{"vulnerability": "2025-28", "sightings": [{"uuid": "3ef643cd-968b-462f-9683-cdf39bdec8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lllmc2saws2s", "content": "", "creation_timestamp": "2025-03-30T10:14:05.013538Z"}, {"uuid": "94801afa-86cd-4613-951e-002943c4590b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28256", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717397619942", "content": "", "creation_timestamp": "2025-03-31T23:48:47.067259Z"}, {"uuid": "22432884-167f-47a6-bc0b-42d23207848a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28256", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717397619942", "content": "", "creation_timestamp": "2025-03-31T23:48:47.078118Z"}, {"uuid": "6f489a79-4e03-4f51-8498-cbb91fc93115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28087", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717432979594", "content": "", "creation_timestamp": "2025-03-31T23:48:47.367822Z"}, {"uuid": "7dd0ab61-8bfa-4b68-908a-b49349e38e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28087", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717432979594", "content": "", "creation_timestamp": "2025-03-31T23:48:47.369939Z"}, {"uuid": "86194ca8-bea8-4f63-a8c2-f21def7d789c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28089", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717470593581", "content": "", "creation_timestamp": "2025-03-31T23:48:48.371510Z"}, {"uuid": "7d9e4b57-c2ae-4a11-85c0-62f7b3879e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28089", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717470593581", "content": "", "creation_timestamp": "2025-03-31T23:48:48.386169Z"}, {"uuid": "d2a8f575-d638-4355-b3e1-b0a4064ad55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3llotkdrd5c2t", "content": "", "creation_timestamp": "2025-03-31T17:01:58.698605Z"}, {"uuid": "615eda33-62bc-465e-a961-dd14b8c0fc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28091", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717545642363", "content": "", "creation_timestamp": "2025-03-31T23:48:49.041581Z"}, {"uuid": "f08f28a3-bf88-4557-8dbe-fb9391f9c87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3llotkf6z2k2t", "content": "", "creation_timestamp": "2025-03-31T17:01:59.161617Z"}, {"uuid": "17dc309b-d326-446e-97b1-8a64ce71dfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2825", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114258123278520879", "content": "", "creation_timestamp": "2025-03-31T17:03:23.570889Z"}, {"uuid": "5aac38de-c7e8-405f-8359-4a377a036f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2825", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114258123278520879", "content": "", "creation_timestamp": "2025-03-31T17:03:23.576559Z"}, {"uuid": "153b3cfc-502f-4421-960a-74a36bfe96ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28091", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259717545642363", "content": "", "creation_timestamp": "2025-03-31T23:48:49.043040Z"}, {"uuid": "3aaf40ae-6005-4685-89fd-62814151ef14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lllo3vvq3s2s", "content": "", "creation_timestamp": "2025-03-30T10:46:28.236862Z"}, {"uuid": "80fe643a-1a31-4374-9ccd-a9e1592db236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2857", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llme6qg7jjc2", "content": "", "creation_timestamp": "2025-03-30T18:56:43.933390Z"}, {"uuid": "d180d7d3-bc12-4c68-b654-971f0c60fe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llpstnb6h52n", "content": "", "creation_timestamp": "2025-04-01T02:21:54.442064Z"}, {"uuid": "75679ef2-3c8a-49c3-a83c-6a9fa637a738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llnpprfmgq2k", "content": "", "creation_timestamp": "2025-03-31T06:20:43.946239Z"}, {"uuid": "4727b2be-4edd-40d8-9394-eb717c9ef037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llnuol3zpc2z", "content": "", "creation_timestamp": "2025-03-31T07:49:33.534331Z"}, {"uuid": "565cd3b4-9e8b-4743-a629-94207fe4c9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llp562uepu2u", "content": "", "creation_timestamp": "2025-03-31T19:54:01.961809Z"}, {"uuid": "5a88cd5c-0639-44bb-a4ac-2dbcf7049b56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqglwuykg42", "content": "", "creation_timestamp": "2025-04-01T08:16:06.785436Z"}, {"uuid": "5524ab86-e007-424a-81b3-b3a5e08d276c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llpayhdav222", "content": "", "creation_timestamp": "2025-03-31T21:02:34.202556Z"}, {"uuid": "7d3b7255-8eb6-48e0-b49c-1d8814e5339c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2825", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/114259108661016041", "content": "", "creation_timestamp": "2025-03-31T21:13:58.181297Z"}, {"uuid": "a1f996d4-3a1b-48f7-ad7a-f095d56bd8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2825", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/114259108661016041", "content": "", "creation_timestamp": "2025-03-31T21:13:58.184853Z"}, {"uuid": "eab477c4-a61b-4bfe-8a42-33e280740e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3llpbyxt2pc2p", "content": "", "creation_timestamp": "2025-03-31T21:20:41.067688Z"}, {"uuid": "9ba44fdc-6a65-4c3c-9942-7785176d6b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-30)", "content": "", "creation_timestamp": "2025-03-30T00:00:00.000000Z"}, {"uuid": "81e7c833-f878-473f-bd0b-440b5504a5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28090", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259246466248464", "content": "", "creation_timestamp": "2025-03-31T21:49:01.105378Z"}, {"uuid": "6a600a04-888f-4477-a393-1269d839a50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28090", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114259246466248464", "content": "", "creation_timestamp": "2025-03-31T21:49:01.103749Z"}, {"uuid": "fac0ca38-c074-4435-8a0c-2de4a449affb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llqilpzew7k2", "content": "", "creation_timestamp": "2025-04-01T08:54:43.631705Z"}, {"uuid": "0ecf81d3-7b92-4cab-913d-e84360efafe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llol7q3unyh2", "content": "", "creation_timestamp": "2025-03-31T14:33:07.979629Z"}, {"uuid": "a269ef2e-f59e-4083-9600-4bffcc0d6ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28904", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dh2zq72h", "content": "", "creation_timestamp": "2025-03-25T21:05:03.282241Z"}, {"uuid": "4770084e-daf2-45e8-920e-8651eb7c1971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114150716611163148", "content": "", "creation_timestamp": "2025-03-12T17:48:27.031921Z"}, {"uuid": "41cd0eaf-89e0-4c25-bce8-8cba155856d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/kane2026.bsky.social/post/3llf4xdp7g22m", "content": "", "creation_timestamp": "2025-03-27T20:23:42.945208Z"}, {"uuid": "8c7da52a-da7f-40f9-9d24-9ce481f189a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2825", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3llfarcbxqop2", "content": "", "creation_timestamp": "2025-03-27T21:35:47.574934Z"}, {"uuid": "2787913b-30e3-4e9a-b26e-611965e40021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk5552pcq62n", "content": "", "creation_timestamp": "2025-03-11T22:40:20.921215Z"}, {"uuid": "6517f62a-3075-448d-b66f-4be89b9bef13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lle6koch7k2k", "content": "", "creation_timestamp": "2025-03-27T11:19:43.661122Z"}, {"uuid": "c888abe0-5d02-440e-868c-2d8ab494123d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28893", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llc4nqvl5u2a", "content": "", "creation_timestamp": "2025-03-26T15:40:17.653816Z"}, {"uuid": "15907a7a-71ac-4b76-9e0a-aeae5b706b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28898", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llc4nrm7re2a", "content": "", "creation_timestamp": "2025-03-26T15:40:18.895504Z"}, {"uuid": "66d3f340-8bfd-482b-abea-221d1d980b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2848", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llee3hmgqz2j", "content": "", "creation_timestamp": "2025-03-27T12:58:33.936892Z"}, {"uuid": "24c14637-02ea-48bf-9159-7bf8e37edd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28916", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llc4nsjeg32v", "content": "", "creation_timestamp": "2025-03-26T15:40:20.370958Z"}, {"uuid": "3a73adbf-87b0-42f1-a739-b494c95f3812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28942", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llc4ntboha2v", "content": "", "creation_timestamp": "2025-03-26T15:40:21.598473Z"}, {"uuid": "5dd70931-eff3-4fd5-9082-60bbac86e04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2848", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lleutcgzls2q", "content": "", "creation_timestamp": "2025-03-27T17:58:14.337785Z"}, {"uuid": "60a9ef83-d54c-4222-92b0-18d9f373cc98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llddwgu7as24", "content": "", "creation_timestamp": "2025-03-27T03:23:05.596948Z"}, {"uuid": "55abda93-cad8-4920-be96-d4d2671f2476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lleux6ow4c2q", "content": "", "creation_timestamp": "2025-03-27T18:00:25.963444Z"}, {"uuid": "81893854-1ee5-48cc-bdb1-c47bc879d08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llc7z6h24d2u", "content": "", "creation_timestamp": "2025-03-26T16:40:22.302268Z"}, {"uuid": "65815092-00c3-467b-810a-11e0d54941b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3llf3zg4gfu22", "content": "", "creation_timestamp": "2025-03-27T20:06:55.135498Z"}, {"uuid": "9dcddc4a-dcc1-4a5b-9824-bc91405e8f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/greynoise.io/post/3llfapxpjsk25", "content": "", "creation_timestamp": "2025-03-27T21:31:10.708362Z"}, {"uuid": "8758f4f1-77e3-44de-97ff-f2ef0ecbaacc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3llceshr5cc2p", "content": "", "creation_timestamp": "2025-03-26T18:05:38.369369Z"}, {"uuid": "e05c9ff2-5ef9-4aa1-a5b2-9ff8cdfba9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldnydnmge2x", "content": "", "creation_timestamp": "2025-03-27T06:23:06.855934Z"}, {"uuid": "b0775b1e-dcf6-4e03-a138-fabf5c13dcb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3llf44mzhzf26", "content": "", "creation_timestamp": "2025-03-27T20:08:42.451921Z"}, {"uuid": "6f241bb7-0e0d-4fce-bfd3-c3d2b48936af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28904", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll7zm6auuv2u", "content": "", "creation_timestamp": "2025-03-25T19:40:23.803881Z"}, {"uuid": "a0433b9f-10ba-40fe-b53e-9b40e97e23bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lleqgsz6252k", "content": "", "creation_timestamp": "2025-03-27T16:39:39.311930Z"}, {"uuid": "b58969b3-d014-45f2-b591-8b07267741b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lk6ghtuywk2r", "content": "", "creation_timestamp": "2025-03-12T11:00:08.002795Z"}, {"uuid": "13df813f-89b2-4303-a859-8d0c96c80840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llg4i66r4h52", "content": "", "creation_timestamp": "2025-03-28T05:48:21.073741Z"}, {"uuid": "8c883e25-84ff-447d-8ec7-8f03ccbfc863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2804", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3llg6rxlq4e2k", "content": "", "creation_timestamp": "2025-03-28T06:29:07.398142Z"}, {"uuid": "89af2a24-6c0d-448c-8c09-52d86c734e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llg6zjwelc2x", "content": "", "creation_timestamp": "2025-03-28T06:33:19.675571Z"}, {"uuid": "db34c8df-672d-4c30-b770-ce2c8fa94ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llg7k7eruo2r", "content": "", "creation_timestamp": "2025-03-28T06:42:39.884736Z"}, {"uuid": "afc5db74-01b5-4060-b781-e079c95023d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3llgbned4vk2o", "content": "", "creation_timestamp": "2025-03-28T07:20:12.876498Z"}, {"uuid": "48f4719b-d55e-40bb-82e6-71d1f62db76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llggw2m2tk2e", "content": "", "creation_timestamp": "2025-03-28T08:54:38.448242Z"}, {"uuid": "2533db5b-e79a-4c56-9e27-42fd89a1b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3llsac7rl3x2i", "content": "", "creation_timestamp": "2025-04-02T01:28:02.233591Z"}, {"uuid": "e6ef6f00-67e0-444f-b22a-dcd459e2b60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114262904215297490", "content": "", "creation_timestamp": "2025-04-01T13:19:13.526687Z"}, {"uuid": "1688a688-ebd5-4009-b97f-80df988602fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3llrq7p5oln22", "content": "", "creation_timestamp": "2025-04-01T20:40:17.041195Z"}, {"uuid": "418b97d9-6dd3-4388-aff0-00859132f9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/oct0xor.bsky.social/post/3llgkvajsb22y", "content": "", "creation_timestamp": "2025-03-28T10:05:44.255614Z"}, {"uuid": "7b4f6d56-635e-4466-a9ec-37850abd1f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114262904215297490", "content": "", "creation_timestamp": "2025-04-01T13:19:13.529505Z"}, {"uuid": "58506839-e649-4c6f-acee-9a7748b9370d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llsgk3umhk2e", "content": "", "creation_timestamp": "2025-04-02T03:19:54.995268Z"}, {"uuid": "38a9d93f-e810-43ef-8884-637c7da67429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llscvli5nx2l", "content": "", "creation_timestamp": "2025-04-02T02:14:39.094547Z"}, {"uuid": "e1f24c4e-d947-48b7-812b-9c4c1acb3d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llrgt735ct2u", "content": "", "creation_timestamp": "2025-04-01T17:52:13.639407Z"}, {"uuid": "efb8eca3-2821-451e-b81d-b64dc1943d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqkd5qhg5i2", "content": "", "creation_timestamp": "2025-04-01T09:22:13.506674Z"}, {"uuid": "ee17ae62-16d5-4743-92a6-2e8913335f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llqotajmgz32", "content": "", "creation_timestamp": "2025-04-01T10:43:07.586310Z"}, {"uuid": "be8744db-b50e-46b3-ad5f-ac76ff6c271e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "content": "", "creation_timestamp": "2025-04-01T00:00:00.000000Z"}, {"uuid": "d511834e-7537-4af5-9be3-34b047b24f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llgmaogv4z23", "content": "", "creation_timestamp": "2025-03-28T10:29:57.776646Z"}, {"uuid": "0f783627-651d-4bfc-8d2a-e494959650b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llgmqwv5op2k", "content": "", "creation_timestamp": "2025-03-28T10:39:06.384201Z"}, {"uuid": "23ec112a-b847-4c0d-8c78-1bd100140dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llgmrss5gyf2", "content": "", "creation_timestamp": "2025-03-28T10:39:38.519144Z"}, {"uuid": "d99d221c-0302-4407-a257-15a8255017a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llgmybkkaf2s", "content": "", "creation_timestamp": "2025-03-28T10:43:10.123863Z"}, {"uuid": "9647b5eb-dc37-4592-b79e-7e3380b36d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://thehackernews.com/2025/03/mozilla-patches-critical-firefox-bug.html", "content": "", "creation_timestamp": "2025-03-28T04:44:00.000000Z"}, {"uuid": "3813d576-e6f3-49a5-92e5-c6dd30b75305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3llgobzdxok2s", "content": "", "creation_timestamp": "2025-03-28T11:06:36.647073Z"}, {"uuid": "4176fbdf-27ed-46c8-8530-8e327f6084cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2857", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llgo7iux5ic2", "content": "", "creation_timestamp": "2025-03-28T11:10:36.539820Z"}, {"uuid": "a561c5c0-0528-45d3-ae7b-6dd2a746369d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/opalsec.io/post/3llgqfp6hcc2s", "content": "", "creation_timestamp": "2025-03-28T11:44:21.024823Z"}, {"uuid": "3e495698-7f0d-4f9d-aa33-0b173ae19b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/opalsec.io/post/3llgqgebgvs2s", "content": "", "creation_timestamp": "2025-03-28T11:44:42.666606Z"}, {"uuid": "b5e5fefb-3b46-4514-9459-3176e5d6d5d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2825.yaml", "content": "", "creation_timestamp": "2025-03-28T10:17:56.000000Z"}, {"uuid": "3a4ce3aa-25b8-4556-bd5a-00327091c062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3llgveutlis2v", "content": "", "creation_timestamp": "2025-03-28T13:13:26.764312Z"}, {"uuid": "52110cbe-1a27-4db3-ae27-74739b2afc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3llgvewsvuk2v", "content": "", "creation_timestamp": "2025-03-28T13:13:28.150967Z"}, {"uuid": "923ebc6f-bbf3-4eda-b79d-b6f57dd84e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3llgvey5ebc2v", "content": "", "creation_timestamp": "2025-03-28T13:13:29.576916Z"}, {"uuid": "0049150e-c523-49b7-8144-0f773751c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3llgz6tbgd22y", "content": "", "creation_timestamp": "2025-03-28T14:21:40.459964Z"}, {"uuid": "3d2df3b8-5e37-480b-8841-689e926d5e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llh3l7iaj624", "content": "", "creation_timestamp": "2025-03-28T15:04:17.350221Z"}, {"uuid": "00f981b0-eadb-473c-af4d-c938d8b894d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28138", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114241785248469459", "content": "", "creation_timestamp": "2025-03-28T19:48:23.957801Z"}, {"uuid": "98cf8863-9508-4947-aa45-5207cb0613aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28138", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114241785248469459", "content": "", "creation_timestamp": "2025-03-28T19:48:23.955912Z"}, {"uuid": "270bcd15-0dc9-44d6-a4ab-a2c9fda86662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28138", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llhzo3pzsx2c", "content": "", "creation_timestamp": "2025-03-29T00:02:46.520126Z"}, {"uuid": "66d546ea-d91e-494b-8273-df3302d551c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llirw6i7os2x", "content": "", "creation_timestamp": "2025-03-29T07:16:47.795136Z"}, {"uuid": "a484c6cf-f391-45de-975c-c9234754dd92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lliu6etv622x", "content": "", "creation_timestamp": "2025-03-29T07:57:10.380116Z"}, {"uuid": "214f1b0f-3504-475c-a3df-625d7576bbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-710f0b64-f57987e600385f31", "content": "", "creation_timestamp": "2025-03-29T08:32:42.094810Z"}, {"uuid": "54df4bdf-c523-4d0d-820e-2cee2e16a096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-710f0b64-f57987e600385f31", "content": "", "creation_timestamp": "2025-03-29T08:32:42.097729Z"}, {"uuid": "90a357d6-6a93-4c95-ac8e-753a19e9e511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3llixwiqkap2v", "content": "", "creation_timestamp": "2025-03-29T09:04:21.626828Z"}, {"uuid": "7e61d077-8696-42f9-b00b-282621b8867a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2891", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114262074055767061", "content": "", "creation_timestamp": "2025-04-01T09:48:06.702418Z"}, {"uuid": "3c29880d-0cf9-4f63-8271-7a75e7f771b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llrrgnog6a2e", "content": "", "creation_timestamp": "2025-04-01T21:02:05.949219Z"}, {"uuid": "ff35abc9-00cd-4dbe-8e73-30cab4ddb705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llsvhwgivho2", "content": "", "creation_timestamp": "2025-04-02T07:47:07.537070Z"}, {"uuid": "f3c3f453-22f1-4d36-aa9a-5db9d9057372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llt4vflkrk2x", "content": "", "creation_timestamp": "2025-04-02T09:59:50.660041Z"}, {"uuid": "a84768c0-55e3-42a0-823f-855a60ccf36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lljj7cuh5k2b", "content": "", "creation_timestamp": "2025-03-29T14:13:31.210987Z"}, {"uuid": "9baa110c-67e6-45f0-8e11-2c51fb00307c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114246262198060693", "content": "", "creation_timestamp": "2025-03-29T14:47:01.205817Z"}, {"uuid": "2ca6580e-ef9f-4729-ad07-2e7d29a609a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114246262198060693", "content": "", "creation_timestamp": "2025-03-29T14:47:01.202831Z"}, {"uuid": "5d2bb966-58d9-4a27-a5a7-9c0787890c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llk7zvq4co2p", "content": "", "creation_timestamp": "2025-03-29T21:02:08.101188Z"}, {"uuid": "18856fad-fcb1-424c-949d-8b9c2df7ef37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkjjppfts2b", "content": "", "creation_timestamp": "2025-03-29T23:52:01.015135Z"}, {"uuid": "01a685ef-259e-4656-8cc2-9d6de1fabdc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llklfk3usk2b", "content": "", "creation_timestamp": "2025-03-30T00:25:26.466643Z"}, {"uuid": "1274ea03-f96d-4069-aba6-f9fe136eca07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkmld2ta22b", "content": "", "creation_timestamp": "2025-03-30T00:46:36.210070Z"}, {"uuid": "6e8b20cc-d578-4020-827b-13e275dcc0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkndnm3tk2b", "content": "", "creation_timestamp": "2025-03-30T01:00:11.857885Z"}, {"uuid": "bd7f5424-f4ef-423f-acc8-5a93d4f8b012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkodu2iis2b", "content": "", "creation_timestamp": "2025-03-30T01:18:11.764244Z"}, {"uuid": "8c6a4c67-4aa1-41d6-a79a-97fb23755606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2857", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lll3ulos5e2g", "content": "", "creation_timestamp": "2025-03-30T05:20:11.955945Z"}, {"uuid": "dd23fdda-fa1e-47f8-9030-7def5b3ce432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2891", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114262074055767061", "content": "", "creation_timestamp": "2025-04-01T09:48:06.704909Z"}, {"uuid": "3fece923-5049-44de-995c-d987ed19e740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3llqqdkjf4ju2", "content": "", "creation_timestamp": "2025-04-01T11:10:08.801960Z"}, {"uuid": "a76043e3-a897-47c5-be72-71268116aa9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3llqqefatxs2o", "content": "", "creation_timestamp": "2025-04-01T11:10:17.013711Z"}, {"uuid": "ec95fae4-7bcb-4a51-985f-f7e07e8178b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-31)", "content": "", "creation_timestamp": "2025-03-31T00:00:00.000000Z"}, {"uuid": "39c56876-3078-45c6-8657-f3bad7de382a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llr472qi3d2l", "content": "", "creation_timestamp": "2025-04-01T14:42:01.219899Z"}, {"uuid": "452c7b11-ecbc-4515-9f6e-c61d995a9a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lltefrhcfrv2", "content": "", "creation_timestamp": "2025-04-02T12:14:22.001525Z"}, {"uuid": "81e07178-6279-4a63-b4ec-ef6b33d8227f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lltgrtfeee2i", "content": "", "creation_timestamp": "2025-04-02T12:56:47.602210Z"}, {"uuid": "a56644a9-a749-4131-a626-21481a33c14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lltj6c32o52h", "content": "", "creation_timestamp": "2025-04-02T13:39:32.941350Z"}, {"uuid": "e4b7b78d-aa80-421a-881c-f9b7fed4ee1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lltkxu2mqk2x", "content": "", "creation_timestamp": "2025-04-02T14:11:45.573643Z"}, {"uuid": "9173c474-2324-4161-a458-62b393b80f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114268838942334758", "content": "", "creation_timestamp": "2025-04-02T14:28:33.175108Z"}, {"uuid": "65aab0ef-0268-48c8-9fb6-3b05a01493f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114268838942334758", "content": "", "creation_timestamp": "2025-04-02T14:28:33.181911Z"}, {"uuid": "63317b5e-5e9f-4672-8a60-395eb34092ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://threatintel.cc/2025/04/02/critical-auth-bypass-bug-in.html", "content": "", "creation_timestamp": "2025-04-02T11:22:27.000000Z"}, {"uuid": "88b04e40-a2ae-410e-97a7-f9598765895d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3llu5u7cdko2f", "content": "", "creation_timestamp": "2025-04-02T19:49:43.170691Z"}, {"uuid": "f4d567f0-e903-462e-bf69-af1697ae76f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lluemz7cnbb2", "content": "", "creation_timestamp": "2025-04-02T21:51:10.740018Z"}, {"uuid": "b1096cef-1d56-4b2d-b22c-35b5a01b1ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llutdd7rme2r", "content": "", "creation_timestamp": "2025-04-03T02:13:59.307409Z"}, {"uuid": "eed5f37f-5ed5-4f95-b993-ef0bcebf9ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llvbvaesy22x", "content": "", "creation_timestamp": "2025-04-03T06:34:33.246705Z"}, {"uuid": "e1381e6e-c5a0-4e5b-8cbe-c905fdfa9721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-02)", "content": "", "creation_timestamp": "2025-04-02T00:00:00.000000Z"}, {"uuid": "506dc41e-6e01-439d-91da-9919e99dd626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdmhxf24", "content": "", "creation_timestamp": "2025-04-03T11:12:04.099131Z"}, {"uuid": "7303a485-b15e-42f4-9a6a-db736233f85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3llweoyeqfk2v", "content": "", "creation_timestamp": "2025-04-03T16:57:17.119637Z"}, {"uuid": "9772bddd-1f35-4803-a05c-30ffdc41a404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llwp4g6y4e2x", "content": "", "creation_timestamp": "2025-04-03T20:03:52.007476Z"}, {"uuid": "733f0483-bc75-4152-a673-30e65a788000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llwp6vcpjs2o", "content": "", "creation_timestamp": "2025-04-03T20:05:17.652982Z"}, {"uuid": "be2e0095-99bb-4ff2-844f-6dce451e349c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llwphvkqtn2r", "content": "", "creation_timestamp": "2025-04-03T20:10:17.031354Z"}, {"uuid": "36ce6cae-4b25-443a-9880-173a488758b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/briangreenberg.net/post/3llx6fzhi6k2z", "content": "", "creation_timestamp": "2025-04-04T00:37:41.416445Z"}, {"uuid": "4e4706af-6a0e-4d89-ba2c-3d1200dd6179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "content": "", "creation_timestamp": "2025-07-11T00:00:00.000000Z"}, {"uuid": "4732bf91-3775-448f-bd82-7e04096ff70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