost.exe.\n\ud83d\udd35 \u0427\u0435\u0440\u0435\u0437 API NtQuerySystemInformation \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u0440\u0435\u0441\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u0430\u0442\u0430\u043a\u0438.\n\ud83d\udd35 \u0414\u0430\u043b\u0435\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0442\u043e\u043a\u0435\u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c 0xFFFFFFFF \u0447\u0435\u0440\u0435\u0437 RtlSetAllBits, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430. \u0421\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u0444\u0430\u0439\u043b C:\\ProgramData\\SkyPDF\\PDUDrv.blf \u2014 \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 CLFS-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\ud83d\udd35 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 procdump.exe \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 lsass.exe.\n\ud83d\udd35 \u0418\u0437 dllhost.exe \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c. \u0424\u0430\u0439\u043b\u044b \u0448\u0438\u0444\u0440\u0443\u044e\u0442\u0441\u044f, \u043a \u043d\u0438\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435.\n\ud83d\udd35\u041f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 !_READ_ME_REXX2_!.txt.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #CVE", "creation_timestamp": "2026-08-16T00:00:54.371810Z"} https://vulnerability.circl.lu/sighting/77131626-de5e-45b1-adc4-fc5114af3d37/export Sun, 16 Aug 2026 00:00:54 +0000 https://vulnerability.circl.lu/sighting/1091842c-4a17-4405-86b4-84370c5ff9c2/export {"uuid": "1091842c-4a17-4405-86b4-84370c5ff9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30906", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.090912Z"} {"uuid": "1091842c-4a17-4405-86b4-84370c5ff9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30906", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.090912Z"} https://vulnerability.circl.lu/sighting/1091842c-4a17-4405-86b4-84370c5ff9c2/export Sun, 16 Aug 2026 00:00:25 +0000 https://vulnerability.circl.lu/sighting/c2ed5066-eecc-4a16-9be7-10c24fa4dc3e/export {"uuid": "c2ed5066-eecc-4a16-9be7-10c24fa4dc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30905", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.184127Z"} {"uuid": "c2ed5066-eecc-4a16-9be7-10c24fa4dc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30905", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.184127Z"} https://vulnerability.circl.lu/sighting/c2ed5066-eecc-4a16-9be7-10c24fa4dc3e/export Sun, 16 Aug 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/7e38678a-b6e5-4e38-8777-d21759a6024b/export {"uuid": "7e38678a-b6e5-4e38-8777-d21759a6024b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30905", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:04.317033Z"} {"uuid": "7e38678a-b6e5-4e38-8777-d21759a6024b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30905", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:04.317033Z"} https://vulnerability.circl.lu/sighting/7e38678a-b6e5-4e38-8777-d21759a6024b/export Sat, 15 Aug 2026 12:00:04 +0000 https://vulnerability.circl.lu/sighting/26795c99-a5ef-442a-909e-bad17daddace/export {"uuid": "26795c99-a5ef-442a-909e-bad17daddace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30906", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.894039Z"} {"uuid": "26795c99-a5ef-442a-909e-bad17daddace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29824", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30906", "content": "\ud83d\udd0d DiffRays \u2013 Reverse Engineering Patch Analysis Tool\n\n\ud83d\udccc Repository\n\u27a1\ufe0f https://github.com/pwnfuzz/diffrays\n\n\ud83e\udde0 What is DiffRays?\nDiffRays is an advanced binary patch diffing tool built on top of\nIDA Pro\nIt allows researchers to:\n\u2022 Compare patched vs unpatched binaries\n\u2022 Identify modified functions and code paths\n\u2022 Quickly locate potential vulnerabilities\n\ud83d\udc49 A powerful tool for reverse engineering and vulnerability research\n\n\u2699\ufe0f Key Features\n\ud83d\udd0e Patch Diffing\nCompare different binary versions\nDetect modified functions and logic\n\n\ud83e\udde9 IDA Integration\nUses IDA Domain API\nAccurate pseudocode-level comparison\n\n\ud83d\udcc2 SQLite Database\nStores analysis results\nEnables re-analysis and tracking\n\n\ud83c\udf10 Web Interface\nVisualize diff results in browser\n\n\ud83e\udd16 AutoDiff (CVE Automation)\nAutomatically fetch and diff binaries using CVE IDs\nStreamlines vulnerability research workflow\n\n\ud83d\ude80 Usage\n# CVE-based automatic diffing\ndiffrays autodiff --cve CVE-2025-29824\n\n# Compare two binaries manually\ndiffrays diff old.exe new.exe\n\n# Launch web interface\ndiffrays server --db-path result.sqlite\n\n\u27a1\ufe0f Web UI:\nhttp://127.0.0.1:5555\n\n\ud83d\udd25 Why This Tool Matters\nPatch diffing is a core technique in vulnerability research.\nAfter security updates (e.g., Patch Tuesday), researchers:\n\u27a1\ufe0f Analyze patches\n\u27a1\ufe0f Identify what changed\n\u27a1\ufe0f Reverse the fix to find the vulnerability\n\ud83d\udc49 DiffRays helps automate this entire process\n\n\ud83e\uddea Use Cases\n\u2022 CVE vulnerability research\n\u2022 Exploit development\n\u2022 Malware version comparison\n\u2022 Windows patch analysis\n\u2022 Reverse engineering automation\n\n\ud83d\udee0 Requirements\n\u2022 IDA Pro 9.1+\n\u2022 Python 3.8+\n\u2022 IDA Domain API\n\n\u26a0\ufe0f Limitations\n\u2022 Requires IDA Pro (commercial)\n\u2022 AutoDiff mainly supports Windows binaries\n\u2022 Heuristic matching may not be 100% accurate\n\n\ud83e\udde9 Recommended Tools\nWorks well with:\n\u2022 IDA Pro\n\u2022 Ghidra\n\u2022 Diaphora\n\n\u26a0\ufe0f Notice\n\u2714\ufe0f For educational and security research purposes only\n\u274c Do not use for illegal activities\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.894039Z"} https://vulnerability.circl.lu/sighting/26795c99-a5ef-442a-909e-bad17daddace/export Sat, 15 Aug 2026 12:00:03 +0000