llxdpwjlkr2n", "content": "", "creation_timestamp": "2025-04-04T02:12:41.442507Z"}, {"uuid": "d138d081-7d20-4d63-9699-8245b18de0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "content": "", "creation_timestamp": "2025-04-03T00:00:00.000000Z"}, {"uuid": "2b328f66-b8ca-4df9-b259-8c6df82f270f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llzqj6qz4f2i", "content": "", "creation_timestamp": "2025-04-05T01:06:53.187993Z"}, {"uuid": "809b0c2d-ecf8-40a1-918e-ea44e4dfdf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llzu4lk5jl2n", "content": "", "creation_timestamp": "2025-04-05T02:11:25.892234Z"}, {"uuid": "64116951-d4a0-4469-a098-0f44dae51527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2867", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lpvu42ooee2l", "content": "", "creation_timestamp": "2025-05-24T09:41:15.534272Z"}, {"uuid": "e09fe02d-3ec6-42f0-8d63-0f3f57e8cf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-04)", "content": "", "creation_timestamp": "2025-04-04T00:00:00.000000Z"}, {"uuid": "6129adbf-1df3-4eaf-90ff-2bf74dd4faaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2867", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3lpvu4oqgqc62", "content": "", "creation_timestamp": "2025-05-24T09:44:23.955151Z"}, {"uuid": "ad14ed27-d35c-42c8-9364-a440c4c39f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lm4etv2ihs2q", "content": "", "creation_timestamp": "2025-04-06T02:16:07.311628Z"}, {"uuid": "bcf2462b-5008-4a7f-a7b3-730ac571fb53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-05)", "content": "", "creation_timestamp": "2025-04-05T00:00:00.000000Z"}, {"uuid": "57d05d0c-b7d1-4ca1-804a-a57f66c81b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lm6vavccoe2z", "content": "", "creation_timestamp": "2025-04-07T02:15:02.443604Z"}, {"uuid": "4e4a2da0-a001-44bb-9037-87183920a324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "content": "", "creation_timestamp": "2025-04-06T00:00:00.000000Z"}, {"uuid": "57a24bf9-82f2-4d84-96ed-582fd82fe2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb4fy2iax2v", "content": "", "creation_timestamp": "2025-07-06T01:24:50.112792Z"}, {"uuid": "681f491f-d925-4780-b1d5-51b26c57882f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrets2w3sd2j", "content": "", "creation_timestamp": "2025-06-12T02:10:48.712555Z"}, {"uuid": "f81d6b23-beb1-4ad3-a0c5-df7224b843a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkdgnjo26", "content": "", "creation_timestamp": "2025-06-26T21:02:28.296260Z"}, {"uuid": "fb61a82a-e4e3-4056-af17-11edb28b63de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf4hz3p2r", "content": "", "creation_timestamp": "2025-04-07T17:12:11.628174Z"}, {"uuid": "9cf3fa6c-066c-4f8a-9fd6-5d859efea08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28403", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf4sdky2h", "content": "", "creation_timestamp": "2025-04-07T17:12:12.364432Z"}, {"uuid": "16c4b3fd-5834-40b4-a49a-1984a8e64529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28400", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf4vqmd2f", "content": "", "creation_timestamp": "2025-04-07T17:12:12.955706Z"}, {"uuid": "e49c713c-2030-41d1-bba4-e71edb499f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf4z2wi2z", "content": "", "creation_timestamp": "2025-04-07T17:12:13.524566Z"}, {"uuid": "de6c4ba8-f4f2-4fa1-8b3a-b5c2a6331f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28409", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf54e332g", "content": "", "creation_timestamp": "2025-04-07T17:12:14.112195Z"}, {"uuid": "b76fb3b8-cadc-4ddc-84c2-dcc7c05b0e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf5d6t32g", "content": "", "creation_timestamp": "2025-04-07T17:12:15.376145Z"}, {"uuid": "d7c14e0b-5ef4-4ae3-948d-512e5224e1ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf5gizw2c", "content": "", "creation_timestamp": "2025-04-07T17:12:16.035474Z"}, {"uuid": "4a9b79d7-64c2-45ce-b57a-bb483444524a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf5jy2x2o", "content": "", "creation_timestamp": "2025-04-07T17:12:16.727100Z"}, {"uuid": "4e23ebb2-6de6-4295-90bc-b1762a6d8810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf5noat2q", "content": "", "creation_timestamp": "2025-04-07T17:12:17.463585Z"}, {"uuid": "5c8df4ec-927b-430f-87bd-ea43401e2ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28402", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf5tead2b", "content": "", "creation_timestamp": "2025-04-07T17:12:18.105046Z"}, {"uuid": "1f3b9a98-30b6-4d40-8eee-3b7597610442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf6i5vx2z", "content": "", "creation_timestamp": "2025-04-07T17:12:20.885148Z"}, {"uuid": "c19ca228-5e12-4ba5-a00b-56362b5b51f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf6ovb32g", "content": "", "creation_timestamp": "2025-04-07T17:12:22.101891Z"}, {"uuid": "4fbc54f2-8924-43e4-a60a-9cec320910f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf6tkmu2w", "content": "", "creation_timestamp": "2025-04-07T17:12:22.743148Z"}, {"uuid": "c68c6635-38bb-4fcc-badc-540fd549b5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0101", "content": "", "creation_timestamp": "2025-04-07T12:03:59.000000Z"}, {"uuid": "5348ea84-f654-4d5c-99b2-fb016aaedc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3lmbypruw522t", "content": "", "creation_timestamp": "2025-04-08T07:55:05.773303Z"}, {"uuid": "f9cfa519-f8eb-4341-9bce-44498ff74b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5e6v36q2g", "content": "", "creation_timestamp": "2025-04-08T09:18:02.092173Z"}, {"uuid": "67e0f584-1d5e-4ed3-8f91-f4c70911d072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "30f50a7e-042d-44b8-a951-e052a701d13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2807", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114302183206431244", "content": "", "creation_timestamp": "2025-04-08T11:48:23.536993Z"}, {"uuid": "082bf9d9-8b6b-443c-9f49-2e00cfd7ea72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmcgsoc6qu2u", "content": "", "creation_timestamp": "2025-04-08T12:07:13.613209Z"}, {"uuid": "6f3780d4-aacd-49f1-98e0-3fb46e098543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lmcisliqes2b", "content": "", "creation_timestamp": "2025-04-08T12:43:03.330661Z"}, {"uuid": "ef16114f-117c-4211-9b12-c275a5912980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lmcisnzzws2b", "content": "", "creation_timestamp": "2025-04-08T12:43:04.295522Z"}, {"uuid": "b8f9496a-7828-4812-9451-5d10bd8c47ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lmciso22w22b", "content": "", "creation_timestamp": "2025-04-08T12:43:05.244578Z"}, {"uuid": "928e9ffd-6148-42da-af3b-af397d481f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2876", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmckytsmzy2r", "content": "", "creation_timestamp": "2025-04-08T13:22:13.770571Z"}, {"uuid": "c60451fc-2407-4119-bd39-01d3d695a480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755fpuv2h", "content": "", "creation_timestamp": "2025-04-08T19:22:34.631060Z"}, {"uuid": "75358792-2903-4ae9-bdb4-ae1bb488e476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/gleeda.bsky.social/post/3lmdevfl5mc2y", "content": "", "creation_timestamp": "2025-04-08T21:05:36.311066Z"}, {"uuid": "5c2c53c8-5a05-4ddc-91b4-2f0b40f7a438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "287d4f15-ab40-423a-a704-a329c701cf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-08)", "content": "", "creation_timestamp": "2025-04-08T00:00:00.000000Z"}, {"uuid": "6b46a220-ddc2-428a-90b5-5996c1543941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2895", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsto5y6meo2i", "content": "", "creation_timestamp": "2025-06-30T17:05:12.692936Z"}, {"uuid": "bae4d9c2-c3d9-4dde-a82a-c05d7abad5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2829", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114308189037550499", "content": "", "creation_timestamp": "2025-04-09T13:15:45.834791Z"}, {"uuid": "46785795-ac84-4c59-9be6-956373c43b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "content": "", "creation_timestamp": "2025-05-23T00:00:00.000000Z"}, {"uuid": "f26ded04-62df-4e20-b04f-1c522d5fdd50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2845", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmgkzglhv22h", "content": "", "creation_timestamp": "2025-04-10T03:33:13.095168Z"}, {"uuid": "571912f2-11b7-4f7d-be9b-ddf9c0097527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3lmh73lubzc25", "content": "", "creation_timestamp": "2025-04-10T09:32:23.676106Z"}, {"uuid": "97754d26-c0ab-490a-af1e-240581f2dfa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3lmh73nxeis25", "content": "", "creation_timestamp": "2025-04-10T09:32:24.713321Z"}, {"uuid": "482495a5-0dc7-44b5-b20b-cfb3af6033b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3lmh73nxghc25", "content": "", "creation_timestamp": "2025-04-10T09:32:25.747432Z"}, {"uuid": "25480cce-bdb5-4979-b496-3a163fecb4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3lmh73nxhgk25", "content": "", "creation_timestamp": "2025-04-10T09:32:26.749804Z"}, {"uuid": "6b70d627-a909-4f3f-8bc9-28b30d562c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmh73txgjl2q", "content": "", "creation_timestamp": "2025-04-10T09:32:31.747515Z"}, {"uuid": "575d2a8c-3b39-4723-bad4-5e48b16b176f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "content": "", "creation_timestamp": "2025-04-09T00:00:00.000000Z"}, {"uuid": "8b496db7-e04d-4d60-bd14-66287040c487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2829", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-07", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "ac0d5a3f-144c-4f36-b92d-a28375581368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lmijxrgtef2c", "content": "", "creation_timestamp": "2025-04-10T22:19:43.173783Z"}, {"uuid": "21cb27fc-a5f8-42ae-806b-cd10eb795451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-10)", "content": "", "creation_timestamp": "2025-04-10T00:00:00.000000Z"}, {"uuid": "bfdddaf4-ac97-491d-bdfd-b96e0d961425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3lmk3n53dah2u", "content": "", "creation_timestamp": "2025-04-11T13:08:33.810416Z"}, {"uuid": "8fa4bccc-37f3-4df8-9fdf-d8a86be5d15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://mastodon.social/users/leakix/statuses/114319485908888510", "content": "", "creation_timestamp": "2025-04-11T13:08:43.536425Z"}, {"uuid": "0821c592-d2aa-4667-8f25-0180791d4cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2871", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmlt6qxmjp2u", "content": "", "creation_timestamp": "2025-04-12T05:42:40.475916Z"}, {"uuid": "2341925b-e729-4b9e-b684-c9aa82d646fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmlt6r37qg2h", "content": "", "creation_timestamp": "2025-04-12T05:42:40.993138Z"}, {"uuid": "57cab112-63c4-43ce-9935-4f4d76c7505d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmlt6rccl42i", "content": "", "creation_timestamp": "2025-04-12T05:42:42.108045Z"}, {"uuid": "44085afe-8edd-4e27-83d8-083646378a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114660344390922177", "content": "", "creation_timestamp": "2025-06-10T17:53:29.649153Z"}, {"uuid": "666dd3d2-41b5-4873-a185-f4dc310626ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmo6vvjxhb2l", "content": "", "creation_timestamp": "2025-04-13T04:17:46.992772Z"}, {"uuid": "f974dc01-18a5-42a9-bfbf-a7f9758f66d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "content": "", "creation_timestamp": "2025-04-12T00:00:00.000000Z"}, {"uuid": "b54ae305-f7e5-4a87-a8be-480905f9d659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lrbjpwtfoc2j", "content": "", "creation_timestamp": "2025-06-10T18:32:39.996704Z"}, {"uuid": "f96dce99-3007-46ca-9349-a68965240750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "content": "", "creation_timestamp": "2025-06-07T00:00:00.000000Z"}, {"uuid": "9a96f3e5-458d-4be7-be98-6ddac71edecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2884", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lrfhpsjoqs2d", "content": "", "creation_timestamp": "2025-06-12T08:07:27.006307Z"}, {"uuid": "70a640fd-6c53-4d1a-bdeb-28cbe562c4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "content": "", "creation_timestamp": "2025-04-14T00:00:00.000000Z"}, {"uuid": "b5c6a1d5-428c-4400-bca6-c36db8100421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmujasss7m2g", "content": "", "creation_timestamp": "2025-04-15T16:38:50.839474Z"}, {"uuid": "9c2e0aa2-d5f9-4565-9ddd-ca59b06fce77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmujatgh4m2g", "content": "", "creation_timestamp": "2025-04-15T16:38:53.423882Z"}, {"uuid": "9c83847c-da31-4069-9c27-d94fe965b8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmuqaknawq2b", "content": "", "creation_timestamp": "2025-04-15T18:43:58.800526Z"}, {"uuid": "56ef124a-0bc3-4772-964b-b1bf34ce2eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmuqal4bdg2q", "content": "", "creation_timestamp": "2025-04-15T18:44:01.054764Z"}, {"uuid": "c9a0d847-66b7-4117-8b20-3adfbab5f873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lmuvmxzdsp2u", "content": "", "creation_timestamp": "2025-04-15T20:20:22.070701Z"}, {"uuid": "484f1000-42c4-45a5-b314-81bb76d2cf39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lmuvmycbfe2b", "content": "", "creation_timestamp": "2025-04-15T20:20:22.783156Z"}, {"uuid": "5dc520e5-c058-4c83-94e7-d85654d4210e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28137", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114343941659414629", "content": "", "creation_timestamp": "2025-04-15T20:48:10.370305Z"}, {"uuid": "749e1da9-379f-45c3-89cf-a82a9736efff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "content": "", "creation_timestamp": "2025-05-21T00:00:00.000000Z"}, {"uuid": "91d3ce41-809f-44ed-b382-58afe58a44d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "content": "", "creation_timestamp": "2025-06-13T00:00:00.000000Z"}, {"uuid": "e88e4a8e-cff8-49f7-a1be-8aa9149316c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "4d9b977c-1e55-4d13-b612-e8d9bb56b614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "b3931655-ef94-4ec8-9d85-da9024cbdf12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28399", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114348661162248961", "content": "", "creation_timestamp": "2025-04-16T16:48:24.623208Z"}, {"uuid": "687bc9ae-217d-4934-b321-d126ea0cf474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "content": "", "creation_timestamp": "2025-06-11T00:00:00.000000Z"}, {"uuid": "dd7a3f10-2f75-499f-8e33-9279f0d90573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28072", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3kkwyh2h", "content": "", "creation_timestamp": "2025-04-16T22:43:21.239367Z"}, {"uuid": "6a325309-7d12-440b-9e76-f5debb0043e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "content": "", "creation_timestamp": "2025-05-26T00:00:00.000000Z"}, {"uuid": "41532069-84ab-4c86-aefa-c5295d5126d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "content": "", "creation_timestamp": "2025-04-16T00:00:00.000000Z"}, {"uuid": "f8d60df3-bfdf-4689-bd0b-cb08e6be3c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqzp5h22l", "content": "", "creation_timestamp": "2025-04-17T18:54:28.954264Z"}, {"uuid": "83590184-a82d-4440-a0bd-d202cf4a9afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqzvpxp2y", "content": "", "creation_timestamp": "2025-04-17T18:54:30.171590Z"}, {"uuid": "cc931baf-6202-4b53-895e-cf9fbb7bd9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28009", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114355267434353133", "content": "", "creation_timestamp": "2025-04-17T20:48:24.669731Z"}, {"uuid": "5f34cf8b-501f-45c7-8ad6-7e37aa0f36d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28967", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt4xiktfc22a", "content": "", "creation_timestamp": "2025-07-04T09:46:09.210421Z"}, {"uuid": "2607115d-f9a4-4c8e-adde-bbf19e314df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28236", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk7xh6eu2", "content": "", "creation_timestamp": "2025-04-18T19:34:38.527616Z"}, {"uuid": "4f205f21-7c3b-46b7-bf2d-797933a022ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28237", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6qfyek2", "content": "", "creation_timestamp": "2025-04-18T19:34:39.200626Z"}, {"uuid": "f62d5b63-ba1d-4c99-a16b-0e420c65a0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28242", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dkb6h2ni2", "content": "", "creation_timestamp": "2025-04-18T19:35:01.597421Z"}, {"uuid": "5f52f8bb-d376-4404-b3d9-666bfde32aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28231", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6zboru2", "content": "", "creation_timestamp": "2025-04-18T19:35:02.759887Z"}, {"uuid": "797ebbf4-cd27-4dee-be86-3aec724f4fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28238", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dkfhnafy2", "content": "", "creation_timestamp": "2025-04-18T19:35:03.307507Z"}, {"uuid": "5823b89b-75e1-4348-9835-80a0e149ed6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dkgibfay2", "content": "", "creation_timestamp": "2025-04-18T19:35:23.096422Z"}, {"uuid": "605c4fb1-6f8b-4868-bd7b-e1c32ff63db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28235", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6wwrxi2", "content": "", "creation_timestamp": "2025-04-18T19:37:59.756367Z"}, {"uuid": "ecaaf7ee-cad0-4e16-8a44-33c46efeb9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28233", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk5gt4lk2", "content": "", "creation_timestamp": "2025-04-18T19:39:38.084338Z"}, {"uuid": "67b58fb3-1e63-4735-9ef4-b2d1e196e32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28231", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrexw6s24", "content": "", "creation_timestamp": "2025-04-18T20:33:35.363008Z"}, {"uuid": "c81984fe-0346-4da1-b2a5-422ce0f94397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfeva224", "content": "", "creation_timestamp": "2025-04-18T20:33:36.685046Z"}, {"uuid": "09c4708f-3022-4ff9-b873-c08de10a2131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfsdig2a", "content": "", "creation_timestamp": "2025-04-18T20:33:39.238423Z"}, {"uuid": "62550315-e6bc-4c94-a3e6-39298d26dae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfvqfo2b", "content": "", "creation_timestamp": "2025-04-18T20:33:39.805670Z"}, {"uuid": "1e2a6ed7-2eb1-4d88-bf00-adb310630170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28236", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfz7uu2q", "content": "", "creation_timestamp": "2025-04-18T20:33:40.400853Z"}, {"uuid": "56dd9e14-d511-45c6-accb-f09e24334343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28237", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgdotm2q", "content": "", "creation_timestamp": "2025-04-18T20:33:42.254029Z"}, {"uuid": "f6b719f3-4565-4b0d-9699-6f87e5799da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgonjk2l", "content": "", "creation_timestamp": "2025-04-18T20:33:44.327735Z"}, {"uuid": "17eafe07-d8ac-4bd0-be38-23303f5e32f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgrtso2l", "content": "", "creation_timestamp": "2025-04-18T20:33:44.939834Z"}, {"uuid": "be7a75ed-5253-4aca-ba84-a17f83deb945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgv6aw2l", "content": "", "creation_timestamp": "2025-04-18T20:33:45.584582Z"}, {"uuid": "bc593a8e-6207-4722-8123-fce53c914ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "content": "", "creation_timestamp": "2025-04-18T00:00:00.000000Z"}, {"uuid": "6aacb3a7-5759-41ef-ba94-5f85aa2a9a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28231", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114365851797276055", "content": "", "creation_timestamp": "2025-04-19T17:40:08.908059Z"}, {"uuid": "524ec72b-ad2c-4ece-9d07-05297e7de571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "content": "", "creation_timestamp": "2025-07-12T00:00:00.000000Z"}, {"uuid": "3a4a7ef4-bbc5-4ba4-a248-c8f9824af577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-19)", "content": "", "creation_timestamp": "2025-04-19T00:00:00.000000Z"}, {"uuid": "885b9bc7-c3b6-43a5-943c-8c640c69fa02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "content": "", "creation_timestamp": "2025-06-19T00:00:00.000000Z"}, {"uuid": "5c78ad31-0566-401f-a669-fcefc99439fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-20)", "content": "", "creation_timestamp": "2025-04-20T00:00:00.000000Z"}, {"uuid": "c1c239c8-be06-4632-be04-b840b6a86c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/c1b3r53cur1ty.bsky.social/post/3lnd5c2e4ib2t", "content": "", "creation_timestamp": "2025-04-21T12:14:42.624847Z"}, {"uuid": "8c09648b-1bac-4f0e-afe0-1fdfdce1d260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28009", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnd6hgewzr2q", "content": "", "creation_timestamp": "2025-04-21T12:35:35.843098Z"}, {"uuid": "681a9534-ca8c-4fee-ac9a-c164697ddabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7gvng2c", "content": "", "creation_timestamp": "2025-04-21T18:59:09.680493Z"}, {"uuid": "54d789d6-0830-4dba-b049-d20ecca59dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28099", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lne2ludney2u", "content": "", "creation_timestamp": "2025-04-21T20:59:10.328887Z"}, {"uuid": "afe07a8a-68c1-4f30-91c7-4f76ba9e2415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lne2lunfv72g", "content": "", "creation_timestamp": "2025-04-21T20:59:12.163130Z"}, {"uuid": "f7fab9cd-dc46-4773-ae13-11e3529517f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lne2luqwlp2b", "content": "", "creation_timestamp": "2025-04-21T20:59:12.825681Z"}, {"uuid": "f6709c9a-c7a8-4ab2-9800-28da717584fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28103", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lne2luutzx2l", "content": "", "creation_timestamp": "2025-04-21T20:59:13.506513Z"}, {"uuid": "7afd865e-0d92-4bd1-822b-29fe5f08894b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gmszyd2b", "content": "", "creation_timestamp": "2025-04-22T07:04:45.133470Z"}, {"uuid": "2fe60ae0-9367-442e-a908-ebfce2ef0769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lnf65dwqzg2f", "content": "", "creation_timestamp": "2025-04-22T07:35:17.510263Z"}, {"uuid": "c1430704-e5cb-4919-81cd-cdb2df301df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-28367.yaml", "content": "", "creation_timestamp": "2025-04-22T05:44:47.000000Z"}, {"uuid": "cbc3cba5-606e-4908-8519-0f36f338197f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lprh53j53y2s", "content": "", "creation_timestamp": "2025-05-22T15:38:32.327668Z"}, {"uuid": "726d5139-322a-401d-8de4-cccb2be4162d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-21)", "content": "", "creation_timestamp": "2025-04-21T00:00:00.000000Z"}, {"uuid": "eff899f1-3789-4e2e-be3f-0ed96e96569b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28951", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt4yc5rg332a", "content": "", "creation_timestamp": "2025-07-04T10:00:27.834094Z"}, {"uuid": "0c137850-ea93-4693-bd84-c1acc4f50a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbohrjy24", "content": "", "creation_timestamp": "2025-04-22T15:05:08.006937Z"}, {"uuid": "33c71666-cb0b-42a5-9f0f-9ddba7e729ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28034", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbopzhr2b", "content": "", "creation_timestamp": "2025-04-22T15:05:09.369582Z"}, {"uuid": "cb6edaa3-b9af-450f-b4f9-96a3d18fcb39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbpbdvi24", "content": "", "creation_timestamp": "2025-04-22T15:05:12.699643Z"}, {"uuid": "52eb3b7a-6bf1-49dc-82a6-8ac68e5dc2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28242", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114382402293062010", "content": "", "creation_timestamp": "2025-04-22T15:49:15.782719Z"}, {"uuid": "179b4090-c438-4ce9-a31f-41c055cbd4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28197", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114382402348366712", "content": "", "creation_timestamp": "2025-04-22T15:49:16.405692Z"}, {"uuid": "7a96d513-b432-4916-b708-fc45f46f1074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt4yu2q4bi2i", "content": "", "creation_timestamp": "2025-07-04T10:10:28.586106Z"}, {"uuid": "5f8169cd-64ca-4c87-9be5-43cccf910819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngewcv35t2c", "content": "", "creation_timestamp": "2025-04-22T19:09:17.904161Z"}, {"uuid": "a5342f75-4b92-4863-97e8-aadb9e311708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28031", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngewcykid2c", "content": "", "creation_timestamp": "2025-04-22T19:09:18.473802Z"}, {"uuid": "3037fc8e-0f66-4220-b024-d9c449cf684c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28037", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngewds6zi2h", "content": "", "creation_timestamp": "2025-04-22T19:09:20.802481Z"}, {"uuid": "26dadc68-fb0b-49b9-a3e1-ffd8cb87535c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngewdytzt2u", "content": "", "creation_timestamp": "2025-04-22T19:09:21.885038Z"}, {"uuid": "77589155-6937-4cc2-9719-f6c9708fa35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28038", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngitkis2s2c", "content": "", "creation_timestamp": "2025-04-22T20:19:19.537619Z"}, {"uuid": "e4716e26-956a-499c-9dd9-992c188cbc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28039", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngitkv5l32j", "content": "", "creation_timestamp": "2025-04-22T20:19:20.970756Z"}, {"uuid": "98f26a0e-300d-4cbb-9a02-d6e4a7ba45f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnglaljyfn2t", "content": "", "creation_timestamp": "2025-04-22T21:02:24.371731Z"}, {"uuid": "60d6de29-d861-4c8c-a096-c13256b5d3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnglalx5ik2y", "content": "", "creation_timestamp": "2025-04-22T21:02:27.147448Z"}, {"uuid": "c0facfa8-53bc-41af-9656-800ec012c4e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28038", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114383815046638917", "content": "", "creation_timestamp": "2025-04-22T21:48:27.166449Z"}, {"uuid": "d3454aba-d5fc-40f6-8b71-06b07b47816d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28039", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114383815074253600", "content": "", "creation_timestamp": "2025-04-22T21:48:27.998448Z"}, {"uuid": "dc80ddbc-2f8b-4fc1-8b45-0f6fb66ca6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28169", "type": "seen", "source": "https://gist.github.com/rainymode/bfd976ecbe0d0b776fd930375156c19c", "content": "", "creation_timestamp": "2025-04-23T04:57:33.000000Z"}, {"uuid": "ea9ea9cd-5eb4-465e-94d6-db3a6e630b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lscvoh4hru2a", "content": "", "creation_timestamp": "2025-06-24T01:04:25.908599Z"}, {"uuid": "e76255fa-4e5f-4716-b34b-c0ec2172f01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28036", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltzsfrn5tv22", "content": "", "creation_timestamp": "2025-07-15T21:02:23.524216Z"}, {"uuid": "7739dc85-2ad4-48f5-90d7-f3d475a1d13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2848", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lprqpuvrqa2y", "content": "", "creation_timestamp": "2025-05-22T18:30:09.118484Z"}, {"uuid": "5fa46c6a-7b2c-4993-ab73-7fd3a39d8f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-16)", "content": "", "creation_timestamp": "2025-06-16T00:00:00.000000Z"}, {"uuid": "a2208112-2cbe-4e94-9a10-b4b30b9d247e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "content": "", "creation_timestamp": "2025-04-22T00:00:00.000000Z"}, {"uuid": "78af0a5e-1fe5-40d6-8e33-57cbda67b912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28024", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388061856647013", "content": "", "creation_timestamp": "2025-04-23T15:48:28.188946Z"}, {"uuid": "4480ab48-53e0-48c5-81c6-d0e5d921a143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28030", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388061889785649", "content": "", "creation_timestamp": "2025-04-23T15:48:28.621985Z"}, {"uuid": "bec469fd-703e-489b-97f3-14e0b18f08f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28034", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388534950173885", "content": "", "creation_timestamp": "2025-04-23T17:48:46.793631Z"}, {"uuid": "badf3935-2646-4c2f-a817-a4dacaa043da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28037", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388534981290626", "content": "", "creation_timestamp": "2025-04-23T17:48:47.400612Z"}, {"uuid": "5d269e53-9a27-40e7-bd88-84ca138c21e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28035", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388535017387645", "content": "", "creation_timestamp": "2025-04-23T17:48:48.027342Z"}, {"uuid": "96ad0b31-aadb-46e9-8d10-bd9208f41ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28036", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388535068019356", "content": "", "creation_timestamp": "2025-04-23T17:48:48.647761Z"}, {"uuid": "4358f8ff-2470-4d87-9d0e-aee798994e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-03)", "content": "", "creation_timestamp": "2025-07-03T00:00:00.000000Z"}, {"uuid": "df0ee567-09a9-4e21-9bb2-b851531aedbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28121", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3phda4s2h", "content": "", "creation_timestamp": "2025-04-23T21:02:26.484529Z"}, {"uuid": "6373e629-4e4c-4070-90f2-a0d159230342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/c1b3r53cur1ty.bsky.social/post/3lnj4hahkfw2c", "content": "", "creation_timestamp": "2025-04-23T21:15:41.338607Z"}, {"uuid": "171c0194-a324-42ac-bb08-c497b2bf3dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lnjtailos32d", "content": "", "creation_timestamp": "2025-04-24T04:03:30.502228Z"}, {"uuid": "46cbd234-9e0c-4472-b6ac-119c3135ffb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-23)", "content": "", "creation_timestamp": "2025-04-23T00:00:00.000000Z"}, {"uuid": "48a27359-6f5a-4d25-a467-937b9bd05199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28169", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114393724128011213", "content": "", "creation_timestamp": "2025-04-24T15:48:27.584054Z"}, {"uuid": "69aa4b60-a1b3-4ae0-aee9-be0ea52a7b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-16)", "content": "", "creation_timestamp": "2025-05-16T00:00:00.000000Z"}, {"uuid": "1b42012c-c702-4382-8079-55b5ce6ac5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "724fbf90-d86d-4ff1-b95c-c16d9e54aa11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28128", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedfa3cd2b", "content": "", "creation_timestamp": "2025-04-25T23:20:00.396453Z"}, {"uuid": "b53785ec-1ee4-4f89-ab1e-584b2ef1002c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2801", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnotxcc6gz42", "content": "", "creation_timestamp": "2025-04-26T04:39:17.585500Z"}, {"uuid": "6382b55d-39c9-471a-bc16-d449110e1c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnp7hezyxg2d", "content": "", "creation_timestamp": "2025-04-26T07:25:25.060271Z"}, {"uuid": "13c56b88-acaf-4044-9769-4bbcf916a04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2811", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp7eozrama2", "content": "", "creation_timestamp": "2025-04-26T07:25:43.015148Z"}, {"uuid": "b1fd69ca-0f0b-433e-bfe8-ff81c726feea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2851", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnpfue6yx7o2", "content": "", "creation_timestamp": "2025-04-26T09:20:04.176470Z"}, {"uuid": "77127b5e-6378-46dc-a34a-0c2c34faa2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2850", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnpfuetw5sa2", "content": "", "creation_timestamp": "2025-04-26T09:20:15.210736Z"}, {"uuid": "f7b7c23a-3e4d-4420-a53e-73b5cee79e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2851", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114403633409160591", "content": "", "creation_timestamp": "2025-04-26T09:48:31.066091Z"}, {"uuid": "e3a48206-d906-4ddd-802e-80aeb4550b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-28)", "content": "", "creation_timestamp": "2025-06-28T00:00:00.000000Z"}, {"uuid": "25df8700-5ee7-4d19-a508-98600fa94310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-25)", "content": "", "creation_timestamp": "2025-04-25T00:00:00.000000Z"}, {"uuid": "01be9d35-76e1-4051-a837-adb806fdf172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnpn42kfzy24", "content": "", "creation_timestamp": "2025-04-26T11:29:37.178939Z"}, {"uuid": "240a17a9-f9d7-45c4-8255-f2449a7f7cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2851", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnpn42tmyw2d", "content": "", "creation_timestamp": "2025-04-26T11:29:37.844812Z"}, {"uuid": "58ba463d-3ae7-4982-a059-b059850815b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnpn433blt2r", "content": "", "creation_timestamp": "2025-04-26T11:29:39.010094Z"}, {"uuid": "c818f891-0c74-49b0-a4da-0eaf81ea9e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2851", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114405981086986532", "content": "", "creation_timestamp": "2025-04-26T19:45:33.265714Z"}, {"uuid": "e68a170d-9cfe-4572-ad4b-7fd733e670fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "449ced5c-0d3f-47a8-9197-38a47427b060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "content": "", "creation_timestamp": "2025-06-08T00:00:00.000000Z"}, {"uuid": "86cb07d0-9b0c-473d-af45-851f9824492c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "077eae34-5a10-4e09-a634-2d33e0207549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7ovshzv2d", "content": "", "creation_timestamp": "2025-04-27T21:40:16.572796Z"}, {"uuid": "2cfe2e39-1f4b-4352-8535-4183fc7a40ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lntftgcjct2f", "content": "", "creation_timestamp": "2025-04-27T23:30:12.359451Z"}, {"uuid": "f3961b57-eeb7-4b57-a8ba-a0c5afe92c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "content": "", "creation_timestamp": "2025-05-19T00:00:00.000000Z"}, {"uuid": "7881e9f8-8ec5-4603-8c18-ab92ffb9cc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "content": "", "creation_timestamp": "2025-04-27T00:00:00.000000Z"}, {"uuid": "5eb1999a-19e4-4aa2-bca2-70c98fe5727c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "content": "", "creation_timestamp": "2025-05-24T00:00:00.000000Z"}, {"uuid": "9ade729a-6353-419d-b067-a02794155d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28968", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lt5az3r2vh2s", "content": "", "creation_timestamp": "2025-07-04T12:36:27.722502Z"}, {"uuid": "896f312d-5617-46d6-a0f7-ba15272abf52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq6n46ybbw27", "content": "", "creation_timestamp": "2025-05-27T21:30:01.367196Z"}, {"uuid": "37d4722a-849b-4706-8ee6-05505c6f25b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbumh432d", "content": "", "creation_timestamp": "2025-04-29T07:51:00.857044Z"}, {"uuid": "1a0bcdc2-c564-42c2-89ed-801d628ea6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "18412ee8-81b2-4eb1-bd40-c8ac11383c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-02)", "content": "", "creation_timestamp": "2025-06-02T00:00:00.000000Z"}, {"uuid": "211c0983-0423-47a6-881b-98a183d15c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn322ska2t", "content": "", "creation_timestamp": "2025-04-29T15:50:21.832422Z"}, {"uuid": "7bc5af42-bc7f-4f26-8e26-c558fbc09e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114422273849158475", "content": "", "creation_timestamp": "2025-04-29T16:49:03.303238Z"}, {"uuid": "4e49c215-df2b-4bf0-bb2d-a131ab0931cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lnzct3letk26", "content": "", "creation_timestamp": "2025-04-30T07:52:18.006794Z"}, {"uuid": "d714f922-00dc-45bd-87ba-b533fb43bb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2866", "type": "seen", "source": "https://bsky.app/profile/theunicornxxl.bsky.social/post/3lnzhd2ffs22j", "content": "", "creation_timestamp": "2025-04-30T09:12:49.865580Z"}, {"uuid": "50182271-5ce4-4615-b314-62e243f81151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnzjxxc6rs2t", "content": "", "creation_timestamp": "2025-04-30T10:00:16.102215Z"}, {"uuid": "4fde97ed-3098-43c3-a2c9-bf9b15522dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2826", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114582383243251984", "content": "", "creation_timestamp": "2025-05-27T23:26:56.745734Z"}, {"uuid": "80742047-ff92-4611-8670-e563078772d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28228", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-28228.yaml", "content": "", "creation_timestamp": "2025-04-29T13:27:11.000000Z"}, {"uuid": "0da7f4a9-1d7b-41b0-b557-ffaa37b78b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lo2qmddxzs2d", "content": "", "creation_timestamp": "2025-04-30T21:31:42.193235Z"}, {"uuid": "f570ab9c-fd07-439c-a558-5358dcc35b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2816", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114430529833344469", "content": "", "creation_timestamp": "2025-05-01T03:48:38.269502Z"}, {"uuid": "0057ac69-ce08-4ce7-bfc5-3a3c846439de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mqtf57e2t", "content": "", "creation_timestamp": "2025-05-01T05:55:17.579163Z"}, {"uuid": "8ad150ba-2dbb-4324-9d9e-1f292bc728a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-14)", "content": "", "creation_timestamp": "2025-06-14T00:00:00.000000Z"}, {"uuid": "d97de58c-f99b-4d34-b47b-c8931c0280a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28228", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo57i2n2zk2q", "content": "", "creation_timestamp": "2025-05-01T21:03:08.082317Z"}, {"uuid": "d38b9e5d-661b-4c3d-96c3-912c94ac7365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "b8821602-ead6-4ec4-99b4-9a840e07d088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-10)", "content": "", "creation_timestamp": "2025-06-10T00:00:00.000000Z"}, {"uuid": "b3a59c27-bfce-48ed-8f77-72ee172b5478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "98fe02d4-cbab-4d17-9e41-841fd8430e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6rn5zb662p", "content": "", "creation_timestamp": "2025-05-02T12:00:43.780701Z"}, {"uuid": "cc4e39f9-fbc2-44f9-96f6-0d2010ad52b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2812", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo6hobjp72u2", "content": "", "creation_timestamp": "2025-05-02T13:28:46.805710Z"}, {"uuid": "b995e941-a8c9-462b-bdc2-9b9fe1e35ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "a9bb0fd0-8653-4a5d-886a-880490b2e5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "55f8e835-e752-4896-9ea6-61d94d05dcb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lod2adgser2a", "content": "", "creation_timestamp": "2025-05-04T04:45:15.441218Z"}, {"uuid": "4883cfaf-908e-4535-880c-5679060f7faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "content": "", "creation_timestamp": "2025-05-03T00:00:00.000000Z"}, {"uuid": "5c1e52eb-ab68-4b5e-892c-3af5fbbe852a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28168", "type": "seen", "source": "https://gist.github.com/IamLeandrooooo/01090be3023f5e7c7397bb9b1f5505b9", "content": "", "creation_timestamp": "2025-05-04T16:14:36.000000Z"}, {"uuid": "58abadaa-4ec3-4dc2-aa30-4c64d40e03a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "160bfac2-6484-4143-bb47-efd686edb9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2875", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-08", "content": "", "creation_timestamp": "2025-05-20T10:00:00.000000Z"}, {"uuid": "4590bef0-938f-4a78-9405-d31d620f5671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2896", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkbadd47vz2", "content": "", "creation_timestamp": "2025-06-01T12:29:36.080878Z"}, {"uuid": "b70fc7b7-9595-45e4-90b3-4560609ed0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28168", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrd7xniz2e", "content": "", "creation_timestamp": "2025-05-05T16:16:28.147805Z"}, {"uuid": "31bd60fd-065d-40ea-af5f-dd7352a2f841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loiajnldr22l", "content": "", "creation_timestamp": "2025-05-06T06:21:10.140843Z"}, {"uuid": "e1f3cff3-aeef-4546-8426-f3989daca648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "content": "", "creation_timestamp": "2025-06-12T00:00:00.000000Z"}, {"uuid": "6fafc5a7-c10e-434d-947a-25cf9eaaad6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://bsky.app/profile/k3n5s.bsky.social/post/3lrodcxvyz22o", "content": "", "creation_timestamp": "2025-06-15T20:42:38.844794Z"}, {"uuid": "2b597744-5c65-49c0-be40-92609c936240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2898", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114462136252821396", "content": "", "creation_timestamp": "2025-05-06T17:46:33.132617Z"}, {"uuid": "23a14b3e-2952-42b9-bc09-48607cfb5d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl454wm2h", "content": "", "creation_timestamp": "2025-05-07T04:26:19.943123Z"}, {"uuid": "d6a1deb6-c848-42e1-b537-d18de0176a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "9b8ab4d4-6019-458b-8521-3c979d5acbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqkogek2qp2k", "content": "", "creation_timestamp": "2025-06-01T16:25:33.300030Z"}, {"uuid": "f5f8b83c-23af-4ccf-a853-13698d320612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "2adfa11c-2eba-40c2-b405-3adc6973e40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28062", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lomcacts522k", "content": "", "creation_timestamp": "2025-05-07T21:02:22.724894Z"}, {"uuid": "7d4092a0-36a8-4ef3-b3eb-69843dd3535e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lomeabltls27", "content": "", "creation_timestamp": "2025-05-07T21:38:10.059745Z"}, {"uuid": "c4d678c7-1b18-49e6-aa48-b51ec03e7568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "content": "", "creation_timestamp": "2025-05-07T00:00:00.000000Z"}, {"uuid": "2dc48af0-6b6f-4965-b295-fc03ea151c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-07)", "content": "", "creation_timestamp": "2025-05-07T00:00:00.000000Z"}, {"uuid": "2b6072b1-52ad-491d-a09c-1fc3a8aa8ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "content": "", "creation_timestamp": "2025-07-09T00:00:00.000000Z"}, {"uuid": "cd3dd6cd-f3ad-494b-8849-b400720cb9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lrowdtbahs2w", "content": "", "creation_timestamp": "2025-06-16T02:23:09.188429Z"}, {"uuid": "07d552de-e644-44c6-8b85-a2939b698242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "content": "", "creation_timestamp": "2025-05-17T00:00:00.000000Z"}, {"uuid": "a7402c9d-849b-4e22-9e5d-7fea05efe15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2806", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loo2jysbmdg2", "content": "", "creation_timestamp": "2025-05-08T14:05:31.863140Z"}, {"uuid": "21272009-3269-4df8-ac1b-19ee8c73a886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loodct7irk2l", "content": "", "creation_timestamp": "2025-05-08T16:26:59.473948Z"}, {"uuid": "e9e6c247-5c9b-45dc-b780-2c36d75778f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28073", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2utibf32", "content": "", "creation_timestamp": "2025-05-08T21:15:07.251568Z"}, {"uuid": "3ad47780-d775-4afd-a149-5e8c2590ea76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28074", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looteghxxqh2", "content": "", "creation_timestamp": "2025-05-08T21:15:21.125994Z"}, {"uuid": "59fe8273-f386-4505-a0bd-d77a4e518f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28073", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3cv7x2n", "content": "", "creation_timestamp": "2025-05-08T22:32:24.088602Z"}, {"uuid": "c5d9a4a6-492e-4898-9c82-80fb0d7e9570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3mw3w2p", "content": "", "creation_timestamp": "2025-05-08T22:32:26.016118Z"}, {"uuid": "949d4b4d-6dda-4899-97f6-1d4d10e4cd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-08)", "content": "", "creation_timestamp": "2025-05-08T00:00:00.000000Z"}, {"uuid": "d0ed9c10-b1c5-410f-805b-aff6019ab5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-08)", "content": "", "creation_timestamp": "2025-05-08T00:00:00.000000Z"}, {"uuid": "dcac3146-89fd-4325-80a5-a8265d8127aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rrmgqo2p", "content": "", "creation_timestamp": "2025-05-09T18:32:16.354074Z"}, {"uuid": "d19e51b5-94c2-4990-84a1-7a41edfb2560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rrx2ni2t", "content": "", "creation_timestamp": "2025-05-09T18:32:17.984536Z"}, {"uuid": "25caed03-f8ee-48ae-a899-62ffe3a64047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rsbf3r2n", "content": "", "creation_timestamp": "2025-05-09T18:32:19.641217Z"}, {"uuid": "77d1dcf9-0ebd-4444-8133-5afc844e890f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rsi53z2o", "content": "", "creation_timestamp": "2025-05-09T18:32:20.810667Z"}, {"uuid": "41fb1129-1451-49d1-8504-2b9dca3e8d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "content": "", "creation_timestamp": "2025-06-18T00:00:00.000000Z"}, {"uuid": "77d18094-667f-4708-af98-7f104560c8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "content": "", "creation_timestamp": "2025-05-25T00:00:00.000000Z"}, {"uuid": "82986041-9859-4c4f-9d40-4dcd5768e80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28380", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114676749186057555", "content": "", "creation_timestamp": "2025-06-13T15:25:26.793591Z"}, {"uuid": "d195ed09-fba0-413b-ac7d-ee89f9199be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28384", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114676749186057555", "content": "", "creation_timestamp": "2025-06-13T15:25:27.072505Z"}, {"uuid": "18142445-0fcf-4340-87db-f3f8e959425b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28389", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114676749186057555", "content": "", "creation_timestamp": "2025-06-13T15:25:27.339245Z"}, {"uuid": "c4cd9150-2a75-498c-b7c1-236f75b0e8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2866", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lowcppdy2k27", "content": "", "creation_timestamp": "2025-05-11T20:37:37.483741Z"}, {"uuid": "e66ce756-b34b-40a0-857c-f5578e0d5119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28381", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114676749186057555", "content": "", "creation_timestamp": "2025-06-13T15:25:26.896133Z"}, {"uuid": "53af5e52-bae6-4b88-a19c-2b77336a02ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28386", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114676749186057555", "content": "", "creation_timestamp": "2025-06-13T15:25:27.165643Z"}, {"uuid": "29d10f11-4ab7-4c05-aa26-957b0549aa94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28382", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114676749186057555", "content": "", "creation_timestamp": "2025-06-13T15:25:26.996408Z"}, {"uuid": "91ce05ea-fca2-4ee5-9423-d454fd7eea4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28388", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114676749186057555", "content": "", "creation_timestamp": "2025-06-13T15:25:27.263757Z"}, {"uuid": "544bd144-c9ca-4b95-9543-161a6a6cf94f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "content": "", "creation_timestamp": "2025-05-27T00:00:00.000000Z"}, {"uuid": "8f5cc487-a10c-4f5d-9c1f-a191f4091616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "content": "", "creation_timestamp": "2025-06-18T00:00:00.000000Z"}, {"uuid": "37b86dae-0136-47f1-9969-52e61b0a4a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriw6a2svp2m", "content": "", "creation_timestamp": "2025-06-13T17:04:02.103654Z"}, {"uuid": "c54bf8cb-4c6c-47a4-aa00-a5c708093d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28382", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriwb7srzh2p", "content": "", "creation_timestamp": "2025-06-13T17:05:42.645879Z"}, {"uuid": "1488fd93-9202-45a6-b3b9-5ec0b03b7662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28386", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriwef4v3q2p", "content": "", "creation_timestamp": "2025-06-13T17:07:28.999279Z"}, {"uuid": "43d43b68-3449-44e3-bea9-c78d34a91553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-12)", "content": "", "creation_timestamp": "2025-05-12T00:00:00.000000Z"}, {"uuid": "05260c86-7b04-4bef-a086-484444f70bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriwldlxyy2q", "content": "", "creation_timestamp": "2025-06-13T17:11:22.043555Z"}, {"uuid": "bf8cc6bd-1ea0-4111-947d-b5d91fa75879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriwtcwluj2r", "content": "", "creation_timestamp": "2025-06-13T17:15:49.913889Z"}, {"uuid": "08bef4cd-1aab-4a92-a567-69fc930b8f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2813", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lp2at6pkyms2", "content": "", "creation_timestamp": "2025-05-13T10:15:28.777453Z"}, {"uuid": "4673e9c9-3599-435e-a9f1-dcb869e3f2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wssslwk24", "content": "", "creation_timestamp": "2025-05-13T16:47:54.819353Z"}, {"uuid": "ea4d4811-dd76-46df-b822-098915fa4302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wstxzqn2h", "content": "", "creation_timestamp": "2025-05-13T16:48:01.624988Z"}, {"uuid": "1850ad17-b8be-45e4-af18-45b460365b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-06)", "content": "", "creation_timestamp": "2025-06-06T00:00:00.000000Z"}, {"uuid": "018f2efb-5cb3-484f-9ce8-c6889901ec75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2875", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4o2rva3o32", "content": "", "creation_timestamp": "2025-05-14T09:19:30.742044Z"}, {"uuid": "9eeef818-f124-4d99-bec6-06057d88942b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-13)", "content": "", "creation_timestamp": "2025-05-13T00:00:00.000000Z"}, {"uuid": "1d56bd3f-c8b7-4cba-923d-c9019e621e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-14)", "content": "", "creation_timestamp": "2025-05-14T00:00:00.000000Z"}, {"uuid": "90d2420d-31c9-4350-bea6-af16edf7e046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://bsky.app/profile/ravikumar-dev.me/post/3lyozco5e3p2g", "content": "", "creation_timestamp": "2025-09-13T05:12:32.970518Z"}, {"uuid": "0a48a794-1f01-425d-b975-da1ac13b003f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-22)", "content": "", "creation_timestamp": "2025-07-22T00:00:00.000000Z"}, {"uuid": "82cf2ffc-bf6b-4300-a543-ad7b68fc9b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28137", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw56253h23", "content": "", "creation_timestamp": "2025-07-23T21:02:30.015495Z"}, {"uuid": "1d178cae-cad9-46fc-9daf-11ba30c01a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "73b71df6-9375-45e1-803a-13bb7ecf7664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "8ebf0fb7-9a1b-4690-b5fb-d0e4e86d13c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28760", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115304862934478791", "content": "", "creation_timestamp": "2025-10-02T13:43:02.359203Z"}, {"uuid": "be54cfea-12ed-4675-a1f8-5a2ad179f4e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "77e36288-0ba7-4063-92d6-523e8014e852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "content": "", "creation_timestamp": "2025-10-25T00:00:00.000000Z"}, {"uuid": "82a150ac-1186-4802-bf0e-5f536b9a6427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "9b470371-0921-496d-8330-c385bcb291c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "605f8ce1-30d1-45fc-bee5-8d7e10d30b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-25)", "content": "", "creation_timestamp": "2025-07-25T00:00:00.000000Z"}, {"uuid": "30c95f9d-4b7f-4d55-824a-e4104e8b11c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28353", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3luybrrvvpc2i", "content": "", "creation_timestamp": "2025-07-27T23:57:23.905848Z"}, {"uuid": "d7bc108b-0482-4f92-9204-146da7f94988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "79b8598c-5bc6-4a53-84ac-b77d9c7a1bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2869", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:59.000000Z"}, {"uuid": "ed50cae6-f7a3-4082-9e2c-8b1b79842a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2870", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:59.000000Z"}, {"uuid": "036feecf-946b-423c-ae99-e7961441aa7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28411", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:39.000000Z"}, {"uuid": "79d4c242-8ad3-4d27-91ab-7c3fe353515a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28407", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:40.000000Z"}, {"uuid": "98c8aa5a-ef40-4889-842c-ea7194d82d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28412", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:39.000000Z"}, {"uuid": "bd55783f-c084-4735-8864-a7e9413970df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:58.000000Z"}, {"uuid": "3db31012-fdf4-4ade-a87b-2b5c61f3024d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28405", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:39.000000Z"}, {"uuid": "3a93c936-84b7-45ac-90c6-2edca028301c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:58.000000Z"}, {"uuid": "e2c42d75-7d1f-4bf1-aa42-8e59a3575801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-25)", "content": "", "creation_timestamp": "2025-09-25T00:00:00.000000Z"}, {"uuid": "6093d6a4-462e-4751-9f37-68f91d8de935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28409", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:40.000000Z"}, {"uuid": "458c0f1a-fa5f-4f3f-b840-0593a7ca9f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-13)", "content": "", "creation_timestamp": "2025-10-13T00:00:00.000000Z"}, {"uuid": "1b45ed24-c35b-4717-84db-cffc04883ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28406", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:40.000000Z"}, {"uuid": "31e42ee8-460c-451a-b16c-32130f8acba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28403", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:40.000000Z"}, {"uuid": "0f8e4819-589a-47ab-b357-0f686461d068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28410", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:39.000000Z"}, {"uuid": "9bbe0838-2dce-437e-8594-59f19b223306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28413", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:39.000000Z"}, {"uuid": "4d9aa58c-5b91-4a92-b72d-42e4e41da52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2868", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:59.000000Z"}, {"uuid": "471bf4c1-4b54-45d5-a9f0-aeee129b0a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28171", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv4n5s5qxn2e", "content": "", "creation_timestamp": "2025-07-29T17:31:33.462429Z"}, {"uuid": "a5ecb47f-f7e0-4e70-8e41-34d86b1cbb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "content": "", "creation_timestamp": "2025-07-30T00:00:00.000000Z"}, {"uuid": "0a3eebf3-c9cd-4282-a2ec-386cc43a255a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-06)", "content": "", "creation_timestamp": "2025-10-06T00:00:00.000000Z"}, {"uuid": "ecd74c81-d5df-4f7a-b04d-d415cc27d1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvbbcid3t22l", "content": "", "creation_timestamp": "2025-07-31T13:42:44.897851Z"}, {"uuid": "0f08c47f-589b-42f8-8dbc-5614420ec9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "e27a1087-e6b2-473d-b731-c1cb09e7ebb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "e3cffb10-ef5a-4883-9b44-2f7bf9825416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-02)", "content": "", "creation_timestamp": "2025-08-02T00:00:00.000000Z"}, {"uuid": "40a83986-5f97-47f3-babd-db66261befff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-16)", "content": "", "creation_timestamp": "2025-09-16T00:00:00.000000Z"}, {"uuid": "59d5446c-dd3d-46e2-9b9c-4cd7a71d3036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "8163cddb-07c1-40b5-b2f1-04c63fd81d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvnltulmat2p", "content": "", "creation_timestamp": "2025-08-05T11:23:22.355574Z"}, {"uuid": "06fae8ba-eb7a-4b9a-b92b-d34244828bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2810", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114976786415928187", "content": "", "creation_timestamp": "2025-08-05T15:08:51.574445Z"}, {"uuid": "11e02534-0638-4fcf-bbac-9dc7f2305424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2810", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lvnyi4v5ojc2", "content": "", "creation_timestamp": "2025-08-05T15:11:50.780277Z"}, {"uuid": "feb31a83-f2de-4ff9-b747-2ccad64578ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28983", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "918b892e-874b-40ba-a7fb-7957c3632777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28967", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "d1a213f8-f54e-439f-8267-fe930578d4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28969", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "0a672a19-4b2e-4d54-9629-3f134c0da8c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "content": "", "creation_timestamp": "2025-11-03T00:00:00.000000Z"}, {"uuid": "7e8238c5-dab9-4fff-a455-5665faa359cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28059", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "06a969f7-ee7c-4dcd-9936-470941fe4d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28413", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "b3c3e205-c78c-442e-b021-bf669a813316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28410", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "9c007db3-eeb7-4f9e-82c6-0d75ef9f2cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28411", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "8a91a97b-d0f3-4f1d-aae8-3ec49e4e5117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28412", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "7eb2bd40-eb39-408e-9037-9f7f15949fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28405", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "0423af22-5111-4785-8934-3bc6b9ca0e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28409", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "177b9101-49fc-4b82-bd7a-3ecc5ca63697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28407", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "221fa437-a61b-479e-a62c-dcfa9dbc47b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28406", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "0edc7e1c-85fb-48a5-a1e8-838815ebf46e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28403", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "f9f0957b-5fe9-49a1-b076-bc9d7c8d6f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310", "content": "", "creation_timestamp": "2025-10-24T06:24:42.000000Z"}, {"uuid": "60b724a2-e2f8-44f6-803d-59b69c89f1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28059", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lysxplf5nj2f", "content": "", "creation_timestamp": "2025-09-14T18:54:38.032543Z"}, {"uuid": "86559c00-eb7b-41f8-a77a-aa320806e9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "6d2277aa-3f39-43d0-9137-25c099d1da46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "0625fe37-45db-43f8-aba2-c4de0fbdabdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2869", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "4844a8ae-a769-40c5-8deb-31ef20fa8048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2870", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "d28bfdc3-f4f6-4050-b3ab-711628b6d429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2868", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "65a60dea-64e0-4897-bbf5-315bb75e4c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-21)", "content": "", "creation_timestamp": "2025-09-21T00:00:00.000000Z"}, {"uuid": "d2bb8113-4076-409b-b708-988c7b56aea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310", "content": "", "creation_timestamp": "2025-10-14T16:03:45.000000Z"}, {"uuid": "b2eef884-f899-47d1-b512-e0d3a2ab3d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28059", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:39.000000Z"}, {"uuid": "98ebf4ab-ac5d-45dd-a98c-3e21ffd8e686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28173", "type": "seen", "source": "https://bsky.app/profile/fdaytalk.bsky.social/post/3m36k37yx6v24", "content": "", "creation_timestamp": "2025-10-14T20:12:55.800245Z"}, {"uuid": "4e8f3cd7-58c7-4fd1-bbc2-ad8ebc02c739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3522e91b-9452d6f54741433d", "content": "", "creation_timestamp": "2025-10-27T04:16:27.659942Z"}, {"uuid": "1cd8aad3-2e9c-4c43-af01-32df3962c506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review", "content": "", "creation_timestamp": "2025-10-14T16:38:44.000000Z"}, {"uuid": "995c1867-b06d-43bc-814d-1ac62fd53e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "3139fb9a-ce0c-4f40-bae5-79e56710594e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28856", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "72984d34-83c6-4ec2-ad2e-bf93e7c2e1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28859", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "25045bb9-1212-4e0c-80bc-c2a50a0662ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28870", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "c5a168be-7bbb-4cbf-9e4b-47cc01628abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28878", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "b48c26eb-7be5-4b19-8042-a8d4b0fbbd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28896", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "767386d6-d63f-4702-a865-fdb5538ecfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "1c855465-8159-4d92-8a2f-81fd6d56f8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28940", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "e1d3fca1-3c2a-46e4-9e57-f4ebec00698d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28983", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:20.000000Z"}, {"uuid": "9c6cc71e-f256-45c3-8175-ffe7f62edc48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28967", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:21.000000Z"}, {"uuid": "7ee1ffb3-e469-4fb3-afa0-731c2b833580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28969", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:21.000000Z"}, {"uuid": "d31906e0-87b8-4480-a23c-350b79b6942b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "7c3c5883-150f-4e5c-8a9c-4596d51ecea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "content": "", "creation_timestamp": "2025-10-26T00:00:00.000000Z"}, {"uuid": "f68c409c-6807-4d2d-ae7a-6ce868bc629a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28906", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbq5byq2m", "content": "", "creation_timestamp": "2025-08-18T21:02:53.497860Z"}, {"uuid": "8bc0a341-1e1e-4033-b481-d09edb7dd15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-2894/", "content": "", "creation_timestamp": "2025-03-28T00:57:13.000000Z"}, {"uuid": "94a03c5c-2ae1-4377-b578-52bfd2b9f1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-09)", "content": "", "creation_timestamp": "2025-10-09T00:00:00.000000Z"}, {"uuid": "46e31b5e-32a0-450a-9c85-88baf5418fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "7b0a90df-bc9c-4437-8913-a633173f0fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-19)", "content": "", "creation_timestamp": "2025-08-19T00:00:00.000000Z"}, {"uuid": "54e2f0a9-1a69-4a3a-8099-6afc37c3667e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "content": "", "creation_timestamp": "2025-10-22T00:00:00.000000Z"}, {"uuid": "befaadfd-1da6-4717-8db1-c5bef70f4e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "c4e0674a-3346-4c36-a07c-c2749e641484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "eb6595c5-f8ec-4861-82a4-e5d231f73ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "a3f14d36-22ff-4aa0-a2bf-22af3fae5c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "content": "", "creation_timestamp": "2025-09-29T00:00:00.000000Z"}, {"uuid": "50f9a1ce-ea6b-433e-b776-05fa9ec49960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-02)", "content": "", "creation_timestamp": "2025-11-02T00:00:00.000000Z"}, {"uuid": "c1dfdcf1-c1ce-4b32-9911-d3fa530699cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-18)", "content": "", "creation_timestamp": "2025-11-18T00:00:00.000000Z"}, {"uuid": "2ab002f3-d78b-4421-a0a1-bcede3f990c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2843", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hbcfismfq2", "content": "", "creation_timestamp": "2025-11-12T18:20:40.096609Z"}, {"uuid": "e5b287f8-dcba-4871-92eb-4e38f8d58214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28840", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m6h74y3ebk27", "content": "", "creation_timestamp": "2025-11-25T11:06:38.347963Z"}, {"uuid": "f805d767-50eb-4713-87c5-460addee34d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-12)", "content": "", "creation_timestamp": "2025-10-12T00:00:00.000000Z"}, {"uuid": "9f51d1a0-f58b-4c7a-a95c-3f2152cbd05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "02ba9d2e-3775-4487-81e0-6b5c13367360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2843", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hgwbo7rdo2", "content": "", "creation_timestamp": "2025-11-12T20:02:18.846700Z"}, {"uuid": "0408f1bf-e30a-47cb-8307-a9dfe4c2d8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "8fe3be6d-39b2-43ca-90ce-b015fe44c354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb", "content": "", "creation_timestamp": "2025-04-04T15:01:08.000000Z"}, {"uuid": "dedce3c1-9f09-45c1-acfc-fbc95e6552f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-28)", "content": "", "creation_timestamp": "2025-08-28T00:00:00.000000Z"}, {"uuid": "72bbfabd-5983-46c1-94b5-66f3ec615a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-29)", "content": "", "creation_timestamp": "2025-08-29T00:00:00.000000Z"}, {"uuid": "17734697-034f-492d-9902-a7d8d4bad4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-11)", "content": "", "creation_timestamp": "2025-09-11T00:00:00.000000Z"}, {"uuid": "ddb2cb1c-20d0-47ac-a115-eb7702d40124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-14)", "content": "", "creation_timestamp": "2025-11-14T00:00:00.000000Z"}, {"uuid": "93a217e3-dc87-4daf-9450-2b7b70501d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5hjevwybq2b", "content": "", "creation_timestamp": "2025-11-12T20:44:47.632104Z"}, {"uuid": "f785418f-0a9b-4bce-a6e1-cdf32f6bbd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-26)", "content": "", "creation_timestamp": "2025-09-26T00:00:00.000000Z"}, {"uuid": "b8bacaa1-2508-4d5b-96f5-f7b98390d5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "content": "", "creation_timestamp": "2025-09-02T00:00:00.000000Z"}, {"uuid": "e6c69920-216e-4af7-9672-336b4710bb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me722bbgxx2o", "content": "", "creation_timestamp": "2026-02-06T13:45:27.616465Z"}, {"uuid": "818b2d19-d765-48eb-a107-43e29b0a443a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28162", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdxfdkarh22c", "content": "", "creation_timestamp": "2026-02-03T12:46:15.427793Z"}, {"uuid": "b7024938-90c2-4038-ac22-a04f43e49cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28242", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6cdbo4l2c", "content": "", "creation_timestamp": "2026-01-28T21:03:05.279681Z"}, {"uuid": "c0163f07-649d-4073-a89b-f671c3071af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6cdeayj2k", "content": "", "creation_timestamp": "2026-01-28T21:03:05.814922Z"}, {"uuid": "7e3ce8bb-b2ed-440a-ad1e-426da3996d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "3fbf255e-31bc-43e1-9f63-af398f670a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2834", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3m7pv27nyn423", "content": "", "creation_timestamp": "2025-12-11T15:25:14.720475Z"}, {"uuid": "1d59828e-83d6-4cb5-8438-a87915dd535a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "8f1d3c61-f0e1-4a93-b47e-04dcc6fbd312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-27)", "content": "", "creation_timestamp": "2025-12-27T00:00:00.000000Z"}, {"uuid": "7cc33d20-6c5c-4d23-a396-894977030d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbcq2fxgqe2c", "content": "", "creation_timestamp": "2025-12-31T20:41:39.496197Z"}, {"uuid": "7ed09107-947e-4a57-87fe-ba9651053c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28973", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbcq6veaub2y", "content": "", "creation_timestamp": "2025-12-31T20:44:09.772555Z"}, {"uuid": "76e63381-0149-435d-9516-461c5c216f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28949", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbcr4ftxxw2u", "content": "", "creation_timestamp": "2025-12-31T21:00:40.856514Z"}, {"uuid": "be53cfd5-05da-4668-82c0-6f7483ce0d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28949", "type": "seen", "source": "https://gist.github.com/Darkcrai86/6debc8fae9ec4b34297abbe64fa9813b", "content": "", "creation_timestamp": "2026-01-02T08:04:25.000000Z"}, {"uuid": "d320ab33-6521-4bb4-b942-a03b5fdeb707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28973", "type": "seen", "source": "https://gist.github.com/Darkcrai86/8dd18ec2c298d55db874e4ab48aa4e02", "content": "", "creation_timestamp": "2026-01-02T08:04:01.000000Z"}, {"uuid": "a1abcfd6-7e4f-4410-a0e2-4851b0bc66db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://bsky.app/profile/nidouille.bsky.social/post/3mbz4ip6x222u", "content": "", "creation_timestamp": "2026-01-09T18:23:07.637968Z"}, {"uuid": "fdb81ca1-aa27-4dff-bc9d-78cd350e7347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "6c5643dd-515e-45cb-914a-b423ca949b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "7d23b804-a150-4fe6-a607-7e369f969cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28242", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-28242.yaml", "content": "", "creation_timestamp": "2026-01-27T01:51:39.000000Z"}, {"uuid": "b751e20f-8b1c-41a9-9cae-284f38f32aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-03)", "content": "", "creation_timestamp": "2026-04-03T00:00:00.000000Z"}, {"uuid": "eeb98705-ad8e-4798-a5af-fe527be64f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-03)", "content": "", "creation_timestamp": "2026-04-03T00:00:00.000000Z"}, {"uuid": "000f9103-b279-4138-96ec-f18c43591510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "42d5dd68-8b84-4db7-8571-7dc758324214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28361", "type": "seen", "source": "https://t.me/cvedetector/21216", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28361 - Telesquare TLR-2005KSH Stack Overflow Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-28361 \nPublished : March 26, 2025, 8:15 p.m. | 31\u00a0minutes ago \nDescription : Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive information via the systemutil.cgi component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T22:15:20.000000Z"}, {"uuid": "39795bcd-a5c8-4e4e-b3b0-898ea4d82bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28899", "type": "seen", "source": "https://t.me/cvedetector/21196", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28899 - WP Event Ticketing Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-28899 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Event Ticketing allows Reflected XSS. This issue affects WP Event Ticketing: from n/a through 1.3.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:22.000000Z"}, {"uuid": "74630202-8141-4858-a09f-8dbac7c1f86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28018", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28018\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T15:53:59.636Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow2-1948e5e2b1a28070a8d1d1ba725febff", "creation_timestamp": "2025-04-24T16:06:50.000000Z"}, {"uuid": "a8ca77df-2577-4229-bbae-6c7a86843083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-06)", "content": "", "creation_timestamp": "2026-04-06T00:00:00.000000Z"}, {"uuid": "25e65f68-6fd6-45bd-8a38-30b2f656adeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28019", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28019\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T15:53:18.099Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow1-1948e5e2b1a280ad96efca529ecae658\n2. https://locrian-lightning-dc7.notion.site/CVE-2025-28019-BufferOverflow1-1948e5e2b1a280ad96efca529ecae658", "creation_timestamp": "2025-04-24T16:06:55.000000Z"}, {"uuid": "632b5558-b20c-4b48-b89c-8bb4a2327e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28021", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13278", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28021\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T15:50:55.963Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow1-1948e5e2b1a280e8aa5ad87964c5cd3d?pvs=73\n2. https://locrian-lightning-dc7.notion.site/CVE-2025-28021-BufferOverflow1-1948e5e2b1a280e8aa5ad87964c5cd3d", "creation_timestamp": "2025-04-24T16:07:05.000000Z"}, {"uuid": "f2e765c8-ae92-4e0b-b730-fdf2aa9b6a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28025", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13277", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28025\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T15:51:11.859Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow1-19e8e5e2b1a280bfbe52ec9975287f77?pvs=73\n2. https://locrian-lightning-dc7.notion.site/BufferOverflow1-19e8e5e2b1a280bfbe52ec9975287f77", "creation_timestamp": "2025-04-24T16:07:04.000000Z"}, {"uuid": "4f482717-f8ff-4f7b-8c99-79d2b9047ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28903", "type": "seen", "source": "https://t.me/cvedetector/21198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28903 - Apache NotFound Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28903 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Driving Directions allows Reflected XSS. This issue affects Driving Directions: from n/a through 1.4.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:26.000000Z"}, {"uuid": "f4b1fc52-e5e4-49f5-9486-0ac14ac7a43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2838", "type": "seen", "source": "https://t.me/cvedetector/21236", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2838 - Silicon Labs Gecko OS DNS Response Processing Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2838 \nPublished : March 26, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the processing of DNS responses. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-23392. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T23:55:54.000000Z"}, {"uuid": "61edf084-3955-4943-93a8-8d2beea6901f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2837", "type": "seen", "source": "https://t.me/cvedetector/21235", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2837 - Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-2837 \nPublished : March 26, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the handling of HTTP requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-23245. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T23:55:53.000000Z"}, {"uuid": "72030544-61bb-4855-8daf-530cd869cfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2802", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15059", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2802\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The LayoutBoxx plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.3.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-05-06T04:24:13.420Z\n\ud83d\udccf Modified: 2025-05-06T04:24:13.420Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fc3fcb8f-f130-4008-8f11-d98efa30f1a8?source=cve\n2. https://plugins.svn.wordpress.org/layoutboxx/trunk/layoutboxx.php\n3. https://wordpress.org/plugins/layoutboxx/#developers", "creation_timestamp": "2025-05-06T05:20:04.000000Z"}, {"uuid": "b2da3ae6-61b4-42c8-8263-bb7bdbe65505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28917", "type": "seen", "source": "https://t.me/cvedetector/21201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28917 - Apache NotFound Custom Smilies Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28917 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Custom Smilies allows Stored XSS. This issue affects Custom Smilies: from n/a through 2.9.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:29.000000Z"}, {"uuid": "d57cc29f-c890-46d9-bf8c-0d40568b57bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28916", "type": "seen", "source": "https://t.me/cvedetector/21200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28916 - Docpro PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28916 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Docpro allows PHP Local File Inclusion. This issue affects Docpro: from n/a through 2.0.1. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:28.000000Z"}, {"uuid": "eae6261a-9d11-437d-aeb7-6748e2834414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28911", "type": "seen", "source": "https://t.me/cvedetector/21199", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28911 - Gravity2Pdf Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-28911 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gravity2pdf Gravity 2 PDF allows Reflected XSS. This issue affects Gravity 2 PDF: from n/a through 3.1.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:27.000000Z"}, {"uuid": "8d210c1a-3777-4d0a-b87e-44d74060b15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28898", "type": "seen", "source": "https://t.me/cvedetector/21197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28898 - WP Multistore Locator SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-28898 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound WP Multistore Locator allows SQL Injection. This issue affects WP Multistore Locator: from n/a through 2.5.2. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:26.000000Z"}, {"uuid": "2682266a-b095-43b2-ab77-78682eeafe40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "content": "", "creation_timestamp": "2026-04-07T00:00:00.000000Z"}, {"uuid": "389edec1-ca6e-4728-a27b-2a381711bf81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28011", "type": "seen", "source": "https://t.me/cvedetector/20239", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28011 - PHPGurukul User Registration & Login and User Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28011 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:15.000000Z"}, {"uuid": "7aada63a-5c64-4639-b4e7-f6d0e3aac477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28388", "type": "published-proof-of-concept", "source": "Telegram/LbSE4ui0deWaIbAIy_SI6HyoY8sH4t9aZhKhv-gkpgMW3iE", "content": "", "creation_timestamp": "2025-06-13T17:05:18.000000Z"}, {"uuid": "faccaf36-da9f-4eb1-85e8-dddad40510e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28389", "type": "published-proof-of-concept", "source": "Telegram/LbSE4ui0deWaIbAIy_SI6HyoY8sH4t9aZhKhv-gkpgMW3iE", "content": "", "creation_timestamp": "2025-06-13T17:05:18.000000Z"}, {"uuid": "7cccd298-3739-455b-8aa6-da13e760fad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28381", "type": "seen", "source": "Telegram/fav2yV5eU_8IA8p_MU5ddf2_7IAHNNrL2JfxvAVjQoEMqyo", "content": "", "creation_timestamp": "2025-06-13T17:05:26.000000Z"}, {"uuid": "1a7bd8aa-05a5-4b7c-ac16-2fa2d3477833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28236", "type": "seen", "source": "https://t.me/cvedetector/23333", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28236 - Nautel VX Series Transmitters Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28236 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the /#/software/upgrades endpoint. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:34.000000Z"}, {"uuid": "e0be327c-df25-4587-9863-f7f0285df41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-08)", "content": "", "creation_timestamp": "2026-04-08T00:00:00.000000Z"}, {"uuid": "4cedab94-d449-44f0-98ad-06458d6703dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28242", "type": "seen", "source": "https://t.me/cvedetector/23332", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28242 - DAEnetIP4 METO Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28242 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:34.000000Z"}, {"uuid": "8fa68061-c5f2-4b54-b067-7fb1a0473955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhd6zgtz2a", "content": "", "creation_timestamp": "2026-04-14T13:10:24.299381Z"}, {"uuid": "a885b9db-b92b-4ea2-9a10-ceccf52dc13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28354", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28354\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers to execute a directory traversal via a crafted POST request.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T16:57:07.347Z\n\ud83d\udd17 References:\n1. https://www.entrust.com/sites/default/files/documentation/productsupport/entrust-security-bulletin-e25-002.pdf\n2. https://gist.github.com/VAMorales/ef13d4edc14750f689e16c9e4922becb", "creation_timestamp": "2025-04-25T17:07:49.000000Z"}, {"uuid": "e5b8d419-6283-453c-8dd8-aea0010400ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-01", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "54bf84d1-0c4a-4a23-bcef-33032c086d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28104", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28104\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.\n\ud83d\udccf Published: 2025-04-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T17:18:42.239Z\n\ud83d\udd17 References:\n1. https://github.com/DogukanUrker/flaskBlog/issues/130\n2. https://gist.github.com/coleak2021/d5fea0f7d32a2de38130da089f4fb735", "creation_timestamp": "2025-04-21T18:02:37.000000Z"}, {"uuid": "07a5779a-c144-4cb6-a64d-a267da7a1b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2801", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2801\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-04-26T03:24:24.464Z\n\ud83d\udccf Modified: 2025-04-26T03:24:24.464Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e45afda4-447a-4d95-90cb-9731b398a009?source=cve\n2. https://plugins.trac.wordpress.org/browser/abcsubmit/tags/1.2.4/abcsubmit.php#L86\n3. https://plugins.trac.wordpress.org/browser/abcsubmit/tags/1.2.4/abcsubmit.php#L88\n4. https://wordpress.org/plugins/abcsubmit/#developers", "creation_timestamp": "2025-04-26T04:07:46.000000Z"}, {"uuid": "1e1c9d66-fac8-40f3-afb6-672ea3c634cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2803", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2803\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The So-Called Air Quotes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-03-29T07:03:30.428Z\n\ud83d\udccf Modified: 2025-03-29T07:03:30.428Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/83f2ceee-4422-4ed5-adc7-91bc022ae42d?source=cve\n2. https://plugins.svn.wordpress.org/so-called-air-quotes/trunk/airquote.php\n3. https://wordpress.org/plugins/so-called-air-quotes/#developers", "creation_timestamp": "2025-03-29T07:28:44.000000Z"}, {"uuid": "f5c949cf-25cc-4c97-8f14-4770146aaea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2855", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9135", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2855\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely.\n\ud83d\udccf Published: 2025-03-27T15:31:04.560Z\n\ud83d\udccf Modified: 2025-03-27T16:10:05.956Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301502\n2. https://vuldb.com/?ctiid.301502\n3. https://vuldb.com/?submit.522504\n4. https://github.com/elunez/eladmin/issues/873", "creation_timestamp": "2025-03-27T16:27:00.000000Z"}, {"uuid": "2c29757a-a7a9-43a7-a28d-a8f118ebcbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2850", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2850\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been rated as problematic. This issue affects some unknown processing of the component Download Interface. The manipulation leads to improper authorization. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-26T07:31:03.631Z\n\ud83d\udccf Modified: 2025-04-26T07:31:03.631Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.306287\n2. https://vuldb.com/?ctiid.306287\n3. https://www.gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-apr-24-2025/", "creation_timestamp": "2025-04-26T08:08:33.000000Z"}, {"uuid": "61d5dd82-8336-4b3f-95fa-09418f144608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2851", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13574", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2851\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-26T08:00:08.117Z\n\ud83d\udccf Modified: 2025-04-26T08:00:08.117Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.306288\n2. https://vuldb.com/?ctiid.306288\n3. https://www.gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-apr-24-2025/", "creation_timestamp": "2025-04-26T08:08:32.000000Z"}, {"uuid": "4a0884a1-82e2-408a-aca7-d9791483eaee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2811", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13573", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2811\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been declared as problematic. This vulnerability affects unknown code of the component API. The manipulation leads to inefficient regular expression complexity. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-26T07:00:05.770Z\n\ud83d\udccf Modified: 2025-04-26T07:00:05.770Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.306286\n2. https://vuldb.com/?ctiid.306286\n3. https://vuldb.com/?submit.524459\n4. https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Calling%20a%20special%20API%20that%20doesn't%20require%20login%20and%20passing%20in%20a%20special%20character%20parameter%20results%20in%20100%25%20CPU%20usage.md\n5. https://www.gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-apr-24-2025/", "creation_timestamp": "2025-04-26T07:08:12.000000Z"}, {"uuid": "a808ac3b-10ec-438a-b88d-1480e935efe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "content": "", "creation_timestamp": "2026-04-24T00:00:00.000000Z"}, {"uuid": "53701c67-bb79-47ba-b994-8a992ca61fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28862", "type": "seen", "source": "Telegram/6y4OW2G1A8XZhZLMGjxYxeNXlyTAQDqUEjYEI_veMn1hL_A", "content": "", "creation_timestamp": "2026-04-01T21:29:00.000000Z"}, {"uuid": "5053f136-ad96-4b80-a031-af4fbc69290a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28866", "type": "seen", "source": "Telegram/6y4OW2G1A8XZhZLMGjxYxeNXlyTAQDqUEjYEI_veMn1hL_A", "content": "", "creation_timestamp": "2026-04-01T21:29:00.000000Z"}, {"uuid": "3b543b65-a4c9-481f-8962-68e236238244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28876", "type": "published-proof-of-concept", "source": "Telegram/qaiUzY0jU3lsWkLczH5jpfSLcodDVE0N-CXW3vtlinmUY8k", "content": "", "creation_timestamp": "2026-04-01T21:29:15.000000Z"}, {"uuid": "49839a4a-49f4-4437-b966-2057e8d61089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28868", "type": "published-proof-of-concept", "source": "Telegram/qaiUzY0jU3lsWkLczH5jpfSLcodDVE0N-CXW3vtlinmUY8k", "content": "", "creation_timestamp": "2026-04-01T21:29:15.000000Z"}, {"uuid": "ed1db2e0-acac-4c29-a482-b02f07a79e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28872", "type": "published-proof-of-concept", "source": "Telegram/qaiUzY0jU3lsWkLczH5jpfSLcodDVE0N-CXW3vtlinmUY8k", "content": "", "creation_timestamp": "2026-04-01T21:29:15.000000Z"}, {"uuid": "10f00be6-1827-46b4-900c-7c4e6940d05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28856", "type": "seen", "source": "Telegram/5hc_GDBIhvPMdlkY5wvlRmFRduPyEoAyugjukrE5SSxvAy4", "content": "", "creation_timestamp": "2026-04-01T21:28:56.000000Z"}, {"uuid": "6b63c031-2ffc-43e0-a90c-47b0fce7da25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28864", "type": "seen", "source": "Telegram/6y4OW2G1A8XZhZLMGjxYxeNXlyTAQDqUEjYEI_veMn1hL_A", "content": "", "creation_timestamp": "2026-04-01T21:29:00.000000Z"}, {"uuid": "f73ae8ef-fa70-4699-abc6-2aac9703314e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28863", "type": "seen", "source": "Telegram/6y4OW2G1A8XZhZLMGjxYxeNXlyTAQDqUEjYEI_veMn1hL_A", "content": "", "creation_timestamp": "2026-04-01T21:29:00.000000Z"}, {"uuid": "c5b04b97-57c8-46f2-9e62-fd580db956ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28867", "type": "published-proof-of-concept", "source": "Telegram/qaiUzY0jU3lsWkLczH5jpfSLcodDVE0N-CXW3vtlinmUY8k", "content": "", "creation_timestamp": "2026-04-01T21:29:15.000000Z"}, {"uuid": "e8ea2ecc-3888-41bf-b773-8ed19816d23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28398", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9891", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28398\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter.\n\ud83d\udccf Published: 2025-04-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T13:15:51.787Z\n\ud83d\udd17 References:\n1. https://github.com/Fizz-L/Vulnerability-report/blob/main/DI-8100Buffer%20overflow2.md", "creation_timestamp": "2025-04-01T13:32:36.000000Z"}, {"uuid": "02cf5a26-a686-434e-b912-610682b8a1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "Telegram/GJVVgUMR-Am0a4XNXJB6qKKOPmE9Yn2h83GfAofeQ9CX9UE", "content": "", "creation_timestamp": "2026-04-13T17:54:41.000000Z"}, {"uuid": "529bf2ab-2794-4071-9dec-985d6eb7dc39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "Telegram/Rk7hMmIKYATXl_hQfFOdK5MJxTVeQfOKjkNlqS7PgiJwldc", "content": "", "creation_timestamp": "2026-04-13T17:55:16.000000Z"}, {"uuid": "5be3fee3-98cd-4cc9-ba83-f04bd8a83ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28859", "type": "seen", "source": "Telegram/5hc_GDBIhvPMdlkY5wvlRmFRduPyEoAyugjukrE5SSxvAy4", "content": "", "creation_timestamp": "2026-04-01T21:28:56.000000Z"}, {"uuid": "5b8b2c21-2e99-4591-84f9-dbbc345332e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2893", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13794", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2893\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Gutenverse \u2013 Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-29T06:37:46.803Z\n\ud83d\udccf Modified: 2025-04-29T06:37:46.803Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/690e7f00-d9db-4912-9438-7fcbcb026800?source=cve\n2. https://wordpress.org/plugins/gutenverse/#developers\n3. https://plugins.trac.wordpress.org/changeset/3281650/\n4. https://plugins.trac.wordpress.org/browser/gutenverse/tags/2.2.1/assets/js/blocks.js", "creation_timestamp": "2025-04-29T07:12:10.000000Z"}, {"uuid": "491076ae-9ea4-4c04-86c0-9de6ed413567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2890", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13990", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2890\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The tagDiv Opt-In Builder plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018subscriptionCouponId\u2019 parameter in all versions up to, and including, 1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-04-30T08:21:59.678Z\n\ud83d\udccf Modified: 2025-04-30T08:21:59.678Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fff1cff1-6745-4124-ba93-8b0749eae61a?source=cve\n2. https://tagdiv.com/newspaper-changelog/\n3. https://themeforest.net/item/newspaper/5489609\n4. https://tagdiv.com/tagdiv-opt-in-builder/", "creation_timestamp": "2025-04-30T09:12:32.000000Z"}, {"uuid": "a4ef180f-b987-4753-b5a3-12f42305288a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2812", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14465", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2812\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection.This issue affects Ticket Sales Automation: before 03.04.2025 (DD.MM.YYYY).\n\ud83d\udccf Published: 2025-05-02T08:24:39.851Z\n\ud83d\udccf Modified: 2025-05-02T08:24:49.149Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0099", "creation_timestamp": "2025-05-02T09:18:48.000000Z"}, {"uuid": "801497d7-0cf0-4085-a8ef-55d0fbd785aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28020", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13274", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28020\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T15:52:36.284Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow3-1948e5e2b1a280c28ef5c6e54b49324d?pvs=73\n2. https://locrian-lightning-dc7.notion.site/CVE-2025-28020-BufferOverflow3-1948e5e2b1a280c28ef5c6e54b49324d", "creation_timestamp": "2025-04-24T16:07:01.000000Z"}, {"uuid": "681aad07-ba43-442e-8764-cec2ec78fd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28011", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7441", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28011\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration & Login and User Management System v3.3 allows remote attackers to execute arbitrary code via the currentpassword POST request parameter.\n\ud83d\udccf Published: 2025-03-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T16:18:54.296Z\n\ud83d\udd17 References:\n1. https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/User%20Registration%20%26%20Login%20and%20User%20Management%20System%20With%20admin%20panel/Change-password-sql-injection.pdf", "creation_timestamp": "2025-03-13T16:45:41.000000Z"}, {"uuid": "f9d80c44-50ef-4000-b001-2e701ae15fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28868", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28868\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in ZipList ZipList Recipe allows Cross Site Request Forgery. This issue affects ZipList Recipe: from n/a through 3.1.\n\ud83d\udccf Published: 2025-03-11T21:01:57.929Z\n\ud83d\udccf Modified: 2025-03-12T14:08:00.629Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ziplist-recipe-plugin/vulnerability/wordpress-ziplist-recipe-plugin-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T14:40:55.000000Z"}, {"uuid": "be331869-f2ff-4a74-8e68-7bdf6b7e3ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28941", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7308", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28941\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in ohtan Spam Byebye allows Cross Site Request Forgery. This issue affects Spam Byebye: from n/a through 2.2.4.\n\ud83d\udccf Published: 2025-03-11T21:01:18.173Z\n\ud83d\udccf Modified: 2025-03-12T14:24:28.532Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/spam-byebye/vulnerability/wordpress-spam-bybye-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T14:40:45.000000Z"}, {"uuid": "29ed9e1c-1936-44d4-a79c-94beba4d8680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28933", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7307", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28933\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in maxfoundry MaxA/B allows Stored XSS. This issue affects MaxA/B: from n/a through 2.2.2.\n\ud83d\udccf Published: 2025-03-11T21:01:14.544Z\n\ud83d\udccf Modified: 2025-03-12T14:25:46.128Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/maxab/vulnerability/wordpress-maxa-b-plugin-2-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T14:40:41.000000Z"}, {"uuid": "aea9cb2b-bf6e-44a4-ae69-cca0ba7f61a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28943", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28943\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mylo2h2s DP ALTerminator - Missing ALT manager allows Stored XSS. This issue affects DP ALTerminator - Missing ALT manager: from n/a through 1.0.2.\n\ud83d\udccf Published: 2025-03-11T21:01:18.833Z\n\ud83d\udccf Modified: 2025-03-12T14:17:57.505Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/dp-alterminator-missing-alt-manager/vulnerability/wordpress-dp-alterminator-missing-alt-manager-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T14:40:53.000000Z"}, {"uuid": "c44b4a2c-39aa-4e91-aec6-561f63a0b9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28908", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7345", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28908\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pipdig pipDisqus allows Stored XSS. This issue affects pipDisqus: from n/a through 1.6.\n\ud83d\udccf Published: 2025-03-11T21:00:56.150Z\n\ud83d\udccf Modified: 2025-03-12T17:21:42.181Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/pipdisqus/vulnerability/wordpress-pipdisqus-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T17:41:33.000000Z"}, {"uuid": "0a2156b3-a22d-46cb-a6e8-6975157170b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28906", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7344", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28906\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thiago S.F. Skitter Slideshow allows Stored XSS. This issue affects Skitter Slideshow: from n/a through 2.5.2.\n\ud83d\udccf Published: 2025-03-11T21:00:54.659Z\n\ud83d\udccf Modified: 2025-03-12T17:22:54.166Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-skitter-slideshow/vulnerability/wordpress-skitter-slideshow-plugin-2-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T17:41:32.000000Z"}, {"uuid": "07454c3d-1c4d-4896-ae1e-9e108d1a84cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28910", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7347", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28910\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ravinder Khurana WP Hide Admin Bar allows Cross Site Request Forgery. This issue affects WP Hide Admin Bar: from n/a through 2.0.\n\ud83d\udccf Published: 2025-03-11T21:00:57.554Z\n\ud83d\udccf Modified: 2025-03-12T17:20:28.647Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-hide-admin-bar/vulnerability/wordpress-wp-hide-admin-bar-plugin-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T17:41:37.000000Z"}, {"uuid": "08f25053-ecf5-4801-9d2b-53c493dc4389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28909", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7346", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28909\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in edwardw WP No-Bot Question allows Cross Site Request Forgery. This issue affects WP No-Bot Question: from n/a through 0.1.7.\n\ud83d\udccf Published: 2025-03-11T21:00:56.854Z\n\ud83d\udccf Modified: 2025-03-12T17:21:17.308Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-no-bot-question/vulnerability/wordpress-wp-no-bot-question-plugin-0-1-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-12T17:41:33.000000Z"}, {"uuid": "2d8ba159-25df-4c61-a13f-309e411ea418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28010", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8063", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28010\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims' browsers when viewing the profile image.\n\ud83d\udccf Published: 2025-03-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T14:53:43.217Z\n\ud83d\udd17 References:\n1. https://github.com/rtnthakur/CVE/blob/main/MODX/README.md", "creation_timestamp": "2025-03-19T15:17:45.000000Z"}, {"uuid": "af50ba5f-c665-4ca1-8ce6-9002b8f520e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14215", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2816\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_message_dontshow() function in versions 2.8.0 to 2.8.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to one on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration.\n\ud83d\udccf Published: 2025-05-01T02:23:03.486Z\n\ud83d\udccf Modified: 2025-05-01T02:23:03.486Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e6fb9558-06e5-4297-93df-ee9a6971f0ec?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3282975%40page-views-count&new=3282975%40page-views-count&sfp_email=&sfph_mail=", "creation_timestamp": "2025-05-01T03:13:59.000000Z"}, {"uuid": "18671b92-0005-4799-a32f-23012a7e1268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2820", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8862", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2820\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An authenticated attacker can compromise the availability of the device via the network\n\ud83d\udccf Published: 2025-03-26T14:58:09.132Z\n\ud83d\udccf Modified: 2025-03-26T15:17:18.797Z\n\ud83d\udd17 References:\n1. https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0002.pdf", "creation_timestamp": "2025-03-26T15:26:03.000000Z"}, {"uuid": "7c59015f-785d-4b8c-93d1-ada0fc559682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28904", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8737", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28904\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free allows Blind SQL Injection. This issue affects Web Directory Free: from n/a through 1.7.6.\n\ud83d\udccf Published: 2025-03-25T18:48:24.649Z\n\ud83d\udccf Modified: 2025-03-25T18:59:04.783Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/web-directory-free/vulnerability/wordpress-web-directory-free-plugin-1-7-6-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-25T19:24:50.000000Z"}, {"uuid": "e21ac733-988b-46f2-8cbf-7287a60dd8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2825\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access.\n\ud83d\udccf Published: 2025-03-26T15:58:14.218Z\n\ud83d\udccf Modified: 2025-03-26T16:17:26.040Z\n\ud83d\udd17 References:\n1. https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update\n2. https://www.rapid7.com/blog/post/2025/03/25/etr-notable-vulnerabilities-in-next-js-cve-2025-29927/\n3. https://www.runzero.com/blog/crushftp/", "creation_timestamp": "2025-03-26T16:25:16.000000Z"}, {"uuid": "86b011da-6ba0-4e67-916c-43e655c044ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2819", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8861", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2819\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.\n\ud83d\udccf Published: 2025-03-26T14:49:38.291Z\n\ud83d\udccf Modified: 2025-03-26T15:17:46.739Z\n\ud83d\udd17 References:\n1. https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0001.pdf", "creation_timestamp": "2025-03-26T15:26:03.000000Z"}, {"uuid": "5b52f5f2-82cd-4de8-b23d-2c408c8ed9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28917", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8868", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28917\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Custom Smilies allows Stored XSS. This issue affects Custom Smilies: from n/a through 2.9.2.\n\ud83d\udccf Published: 2025-03-26T14:24:24.733Z\n\ud83d\udccf Modified: 2025-03-26T15:10:48.837Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/custom-smilies-se/vulnerability/wordpress-custom-smilies-plugin-2-9-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-26T15:26:15.000000Z"}, {"uuid": "87f3e861-7003-45c2-ac7d-825c2f2f019f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28865", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8881", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28865\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lionelroux WP Colorful Tag Cloud allows Reflected XSS. This issue affects WP Colorful Tag Cloud: from n/a through 2.0.1.\n\ud83d\udccf Published: 2025-03-26T14:24:21.770Z\n\ud83d\udccf Modified: 2025-03-26T16:18:52.448Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-colorful-tag-cloud/vulnerability/wordpress-wp-colorful-tag-cloud-plugin-2-0-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-26T16:25:12.000000Z"}, {"uuid": "bc7ab8bd-3da7-4d49-a65c-2bfcd8546a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2837", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8978", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2837\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of HTTP requests. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-23245.\n\ud83d\udccf Published: 2025-03-26T21:16:28.720Z\n\ud83d\udccf Modified: 2025-03-26T21:16:28.720Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-24-871/\n2. https://community.silabs.com/a45Vm0000000Atp", "creation_timestamp": "2025-03-26T21:25:40.000000Z"}, {"uuid": "ab79e5c6-ae33-425c-896d-e564917b48e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28858", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8913", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28858\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arrow Plugins Arrow Maps allows Reflected XSS. This issue affects Arrow Maps: from n/a through 1.0.9.\n\ud83d\udccf Published: 2025-03-26T14:24:21.625Z\n\ud83d\udccf Modified: 2025-03-26T16:21:00.200Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ap-google-maps/vulnerability/wordpress-arrow-maps-plugin-1-0-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-26T17:25:46.000000Z"}, {"uuid": "bbb0a4c8-5cd3-4dc0-b1a7-8d1a08fb8f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2831", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9004", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2831\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in mingyuefusu \u660e\u6708\u590d\u82cf tushuguanlixitong \u56fe\u4e66\u7ba1\u7406\u7cfb\u7edf up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as critical. This vulnerability affects the function getBookList of the file /admin/bookList?page=1&limit=10. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-27T03:00:14.303Z\n\ud83d\udccf Modified: 2025-03-27T03:00:14.303Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301468\n2. https://vuldb.com/?ctiid.301468\n3. https://vuldb.com/?submit.521458\n4. https://gitee.com/mingyuefusu/tushuguanlixitong/issues/IBTSJL", "creation_timestamp": "2025-03-27T03:25:44.000000Z"}, {"uuid": "91b0fcea-511d-4e6c-897d-81586dcdf26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9262", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2894\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Go1\u00a0also known as \"The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level,\" contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service.\n\ud83d\udccf Published: 2025-03-28T02:51:19.768Z\n\ud83d\udccf Modified: 2025-03-28T02:51:19.768Z\n\ud83d\udd17 References:\n1. https://github.com/MAVProxyUser/YushuTechUnitreeGo1/blob/main/Unitree_report.pdf\n2. https://x.com/d0tslash/status/1730989109332607208\n3. https://github.com/unitreerobotics/unitree_ros/issues/120\n4. https://takeonme.org/cves/cve-2025-2894/", "creation_timestamp": "2025-03-28T03:27:38.000000Z"}, {"uuid": "e4cd7a86-f318-496c-8e63-d0f253bbb029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2804", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9267", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2804\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the 'account_id' and 'account_username' parameters in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-28T05:23:44.516Z\n\ud83d\udccf Modified: 2025-03-28T05:23:44.516Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/41ef545a-7de1-406c-8686-57216e697a1b?source=cve\n2. https://tagdiv.com/td_deploy/Newspaper/changed_files_12.6.9_12.7.html", "creation_timestamp": "2025-03-28T05:32:06.000000Z"}, {"uuid": "3c730292-ebde-486b-899c-e2467a0f2e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2838", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8977", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2838\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the processing of DNS responses. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-23392.\n\ud83d\udccf Published: 2025-03-26T21:16:33.186Z\n\ud83d\udccf Modified: 2025-03-26T21:16:33.186Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-24-872/\n2. https://community.silabs.com/a45Vm0000000Atp", "creation_timestamp": "2025-03-26T21:25:39.000000Z"}, {"uuid": "f6cf157b-8682-4eb9-9587-e796fbffc1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2846", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9083", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2846\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects the function registration of the file /oews/classes/Users.php?f=registration of the component Registration. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-27T12:31:05.130Z\n\ud83d\udccf Modified: 2025-03-27T13:09:05.076Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301492\n2. https://vuldb.com/?ctiid.301492\n3. https://vuldb.com/?submit.522326\n4. https://github.com/jeajeaa/cve/blob/main/sql.md\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-03-27T13:27:06.000000Z"}, {"uuid": "55ffda6c-7eb3-48a0-af17-dde1c0d33b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2868", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2868\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the\u00a0page parameter in /index.php.\n\ud83d\udccf Published: 2025-03-28T10:48:36.929Z\n\ud83d\udccf Modified: 2025-03-28T10:48:58.248Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clinic-queuing-system", "creation_timestamp": "2025-03-28T11:28:33.000000Z"}, {"uuid": "8ba31953-abdf-4238-88f7-daf008eeffa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2833", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2833\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-27T04:00:05.554Z\n\ud83d\udccf Modified: 2025-03-27T04:00:05.554Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301470\n2. https://vuldb.com/?ctiid.301470\n3. https://vuldb.com/?submit.521813\n4. https://github.com/zhangyd-c/OneBlog/issues/35\n5. https://github.com/zhangyd-c/OneBlog/issues/35#issue-2914268214", "creation_timestamp": "2025-03-27T04:26:04.000000Z"}, {"uuid": "275d51b9-d542-407f-a24a-5f929353b2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2835", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2835\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-27T04:00:07.721Z\n\ud83d\udccf Modified: 2025-03-27T04:00:07.721Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301471\n2. https://vuldb.com/?ctiid.301471\n3. https://vuldb.com/?submit.521815\n4. https://github.com/zhangyd-c/OneBlog/issues/36\n5. https://github.com/zhangyd-c/OneBlog/issues/36#issue-2923097259", "creation_timestamp": "2025-03-27T04:26:00.000000Z"}, {"uuid": "ba390ab8-95f3-450f-847c-9f707ca8dc34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2867", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2867\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A specifically crafted issue could manipulate AI-assisted development features to potentially expose sensitive project data to unauthorized users.\n\ud83d\udccf Published: 2025-03-27T14:02:18.359Z\n\ud83d\udccf Modified: 2025-03-27T14:18:32.168Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/512509", "creation_timestamp": "2025-03-27T14:27:41.000000Z"}, {"uuid": "f99de1c2-bc1c-4640-bbac-d3aedfbaaf69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2847", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2847\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/over_month.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-27T13:00:19.885Z\n\ud83d\udccf Modified: 2025-03-27T13:20:01.951Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301493\n2. https://vuldb.com/?ctiid.301493\n3. https://vuldb.com/?submit.522330\n4. https://www.yuque.com/baimatangseng-iyusa/qwwm81/zbefafzyl0of6g56?singleDoc", "creation_timestamp": "2025-03-27T13:26:51.000000Z"}, {"uuid": "97d027bb-ec39-4a00-a546-58c917ddb009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2869", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9316", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2869\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the\u00a0id parameter in /manage_user.php.\n\ud83d\udccf Published: 2025-03-28T10:49:09.243Z\n\ud83d\udccf Modified: 2025-03-28T10:49:09.243Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clinic-queuing-system", "creation_timestamp": "2025-03-28T11:28:32.000000Z"}, {"uuid": "dcfaf0a4-f774-45ee-b8f9-7e91bcb0f051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2870", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9315", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2870\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the\u00a0page parameter in /patient_side.php.\n\ud83d\udccf Published: 2025-03-28T10:49:28.966Z\n\ud83d\udccf Modified: 2025-03-28T10:49:28.966Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clinic-queuing-system", "creation_timestamp": "2025-03-28T11:28:31.000000Z"}, {"uuid": "a4dfcbde-33ad-4c4b-b16d-c36b6e7b5cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2815", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2815\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Administrator Z plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the adminz_import_backup() function in all versions up to, and including, 2025.03.24. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-03-28T11:13:13.313Z\n\ud83d\udccf Modified: 2025-03-28T11:13:13.313Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/32725074-5c62-49e0-83f9-c6cb77fb77a4?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3262319%40administrator-z&new=3262319%40administrator-z&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-28T11:28:30.000000Z"}, {"uuid": "e8f17c36-af7d-44a5-9cbf-5eb08e25567a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2852", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9098", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2852\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in SourceCodester Food Ordering Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menus/view_menu.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-27T14:00:13.496Z\n\ud83d\udccf Modified: 2025-03-27T14:19:14.731Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301495\n2. https://vuldb.com/?ctiid.301495\n3. https://vuldb.com/?submit.522402\n4. https://hackmd.io/@gnol719/rJqOPiInye\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-03-27T14:27:34.000000Z"}, {"uuid": "7fa06bbb-6ccd-4b38-a643-227650ab0bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2854", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9123", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2854\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file update_employee.php. The manipulation of the argument emp_type leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udccf Published: 2025-03-27T14:31:04.730Z\n\ud83d\udccf Modified: 2025-03-27T15:15:05.699Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.301501\n2. https://vuldb.com/?ctiid.301501\n3. https://vuldb.com/?submit.522479\n4. https://github.com/Fizz-L/CVE/blob/main/sql-fizz.md\n5. https://code-projects.org/", "creation_timestamp": "2025-03-27T15:26:56.000000Z"}, {"uuid": "94ec5fb5-edfd-434a-ae27-af5dffac8002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28953", "type": "seen", "source": "Telegram/ggttxZlZstNJAeAGMjql_bTwrWMMy661VkhxBCQCCiwWZxQ", "content": "", "creation_timestamp": "2026-01-09T18:06:19.000000Z"}, {"uuid": "a56b9a3f-8b0a-4070-8113-53aeaf43cefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9233", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28253\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Dashboard v5.3.4 exists in class/class-mainwp-post-handler.php, where unsanitized user input from $_POST['sites'], $_POST['clients'], and $_POST['search'] is passed into the MainWP_User::render_table function. Despite using sanitize_text_field and wp_unslash, the values are not adequately protected against HTML or script injection. This flaw could allow an attacker to inject malicious scripts.\n\ud83d\udccf Published: 2025-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T22:11:11.080Z\n\ud83d\udd17 References:\n1. https://github.com/edwin-0990/CVE_ID/tree/main/CVE-2025-28253", "creation_timestamp": "2025-03-27T22:36:41.000000Z"}, {"uuid": "31427b37-701f-4a52-bfdd-2183ab6e4955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2885", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9231", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2885\n\ud83d\udd25 CVSS Score: 5.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: When updating the root role, a TUF client must establish a trusted line of continuity to the latest set of keys. While sequentially downloading new versions of the root metadata file, tough will not check that the root object version it received was the next sequential version from the previously trusted root metadata. As a result, tough could trust content associated with a previous root role. The tough client will trust an unexpected root role in the event that an actor with control of the storage medium of a trusted TUF repository inappropriately replaced the contents of one of the root metadata files with an adequately signed previous version. As a result, tough could trust content associated with a previous root role.\n\ud83d\udccf Published: 2025-03-27T22:18:11.727Z\n\ud83d\udccf Modified: 2025-03-27T22:18:11.727Z\n\ud83d\udd17 References:\n1. https://github.com/awslabs/tough/security/advisories/GHSA-5vmp-m5v2-hx47\n2. https://aws.amazon.com/security/security-bulletins/AWS-2025-007/", "creation_timestamp": "2025-03-27T22:36:39.000000Z"}, {"uuid": "07eb3831-6c5a-4057-9809-7f00ed370388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2861", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2861\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing has the problem that information is exchanged in unencrypted text. Since sensitive data such as credentials are exchanged, an attacker could obtain them and log in legitimately.\n\ud83d\udccf Published: 2025-03-28T13:11:29.282Z\n\ud83d\udccf Modified: 2025-03-28T13:11:29.282Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu", "creation_timestamp": "2025-03-28T13:27:54.000000Z"}, {"uuid": "61e14a70-ddb9-416f-afb4-1793dafe7594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2862", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2862\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SaTECH BCU, in its firmware version 2.1.3, performs weak password encryption. This allows an attacker with access to the device's system or website to obtain the credentials, as the storage methods used are not strong enough in terms of encryption.\n\ud83d\udccf Published: 2025-03-28T13:15:08.022Z\n\ud83d\udccf Modified: 2025-03-28T13:15:08.022Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu", "creation_timestamp": "2025-03-28T13:27:53.000000Z"}, {"uuid": "c2d1a140-3ba1-4712-978b-7a9bd9e1958a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2858", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2858\n\ud83d\udd25 CVSS Score: 8.5 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:L)\n\ud83d\udd39 Description: Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.\n\ud83d\udccf Published: 2025-03-28T13:08:23.567Z\n\ud83d\udccf Modified: 2025-03-28T13:08:23.567Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu", "creation_timestamp": "2025-03-28T13:27:56.000000Z"}, {"uuid": "1e6957dc-8e58-4881-84d7-642263e473e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2859", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2859\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An attacker with access to the network where the vulnerable device is located could capture traffic and obtain cookies from the user, allowing them to steal a user's active session and make changes to the device via the web, depending on the privileges obtained by the user.\n\ud83d\udccf Published: 2025-03-28T13:09:58.324Z\n\ud83d\udccf Modified: 2025-03-28T13:09:58.324Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu", "creation_timestamp": "2025-03-28T13:27:56.000000Z"}, {"uuid": "387d500e-81a9-4f40-806e-2202d9101ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2860", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2860\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml file). In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website.\n\ud83d\udccf Published: 2025-03-28T13:10:44.182Z\n\ud83d\udccf Modified: 2025-03-28T13:10:44.182Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu", "creation_timestamp": "2025-03-28T13:27:55.000000Z"}, {"uuid": "71b2b301-15d6-40c5-92d1-98ff0d5feeac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2877", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9355", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2877\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to \"debug\", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any \"debug\" action in a rulebook and also affects Event Streams.\n\ud83d\udccf Published: 2025-03-28T14:05:18.308Z\n\ud83d\udccf Modified: 2025-03-28T14:05:18.308Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-2877\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2355540", "creation_timestamp": "2025-03-28T14:27:40.000000Z"}, {"uuid": "55b85c05-6cf0-4f3f-8160-e0eddcbb8c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28097", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9490", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28097\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T21:33:12.314Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465", "creation_timestamp": "2025-03-28T22:28:32.000000Z"}, {"uuid": "4d84be38-40fd-43b6-8ed4-7eb446227e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9392", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28135\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi.\n\ud83d\udccf Published: 2025-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T16:13:08.034Z\n\ud83d\udd17 References:\n1. https://sudsy-eyeliner-a59.notion.site/BufferOverflow-V4-1-2cu-5182_B20201026-19872b8cd95f80808902fac8449fee64", "creation_timestamp": "2025-03-28T16:28:00.000000Z"}, {"uuid": "fbd16a0c-2a5d-4d72-9e8a-89864e44591d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28087", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9467", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28087\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T21:18:52.024Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/vxhdpdeavzvtvdqq", "creation_timestamp": "2025-03-28T21:28:56.000000Z"}, {"uuid": "41054f3a-483c-4a02-b9c0-8c0a370b4e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28089", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9466", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28089\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T21:22:07.710Z\n\ud83d\udd17 References:\n1. https://github.com/magicblack/maccms10/releases/tag/v2025.1000.4047\n2. https://www.yuque.com/morysummer/vx41bz/wzer7qxh0vwrf6zq", "creation_timestamp": "2025-03-28T21:28:55.000000Z"}, {"uuid": "76b36dce-ab05-445e-8d1d-93e62cfb79c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28254", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28254\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions().\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T20:35:19.395Z\n\ud83d\udd17 References:\n1. https://github.com/Leantime/leantime/blob/0e7ddbbe3d582f657a1dddfef7b3419ae588cbf7/app/Domain/Notifications/Services/Notifications.php#L128\n2. https://github.com/Leantime/leantime/commit/ce1d2073e4601183e1bdd90f4b433d16aee46a50\n3. https://github.com/Leantime/leantime/security/advisories/GHSA-95j3-435g-vjcp", "creation_timestamp": "2025-03-28T21:29:18.000000Z"}, {"uuid": "d7052351-fec5-43a9-98f2-c80c2e209ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28091", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9465", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28091\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T21:23:21.110Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/ax55rxv4u3our1ic", "creation_timestamp": "2025-03-28T21:28:55.000000Z"}, {"uuid": "cbfa233f-9167-4c31-8325-9f6995efcda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28256", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28256\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T20:51:49.746Z\n\ud83d\udd17 References:\n1. https://github.com/ZackSecurity/VulnerReport/blob/cve/totolink/A3100R/1.md", "creation_timestamp": "2025-03-28T21:28:58.000000Z"}, {"uuid": "45d7b7c9-684d-440f-ae5b-3121a6bfe8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28094", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9492", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28094\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T21:31:10.545Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/echzollcdlmllgqo", "creation_timestamp": "2025-03-28T22:28:33.000000Z"}, {"uuid": "bf8b4efe-1844-4c82-b9a8-3b668c4b7931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28096", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9491", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28096\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T21:32:44.520Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/oqi6pyv26gci6465", "creation_timestamp": "2025-03-28T22:28:33.000000Z"}, {"uuid": "fbfaf43a-7a55-466e-83e4-5988faa91163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2840", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2840\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.\n\ud83d\udccf Published: 2025-03-29T07:03:29.710Z\n\ud83d\udccf Modified: 2025-03-29T07:03:29.710Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3ff90774-f5f6-4d9c-9565-1cff31f9bec4?source=cve\n2. https://plugins.trac.wordpress.org/browser/dap-to-autoresponders-daar/trunk/infusionsoft_src/phpinfo.php#L3\n3. https://wordpress.org/plugins/dap-to-autoresponders-daar/#developers", "creation_timestamp": "2025-03-29T07:28:48.000000Z"}, {"uuid": "d82f8c9a-9f37-4cad-9e10-ec67dc8eea38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28092", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28092\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T19:16:22.199Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/stggvmlxs9ewqlvu", "creation_timestamp": "2025-03-31T19:31:02.000000Z"}, {"uuid": "6204a0ad-1fb7-4596-9ac9-2708b411a40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28090", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28090\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T19:25:59.534Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/xo5w1euakvtgenex", "creation_timestamp": "2025-03-31T19:31:01.000000Z"}, {"uuid": "d8b24339-b849-43cb-8b77-a2bfc785258d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28093", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9743", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28093\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T19:13:57.416Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/he2hb8ic8an8h07f", "creation_timestamp": "2025-03-31T19:31:02.000000Z"}, {"uuid": "717b17b9-b874-44ac-b2d3-16966a089971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2891", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9860", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2891\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible if front-end listing submission has been enabled.\n\ud83d\udccf Published: 2025-04-01T07:29:12.911Z\n\ud83d\udccf Modified: 2025-04-01T07:29:12.911Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5c83457d-ba06-43c5-acdd-77dbfb0d4af4?source=cve\n2. https://contempothemes.com/changelog/", "creation_timestamp": "2025-04-01T07:32:09.000000Z"}, {"uuid": "4464ea2b-e298-4c81-8422-4f9e8a1ae5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28395", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9894", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28395\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.\n\ud83d\udccf Published: 2025-04-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T13:13:23.209Z\n\ud83d\udd17 References:\n1. https://github.com/Fizz-L/Vulnerability-report/blob/main/DI-8100Buffer%20overflow.md", "creation_timestamp": "2025-04-01T13:32:42.000000Z"}, {"uuid": "61bfea58-87ec-451d-8999-83df3374ad8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28132", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28132\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf.\n\ud83d\udccf Published: 2025-04-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T19:49:32.374Z\n\ud83d\udd17 References:\n1. https://www.nagios.com/changelog/#network-analyzer\n2. https://github.com/harshal79/Insufficient-Session-Expiration.git", "creation_timestamp": "2025-04-01T20:33:48.000000Z"}, {"uuid": "bb7f946b-c04e-4252-ad99-46fba554eb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2842", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10070", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2842\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in the Tempo Operator. When the Jaeger UI Monitor Tab functionality is enabled in a Tempo instance managed by the Tempo Operator, the Operator creates a ClusterRoleBinding for the Service Account of the Tempo instance to grant the cluster-monitoring-view ClusterRole.\nThis can be exploited if a user has 'create' permissions on TempoStack and 'get' permissions on Secret in a namespace (for example, a user has ClusterAdmin permissions for a specific namespace), as the user can read the token of the Tempo service account and therefore has access to see all cluster metrics.\n\ud83d\udccf Published: 2025-04-02T11:09:55.496Z\n\ud83d\udccf Modified: 2025-04-02T13:25:51.661Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-2842\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2355219", "creation_timestamp": "2025-04-02T13:33:43.000000Z"}, {"uuid": "ed5a6d12-db4d-48fb-9a79-34f8e83940a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2874", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2874\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The User Submitted Posts \u2013 Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-04-03T07:21:22.448Z\n\ud83d\udccf Modified: 2025-04-03T07:21:22.448Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8b212a1a-0e2b-4327-93b5-398bd7a36b5c?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3263067%40user-submitted-posts&new=3263067%40user-submitted-posts&sfp_email=&sfph_mail=", "creation_timestamp": "2025-04-03T07:34:02.000000Z"}, {"uuid": "e1ffa011-89f5-41a8-9909-c40052454ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2836", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2836\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The RegistrationMagic \u2013 Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018payment_method\u2019 parameter in all versions up to, and including, 6.0.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-04T05:22:45.468Z\n\ud83d\udccf Modified: 2025-04-04T05:22:45.468Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9c0c3932-bdb0-4edb-bfec-2ed52cbc5cb6?source=cve\n2. https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.4.3/libs/factory/class_rm_form_factory_revamp.php#L1274\n3. https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.4.3/libs/factory/class_rm_form_factory_revamp.php#L1820\n4. https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.4.3/includes/class_registration_magic.php#L1215\n5. https://plugins.trac.wordpress.org/changeset/3265041/", "creation_timestamp": "2025-04-04T05:35:55.000000Z"}, {"uuid": "2b4b300a-e6d7-420b-b691-79de0895516d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28146", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10442", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28146\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel\n\ud83d\udccf Published: 2025-04-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T13:20:07.666Z\n\ud83d\udd17 References:\n1. https://github.com/regainer27/edimax-br-6478ac_v3-br-6478ac_v3_1.0.15/tree/main/3", "creation_timestamp": "2025-04-04T13:35:50.000000Z"}, {"uuid": "9d386f0a-001c-4989-8139-0405c9234aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2889", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10580", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2889\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Additional Parameters in all versions up to, and including, 7.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-04T23:22:04.591Z\n\ud83d\udccf Modified: 2025-04-04T23:22:04.591Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0881efbe-9b47-4b56-be2d-12258460b429?source=cve\n2. https://plugins.trac.wordpress.org/browser/link-library/tags/7.7.3/link-library-admin.php#L7610", "creation_timestamp": "2025-04-04T23:37:41.000000Z"}, {"uuid": "4060654b-4c57-427d-88b2-185f6f0b05d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2876", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10895", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2876\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user.\n\ud83d\udccf Published: 2025-04-08T11:11:31.603Z\n\ud83d\udccf Modified: 2025-04-08T11:11:31.603Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/559cbc69-85b6-4bad-9bb2-26d64195ba7e?source=cve\n2. https://plugins.trac.wordpress.org/browser/melapress-login-security/trunk/app/modules/temporary-logins/class-temporary-logins.php#L71\n3. https://melapress.com/wordpress-login-security/releases/\n4. https://plugins.trac.wordpress.org/changeset/3267748/", "creation_timestamp": "2025-04-08T11:46:21.000000Z"}, {"uuid": "4563b78e-1af2-4bf9-b072-ee2c93ed8b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28405", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10986", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28405\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the changeStatus method\n\ud83d\udccf Published: 2025-04-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T19:38:11.379Z\n\ud83d\udd17 References:\n1. https://github.com/yangzongzhuan/RuoYi\n2. https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28405.md", "creation_timestamp": "2025-04-08T19:47:23.000000Z"}, {"uuid": "a42994dc-76af-41fe-bafb-a59f2a0d68ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28407", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10991", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28407\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endpoint does not properly validate whether the requesting user has permission to modify the specified dictId\n\ud83d\udccf Published: 2025-04-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T19:36:15.195Z\n\ud83d\udd17 References:\n1. https://github.com/yangzongzhuan/RuoYi\n2. https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28407.md", "creation_timestamp": "2025-04-08T19:47:30.000000Z"}, {"uuid": "67157cd9-3775-4fa4-acbe-0b8857bc8a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2882", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10855", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2882\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between 3.0.0 and 3.0.9 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.\n\ud83d\udccf Published: 2025-04-08T07:29:44.589Z\n\ud83d\udccf Modified: 2025-04-08T07:29:44.589Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ed57bb85-d4b5-4c89-a1c7-c3b8a0a5a2ea?source=cve\n2. https://plugins.trac.wordpress.org/browser/green-money-payment-gateway/trunk/phpinfo.php\n3. https://wordpress.org/plugins/green-money-payment-gateway/#developers\n4. https://plugins.trac.wordpress.org/changeset/3267032/", "creation_timestamp": "2025-04-08T07:46:12.000000Z"}, {"uuid": "8b2e0e9e-8cd9-4bf3-bf0f-8e9529317e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28403", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10983", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28403\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method does not properly validate whether the requesting user has administrative privileges before allowing modifications to system configuration settings\n\ud83d\udccf Published: 2025-04-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T19:39:33.734Z\n\ud83d\udd17 References:\n1. https://github.com/yangzongzhuan/RuoYi\n2. https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28403.md", "creation_timestamp": "2025-04-08T19:47:20.000000Z"}, {"uuid": "228844ba-056b-4673-87a3-f0d43898e137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28402", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10982", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28402\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobId parameter\n\ud83d\udccf Published: 2025-04-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T19:40:25.504Z\n\ud83d\udd17 References:\n1. https://github.com/yangzongzhuan/RuoYi\n2. https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28402.md", "creation_timestamp": "2025-04-08T19:47:19.000000Z"}, {"uuid": "49bd9de7-45fc-4307-867c-070faaff654f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28406", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10988", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28406\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobLogId parameter\n\ud83d\udccf Published: 2025-04-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T19:37:05.101Z\n\ud83d\udd17 References:\n1. https://github.com/yangzongzhuan/RuoYi\n2. https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28406.md", "creation_timestamp": "2025-04-08T19:47:28.000000Z"}, {"uuid": "acd2727e-7983-4788-a3d8-c68fa1a21f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28408", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28408\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/{deptId} endpoint does not properly validate the deptId parameter\n\ud83d\udccf Published: 2025-04-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T19:34:46.004Z\n\ud83d\udd17 References:\n1. https://github.com/yangzongzhuan/RuoYi\n2. https://github.com/20210607/cve_public/blob/main/ruoyi_case/CVE-2025-28408.md", "creation_timestamp": "2025-04-08T19:47:37.000000Z"}, {"uuid": "f158e3d1-1ee2-41c1-b89d-8bfec3fc7eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2845", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11183", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2845\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-09T22:15:57.485Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-09T22:48:56.000000Z"}, {"uuid": "8153809d-0d7b-45de-a328-c65331c88575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2814", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11553", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2814\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Crypt::CBC versions between 1.21 and 3.04 for Perl may use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.\n\nThis issue affects operating systems where \"/dev/urandom'\" is unavailable.\u00a0 In that case, Crypt::CBC will fallback to use the insecure rand() function.\n\ud83d\udccf Published: 2025-04-12T23:41:48.511Z\n\ud83d\udccf Modified: 2025-04-12T23:41:48.511Z\n\ud83d\udd17 References:\n1. https://perldoc.perl.org/functions/rand\n2. https://metacpan.org/dist/Crypt-CBC/source/lib/Crypt/CBC.pm#L777\n3. https://security.metacpan.org/docs/guides/random-data-for-security.html", "creation_timestamp": "2025-04-13T00:51:42.000000Z"}, {"uuid": "e131f02b-ebe6-4a0e-ac27-ac66323ec526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2881", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11532", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2881\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Developer Toolbar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.\n\ud83d\udccf Published: 2025-04-12T02:23:15.245Z\n\ud83d\udccf Modified: 2025-04-12T02:23:15.245Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e10ba37a-cd7d-4fc9-8b41-806fa3dc7785?source=cve\n2. https://plugins.trac.wordpress.org/browser/developer-toolbar/trunk/views/phpinfo.php#L45\n3. https://wordpress.org/plugins/developer-toolbar/#developers", "creation_timestamp": "2025-04-12T02:51:19.000000Z"}, {"uuid": "3d16ccfc-3672-4a9a-8a26-e127f9911f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2871", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11534", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2871\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The WordPress Mega Menu \u2013 QuadMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the ajax_dismiss_notice() function. This makes it possible for unauthenticated attackers to update any user meta to a value of one, including wp_capabilities which could result in a privilege deescalation of an administrator, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-12T03:21:34.380Z\n\ud83d\udccf Modified: 2025-04-12T03:21:34.380Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1ba7b675-54d6-4f0e-b60f-1c7fa6ff24ea?source=cve\n2. https://plugins.trac.wordpress.org/browser/quadmenu/tags/3.2.0/lib/class-admin.php#L105\n3. https://plugins.trac.wordpress.org/changeset/3270825/quadmenu/tags/3.2.1/lib/class-admin.php", "creation_timestamp": "2025-04-12T03:51:39.000000Z"}, {"uuid": "afcbe7d7-9177-44d4-b62e-7c0ec41233de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2841", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11533", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2841\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Cart66 Cloud plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.7 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.\n\ud83d\udccf Published: 2025-04-12T02:23:14.583Z\n\ud83d\udccf Modified: 2025-04-12T02:23:14.583Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5be01bba-e4f4-4818-9612-fc37b648a349?source=cve\n2. https://plugins.trac.wordpress.org/browser/cart66-cloud/tags/2.3.7/views/admin/html-system-info.php#L26\n3. https://plugins.trac.wordpress.org/browser/cart66-cloud/tags/2.3.7/views/admin/html-system-info.php#L39\n4. https://plugins.trac.wordpress.org/browser/cart66-cloud/tags/2.3.7/views/admin/html-system-info.php#L59\n5. https://wordpress.org/plugins/cart66-cloud/#developers", "creation_timestamp": "2025-04-12T02:51:20.000000Z"}, {"uuid": "33bcd8ef-812f-4242-8ed2-63276bf417b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28198", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11855", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28198\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T15:33:10.104Z\n\ud83d\udd17 References:\n1. https://github.com/Hitout/carsale/issues/24", "creation_timestamp": "2025-04-15T15:54:49.000000Z"}, {"uuid": "e34dae22-2084-412c-b28f-17fd6356b326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28100", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11871", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the \"operateOrder.php\" id parameter.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T17:46:31.802Z\n\ud83d\udd17 References:\n1. https://github.com/gh3-dk/vul/blob/main/sql%20injection/dingfanzu/dingfanzu-CMS%20operateOrder.php%20id%20SQL-inject.md", "creation_timestamp": "2025-04-15T17:55:34.000000Z"}, {"uuid": "f8fe7a5e-2cfb-47a4-b4a8-175af82f149a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28072", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12226", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28072\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.\n\ud83d\udccf Published: 2025-04-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T13:41:53.885Z\n\ud83d\udd17 References:\n1. https://github.com/baixiaobi/TST/blob/main/README.md", "creation_timestamp": "2025-04-17T13:57:54.000000Z"}, {"uuid": "1ef1d261-a630-4957-b861-8e28a3abade0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28238", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12509", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28238\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T17:49:24.445Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28238", "creation_timestamp": "2025-04-18T17:59:31.000000Z"}, {"uuid": "c137e76e-e1a0-46d6-bca7-7a4986e87b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28034", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12841", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28034\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter.\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:55:01.060Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/RCE2-1a98e5e2b1a280bebf53d868f1b1a711?pvs=74", "creation_timestamp": "2025-04-22T14:03:29.000000Z"}, {"uuid": "6b3ab09e-b304-4a98-aef7-2812e08b76ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28235", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12515", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28235\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T17:41:46.181Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28235", "creation_timestamp": "2025-04-18T17:59:43.000000Z"}, {"uuid": "2fedbbdf-e773-44d1-b724-eb0fa44fa0a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28232", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12446", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28232\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T14:56:41.199Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28232", "creation_timestamp": "2025-04-18T14:58:49.000000Z"}, {"uuid": "b80eb5e4-51a7-4aa3-8b4d-b184d15f9373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28228", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12452", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28228\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plaintext.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T14:53:16.047Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28228", "creation_timestamp": "2025-04-18T14:58:57.000000Z"}, {"uuid": "6a90ca9b-f6fd-432f-a39f-fccf08c82f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28242", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12511", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28242\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T17:46:45.258Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28242", "creation_timestamp": "2025-04-18T17:59:36.000000Z"}, {"uuid": "bd33411f-9dd0-44d6-beb6-0809042aea0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28236", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12510", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28236\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the /#/software/upgrades endpoint.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T17:48:15.466Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28236", "creation_timestamp": "2025-04-18T17:59:35.000000Z"}, {"uuid": "a70da47f-0a88-42e9-9c91-b1ae4ea71a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28355", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12522", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28355\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T18:38:55.179Z\n\ud83d\udd17 References:\n1. https://github.com/Volmarg/personal-management-system\n2. https://github.com/abbisQQ/CVE-2025-28355/tree/main\n3. https://github.com/Volmarg/personal-management-system/issues/149", "creation_timestamp": "2025-04-18T18:58:42.000000Z"}, {"uuid": "6aad062a-80ee-4153-b9a2-fa4cf1471ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28229", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12460", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28229\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T14:50:12.329Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28229", "creation_timestamp": "2025-04-18T14:59:10.000000Z"}, {"uuid": "bd0d1c89-7165-4c04-99ee-1d13b404e801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28230", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28230\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T14:48:38.297Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28230", "creation_timestamp": "2025-04-18T14:59:13.000000Z"}, {"uuid": "d5d62755-7ae3-4e9b-a14c-cd4ef485de58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28059", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12486", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28059\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke associated API tokens, enabling unauthorized access to restricted functions.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T16:44:25.506Z\n\ud83d\udd17 References:\n1. https://github.com/aakashtyal/Residual-Data-Access-Post-User-Deletion-in-Nagios-Network-Analyzer-Version-2024R1\n2. https://www.nagios.com/changelog/#network-analyze", "creation_timestamp": "2025-04-18T16:58:57.000000Z"}, {"uuid": "6bc3ee1e-d513-49d6-b745-c88487f566bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28220", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12728", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28220\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T18:57:33.860Z\n\ud83d\udd17 References:\n1. https://github.com/IdaJea/IOT_vuln_1/blob/master/w6_s_v1.0.0.4/setcfm.pdf", "creation_timestamp": "2025-04-21T19:02:06.000000Z"}, {"uuid": "a079139f-2bc5-4aa1-9b31-68d01903b338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28221", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28221\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which allows remote attackers to cause web server crash via parameter time passed to the binary through a POST request.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T18:58:32.598Z\n\ud83d\udd17 References:\n1. https://github.com/IdaJea/IOT_vuln_1/blob/master/w6_s_v1.0.0.4/time.pdf", "creation_timestamp": "2025-04-21T19:02:05.000000Z"}, {"uuid": "728dcb64-5b82-4e0d-a86b-337b9e5f0017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28237", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12512", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28237\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges via a crafted JSON payload.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T17:45:36.026Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28237", "creation_timestamp": "2025-04-18T17:59:37.000000Z"}, {"uuid": "f15e1d2d-6804-45fd-a61c-c1feac30e81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28231", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12514", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28231\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T17:43:11.911Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28231", "creation_timestamp": "2025-04-18T17:59:39.000000Z"}, {"uuid": "444dce80-c939-49b1-bd72-37a8ed4545c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28233", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12513", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28233\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking attack.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T17:44:28.534Z\n\ud83d\udd17 References:\n1. https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28233", "creation_timestamp": "2025-04-18T17:59:38.000000Z"}, {"uuid": "24f0adfb-8c0f-4c70-9f59-e624bb8f8330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28103", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12719", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28103\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.\n\ud83d\udccf Published: 2025-04-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T17:13:58.265Z\n\ud83d\udd17 References:\n1. https://github.com/DogukanUrker/flaskBlog/issues/130\n2. https://gist.github.com/coleak2021/77895b7a7b335ae17eb57390f4a94917", "creation_timestamp": "2025-04-21T18:02:40.000000Z"}, {"uuid": "d279d1ff-5137-4ac3-99e7-cad7624565c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28219", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12725", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28219\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter \"deviceName\" passed to the binary through a POST request.\n\ud83d\udccf Published: 2025-03-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T19:00:08.434Z\n\ud83d\udd17 References:\n1. https://github.com/IdaJea/IOT_vuln_1/blob/master/DC112A_V1.0.0.64/sub_69600.pdf", "creation_timestamp": "2025-04-21T19:02:03.000000Z"}, {"uuid": "a20573e1-a333-4a70-b6be-4efab153941e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28099", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28099\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,\n\ud83d\udccf Published: 2025-04-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T16:56:20.745Z\n\ud83d\udd17 References:\n1. https://gitee.com/fumiao/opencms/issues/IBLJLM\n2. https://gist.github.com/kaoniniang2/e159346725f50d6c44c82214970f02b8", "creation_timestamp": "2025-04-21T17:01:53.000000Z"}, {"uuid": "3f1ad748-9b15-484a-8fb3-9252a524d996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28102", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12720", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28102\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parameter at /createpost.\n\ud83d\udccf Published: 2025-04-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T17:07:27.706Z\n\ud83d\udd17 References:\n1. https://github.com/DogukanUrker/flaskBlog/issues/130\n2. https://gist.github.com/coleak2021/edbd6e0766227ee96a7a4601e50773eb", "creation_timestamp": "2025-04-21T18:02:41.000000Z"}, {"uuid": "03562078-17f7-4b96-8508-e1262978d1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2839", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2839\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018wpiePreviewData\u2019 function in all versions up to, and including, 3.9.27 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-22T05:27:23.927Z\n\ud83d\udccf Modified: 2025-04-22T05:27:23.927Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a8ca1ead-1bc5-4ccc-9034-559db27f5e82?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-import-export-lite/trunk/assets/js/wpie-export-admin.min.js\n3. https://plugins.trac.wordpress.org/changeset/3274100/", "creation_timestamp": "2025-04-22T06:03:22.000000Z"}, {"uuid": "10a6eac0-9899-4346-8f16-02c4e5044926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28032", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12847", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28032\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter.\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:50:36.173Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow6-19f8e5e2b1a28052bda1f6ede9db341d", "creation_timestamp": "2025-04-22T14:03:37.000000Z"}, {"uuid": "f3d937db-b5a3-4c0c-9153-094a4d80b623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28030", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13044", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28030\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T13:40:11.172Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow6-19f8e5e2b1a2803db1d9ce7b4d06e2e0?pvs=73", "creation_timestamp": "2025-04-23T14:05:26.000000Z"}, {"uuid": "c6566500-117f-4810-9d1b-e7e8747dbbe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28017", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13267", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28017\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T15:54:33.085Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/TOTOLINK-A800R-RCE-1938e5e2b1a280d696bbd25699fb5e97\n2. https://locrian-lightning-dc7.notion.site/CVE-2025-28017-TOTOLINK-A800R-RCE-1938e5e2b1a280d696bbd25699fb5e97", "creation_timestamp": "2025-04-24T16:06:49.000000Z"}, {"uuid": "608f7bf8-109f-484b-9688-23e68b4a6114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28024", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13043", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28024\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T13:41:34.007Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow5-1978e5e2b1a2800caaced7ae3fb4783c", "creation_timestamp": "2025-04-23T14:05:26.000000Z"}, {"uuid": "0d18d37e-cc40-4e78-8aec-3dfc3fcf18bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28033", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13059", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28033\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter.\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T14:48:47.188Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow7-1a98e5e2b1a280708d6ec6155ce88d8c", "creation_timestamp": "2025-04-23T15:04:51.000000Z"}, {"uuid": "8d09a05b-a105-434b-b261-4ec06fad35bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13275", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28022\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T15:52:04.404Z\n\ud83d\udd17 References:\n1. https://locrian-lightning-dc7.notion.site/BufferOverflow3-1948e5e2b1a280ec8061ed308b33b5bc?pvs=73\n2. https://locrian-lightning-dc7.notion.site/CVE-2025-28022-BufferOverflow3-1948e5e2b1a280ec8061ed308b33b5bc", "creation_timestamp": "2025-04-24T16:07:02.000000Z"}, {"uuid": "cfc6f3c7-f418-4756-8f98-b6ab6d9874a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2898", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15253", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2898\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control (RBAC) configurations.\n\ud83d\udccf Published: 2025-05-06T14:41:09.704Z\n\ud83d\udccf Modified: 2025-05-07T03:56:03.789Z\n\ud83d\udd17 References:\n1. https://https://www.ibm.com/support/pages/node/7232050", "creation_timestamp": "2025-05-07T04:21:38.000000Z"}, {"uuid": "f339fd79-c424-451c-abb4-7650abc1fbe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2821", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2821\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_rest_permission function in all versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to modify plugin settings, excluding content from search results.\n\ud83d\udccf Published: 2025-05-07T01:43:06.640Z\n\ud83d\udccf Modified: 2025-05-07T01:43:06.640Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1f72a309-8ef8-4943-8e64-38bb7909397a?source=cve\n2. https://plugins.trac.wordpress.org/browser/search-exclude/tags/2.4.6/lib/api/entities/settings/class-post.php#L42\n3. https://plugins.trac.wordpress.org/changeset/3284798/", "creation_timestamp": "2025-05-07T02:21:41.000000Z"}, {"uuid": "aad747bd-5980-4916-834a-43c2b87f0543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28074", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15628", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28074\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: phpList prior to 3.6.3 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploitable when the application dynamically references internal paths and processes untrusted input without escaping, allowing an attacker to inject malicious JavaScript.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T20:34:07.068Z\n\ud83d\udd17 References:\n1. https://github.com/phpList/phplist3/blob/main/public_html/lists/lt.php\n2. https://github.com/mLniumm/CVE-2025-28074", "creation_timestamp": "2025-05-08T21:25:41.000000Z"}, {"uuid": "80660154-d943-49c2-b58f-6680b44591cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2806", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15517", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2806\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the \u2018data\u2019 parameter in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-05-08T11:23:40.588Z\n\ud83d\udccf Modified: 2025-05-08T11:23:40.588Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/52bd9946-dccc-427a-9abd-0b7153e7484f?source=cve\n2. http://localhost:1337/wp-content/plugins/td-composer/legacy/common/wp_booster/td_ajax.php#L2034\n3. https://tagdiv.com/td_deploy/Newspaper/changed_files_12.6.9_12.7.html", "creation_timestamp": "2025-05-08T12:24:14.000000Z"}, {"uuid": "a99dc745-a2db-4371-b09b-941aa94009d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15859", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28203\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-10T02:14:43.139Z\n\ud83d\udd17 References:\n1. https://pwnit.io/2025/02/13/finding-vulnerabilities-in-wi-fi-router/", "creation_timestamp": "2025-05-10T02:26:29.000000Z"}, {"uuid": "cb672e16-1dae-418b-aab0-08c7779525d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28200", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16051", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28200\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T22:11:33.208Z\n\ud83d\udd17 References:\n1. http://victure.com\n2. http://rx1800.com\n3. https://pwnit.io/2025/02/13/finding-vulnerabilities-in-wi-fi-router/", "creation_timestamp": "2025-05-12T22:29:01.000000Z"}, {"uuid": "b7565db5-8b97-47a5-a017-004d29b4f69c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28057", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16146", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28057\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.\n\ud83d\udccf Published: 2025-05-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T15:08:50.707Z\n\ud83d\udd17 References:\n1. https://github.com/slowlyo/owl-admin/issues/182\n2. https://gist.github.com/LTLTLXEY/8f8ea23290f45fbc5cb2191a39cc74e8", "creation_timestamp": "2025-05-13T15:31:20.000000Z"}, {"uuid": "b4c0ef76-03db-410c-a387-16bc31700c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28062", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16211", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28062\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3. The vulnerability allows an attacker to perform unauthorized actions such as user deletion, password resets, and privilege escalation due to missing CSRF protections.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T19:10:01.268Z\n\ud83d\udd17 References:\n1. https://github.com/frappe/erpnext\n2. https://github.com/Thvt0ne/CVE-2025-28062", "creation_timestamp": "2025-05-13T19:31:08.000000Z"}, {"uuid": "80825d40-825c-458d-abb3-1bb8be049b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28056", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28056\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.\n\ud83d\udccf Published: 2025-05-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T15:17:41.243Z\n\ud83d\udd17 References:\n1. https://github.com/getrebuild/rebuild/issues/866\n2. https://gist.github.com/LTLTLXEY/c34dc785fc24f4cbb026e2ef3d7660c4", "creation_timestamp": "2025-05-13T15:31:12.000000Z"}, {"uuid": "57063e90-2e14-46eb-9756-29fcb299b65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2875", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16295", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2875\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could\ncause a loss of confidentiality when an unauthenticated attacker manipulates controller\u2019s webserver URL to\naccess resources.\n\ud83d\udccf Published: 2025-05-14T08:46:19.416Z\n\ud83d\udccf Modified: 2025-05-14T08:46:19.416Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-133-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-133-01.pdf", "creation_timestamp": "2025-05-14T09:31:58.000000Z"}, {"uuid": "42b51639-5591-43fb-bcd8-fa1d82051c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28993", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19712", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28993\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Jose Content No Cache allows Code Injection. This issue affects Content No Cache: from n/a through 0.1.3.\n\ud83d\udccf Published: 2025-06-27T11:52:40.573Z\n\ud83d\udccf Modified: 2025-06-27T13:42:07.182Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/content-no-cache/vulnerability/wordpress-content-no-cache-plugin-0-1-3-arbitrary-function-call-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T13:50:48.000000Z"}, {"uuid": "0ef719b9-0728-4619-bd83-9e72849a78b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28988", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28988\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aharonyan WP Front User Submit / Front Editor allows Reflected XSS. This issue affects WP Front User Submit / Front Editor: from n/a through 4.9.3.\n\ud83d\udccf Published: 2025-06-27T11:52:41.821Z\n\ud83d\udccf Modified: 2025-06-27T13:41:58.140Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/front-editor/vulnerability/wordpress-wp-front-user-submit-front-editor-plugin-4-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-27T13:50:48.000000Z"}, {"uuid": "2715f7c1-9d1f-46a6-b03c-db33b7e65c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2895", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19931", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2895\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.\n\ud83d\udccf Published: 2025-06-30T14:39:43.041Z\n\ud83d\udccf Modified: 2025-06-30T14:59:26.584Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7237164", "creation_timestamp": "2025-06-30T15:06:00.000000Z"}, {"uuid": "f05a5309-ef07-4616-812c-ee8ff6c6c87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2892", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2892\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The All in One SEO \u2013 Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post Meta Description and Canonical URL parameters in all versions up to, and including, 4.8.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-19T04:21:41.468Z\n\ud83d\udccf Modified: 2025-05-19T04:21:41.468Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7fd5d31d-a4f3-458a-b457-f20aeaa71749?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3289874/", "creation_timestamp": "2025-05-19T04:38:10.000000Z"}, {"uuid": "c05d3cba-105e-47b0-9f02-7059d147de17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2853", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2853\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of proper validation in GitLab could allow an authenticated user to cause a denial of service condition.\n\ud83d\udccf Published: 2025-05-22T13:30:48.335Z\n\ud83d\udccf Modified: 2025-05-22T13:30:48.335Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/527218\n2. https://hackerone.com/reports/3015673", "creation_timestamp": "2025-05-22T13:44:19.000000Z"}, {"uuid": "7184c450-273a-4445-a9ac-dad99990821a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2884", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18084", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2884\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata 1.83 and advisory VRT0009 of TCG standard TPM2.0\n\ud83d\udccf Published: 2025-06-10T17:29:19.463Z\n\ud83d\udccf Modified: 2025-06-11T15:06:32.714Z\n\ud83d\udd17 References:\n1. https://trustedcomputinggroup.org/about/security/\n2. https://trustedcomputinggroup.org/wp-content/uploads/TPM2.0-Library-Spec-v1.83-Errata_v1_pub.pdf\n3. https://trustedcomputinggroup.org/wp-content/uploads/VRT0009-Advisory-FINAL.pdf", "creation_timestamp": "2025-06-11T15:32:04.000000Z"}, {"uuid": "15f4838e-425b-4153-8667-5e0c385938fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28388", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18313", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28388\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OpenC3 COSMOS v6.0.0 was discovered to contain hardcoded credentials for the Service Account.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T15:50:41.594Z\n\ud83d\udd17 References:\n1. https://openc3.com/\n2. https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/", "creation_timestamp": "2025-06-13T16:37:18.000000Z"}, {"uuid": "fef26152-ad8b-4715-9462-928cc955b185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28389", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28389\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T15:46:51.750Z\n\ud83d\udd17 References:\n1. https://openc3.com/\n2. https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/", "creation_timestamp": "2025-06-13T16:37:22.000000Z"}, {"uuid": "7975adbb-f2ad-44e7-bf9e-be2b0959a5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28380", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28380\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T13:19:21.994Z\n\ud83d\udd17 References:\n1. https://openc3.com/\n2. https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/", "creation_timestamp": "2025-06-13T13:33:40.000000Z"}, {"uuid": "a4cadfa3-9328-4fce-bd01-baea7adca4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28381", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18309", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-28381\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A credential leak in OpenC3 COSMOS v6.0.0 allows attackers to access service credentials as environment variables stored in all containers.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T16:07:40.511Z\n\ud83d\udd17 References:\n1. https://openc3.com/\n2. https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/", "creation_timestamp": "2025-06-13T16:37:14.000000Z"}, {"uuid": "227f7862-3de1-46f0-8299-49f548896e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2828", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2828\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does not enforce restrictions on requests to remote internet addresses, allowing it to also access local addresses. As a result, an attacker could exploit this flaw to perform port scans, access local services, retrieve instance metadata from cloud environments (e.g., Azure, AWS), and interact with servers on the local network. This issue has been fixed in version 0.0.28.\n\ud83d\udccf Published: 2025-06-23T20:42:28.639Z\n\ud83d\udccf Modified: 2025-06-24T13:32:19.925Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/8f771040-7f34-420a-b96b-5b93d4a99afc\n2. https://github.com/langchain-ai/langchain/commit/e188d4ecb085d4561a0be3c583d26aa9c2c3283f", "creation_timestamp": "2025-06-24T13:50:39.000000Z"}, {"uuid": "34c62a76-35b3-45bd-855d-581ff020c2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/30249", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploit for CVE-2025-2825\nURL\uff1ahttps://github.com/lkmn1/CVE-2025-2825-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-07T03:06:22.000000Z"}, {"uuid": "eb30c3a6-5f47-4ee7-823b-74ac8682d432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44948", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAuthentication Bypass PoC for CVE-2025-2825 \u2013 Exploiting CrushFTP 10.x\nURL\uff1ahttps://github.com/Shivshantp/CVE-2025-2825-CrushFTP-AuthBypass\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-22T10:47:32.000000Z"}, {"uuid": "8e28420b-35f8-4c8c-bfac-55d33c37c41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28009", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/32360", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aSQL Injection in Dietiqa App v1.0.20 (CVE-2025-28009) \u2013 Unauthenticated remote data access via vulnerable parameter.\nURL\uff1ahttps://github.com/beardenx/CVE-2025-28009\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-17T01:57:34.000000Z"}, {"uuid": "8ecf719a-c550-413e-b3bd-e1115fde6e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/28934", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\u5173\u4e8e CVE-2025-2825\u7684\u4e00\u4e9b\u540e\u5229\u7528\u7814\u7a76\nURL\uff1ahttps://github.com/h0ld1rs/CVE-2025-2825\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-02T08:30:09.000000Z"}, {"uuid": "181ed396-1bff-4b24-b83c-e11a7fd0d1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/34014", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aOfficial Nuclei template for CVE-2025-31161 (formerly CVE-2025-2825)\nURL\uff1ahttps://github.com/SUPRAAA-1337/Nuclei_CVE-2025-31161_CVE-2025-2825\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-24T10:29:46.000000Z"}, {"uuid": "9a4e7214-f268-48f1-858a-a443bcc5f6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/31083", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aShattered is a tool and POC for the new CrushedFTP vulns, CVE Exploit Script: CVE-2025-2825 vs CVE-2025-31161\nURL\uff1ahttps://github.com/ghostsec420/ShatteredFTP\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-11T10:55:33.000000Z"}, {"uuid": "4d34954f-416a-46c0-9064-91e71eff53a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2812", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/36514", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-2812 SQL Injection\nURL\uff1ahttps://github.com/sahici/CVE-2025-2812\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-12T13:05:41.000000Z"}, {"uuid": "f1f1db31-623e-40f0-b831-55c76bbdf732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38432", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAdvanced AI-Powered Exploitation Framework  |  CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397  |  \nURL\uff1ahttps://github.com/Leviticus-Triage/ChromSploit-Framework\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-28T14:37:55.000000Z"}, {"uuid": "c9fb7e3c-cc8e-4735-a01e-828348b63170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/158", "content": "\u26a0\ufe0f CVE-2025-2825: CrushFTP Authentication Bypass \u26a0\ufe0f\n\n\ud83d\udea8 Vulnerability: Authentication bypass in CrushFTP\n\ud83d\udccc Risk Level: Critical\n\ud83d\udcca Affected Instances: 234K+ results found on FOFA\n\n\ud83d\udd0e Technical Analysis & PoC:\n\ud83d\udd25 Deep Dive: ProjectDiscovery Blog\n\ud83d\udcdc PoC & Exploit: GitHub PoC\n\ud83d\udd16 Exploit & Nuclei Template: SecurityOnline\n\n\ud83d\udd17 Search Queries for Detection:\nFOFA Query: app=\"CrushFTP\"\nFOFA Results: View Here\n\n\ud83d\udee1 Mitigation Steps:\n\u2705 Update to the latest secured version of CrushFTP\n\u2705 Restrict access to admin panels\n\u2705 Monitor for unusual login attempts\n\n\ud83d\udd17 Stay ahead in cybersecurity: @cybersecplayground\n\n#OSINT #FOFA #CyberSecurity #BugBounty #CVE #EthicalHacking", "creation_timestamp": "2025-04-02T07:09:48.000000Z"}, {"uuid": "6ca05878-dea0-4d76-a940-9f44bb35d398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/452", "content": "Top Security News for Today\n\nJapan Passes Active Cyber Defense Bill  \nhttps://www.tripwire.com/state-of-security/japan-passes-active-cyber-defense-bill\n\nTop Cybersecurity Considerations When Moving Commercial Premises  \nhttps://www.tripwire.com/state-of-security/top-cybersecurity-considerations-when-moving-commercial-premises\n\nReforging Sliver: How Simple Code Edits Can Outmaneuver EDR  \nhttps://www.reddit.com/r/netsec/comments/1joqvup/reforging_sliver_how_simple_code_edits_can/\n\nHarnessing the Power of Named Pipes  \nhttps://www.reddit.com/r/netsec/comments/1jor8nr/harnessing_the_power_of_named_pipes/\n\nCrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog  \nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/\n\nCell Phone OPSEC for Border Crossings  \nhttps://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html\n\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1jos2z2/xss_to_rce_by_abusing_custom_file_handlers/\n\nWhen Parameterization Fails: SQL Injection in Nim's db_postgres Module Using Parameterized Queries  \nhttps://www.reddit.com/r/netsec/comments/1joth41/when_parameterization_fails_sql_injection_in_nims/\n\nTransforming Public Sector Security Operations in the AI Era  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/01/transforming-public-sector-security-operations-in-the-ai-era/\n\nImproved Detection Signature for the K8s IngressNightmare Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1jp9cmt/improved_detection_signature_for_the_k8s/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-04-02T09:30:37.000000Z"}, {"uuid": "e1b0bd00-0307-49d2-92ae-2cbaf36e8161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_News/2490", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-2825: Unauthenticated HTTP(S) port access on CrushFTPv10/v11\nLink: https://darkwebinformer.com/cve-2025-2825-unauthenticated-http-s-port-access-on-crushftpv10-v11/", "creation_timestamp": "2025-03-26T18:05:31.000000Z"}, {"uuid": "4f8627e6-bc29-4ded-a094-d35d61aabbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "Telegram/n1xxTDW4DKAqfoFBBrei6KNyXkL9LVReMZ-BWNrHaTz0OZY", "content": "", "creation_timestamp": "2025-07-22T15:00:06.000000Z"}, {"uuid": "7bebf93e-e3cb-40d9-8f5f-84d0704d6632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "Telegram/DRH-CbZo7gKaJp6e4sRAX_WtNevOE1gzfcn9exSBM5ol164", "content": "", "creation_timestamp": "2025-07-23T03:00:11.000000Z"}, {"uuid": "d9b369c0-5c7d-4551-b01a-2f94f3cf83fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/itsec_news/5646", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u0447\u0435\u043c\u0443 Firefox \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u2014 \u0438 \u043f\u0440\u0438 \u0447\u0451\u043c \u0442\u0443\u0442 \u0432\u0437\u043b\u043e\u043c Chrome\n\n\ud83d\udcacMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e \u0442\u043e\u0439, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-2857 \u0438 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mozilla, \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b Firefox \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Google \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0444\u0430\u043a\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430 \u0432 Chrome \u2014 CVE-2025-2783 \u2014 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0412 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u2014 \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e, \u043e\u0431\u0445\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u0443 Chrome \u0442\u0430\u043a, \u043a\u0430\u043a \u0431\u0443\u0434\u0442\u043e \u0435\u0451 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0432\u043e\u0432\u0441\u0435.\n\n\u041f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 \u2014 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u0447\u0430\u0441\u0442\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0441\u0441\u0438\u043b\u044c\u043d\u0430. \u0421\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u043e\u044f\u0442 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0445\u043e\u0442\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0441\u0442\u0440\u0430\u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e.\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e CVE-2025-2783 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435\u0441\u0443\u0442 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440.\n\n\u042d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 CVE-2024-9680. \u0422\u043e\u0433\u0434\u0430 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u044f\u043c\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430, \u043f\u0440\u0438\u0447\u0451\u043c \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u044f\u043c\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-29T06:07:38.000000Z"}, {"uuid": "6cf5e4d9-b279-4f8b-9808-1bca795ec433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "https://t.me/itsec_news/5754", "content": "\u200b\u26a1\ufe0f\u0411\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b CrushFTP\n\n\ud83d\udcac \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 CrushFTP, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0430 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u0432 \u0440\u0435\u0435\u0441\u0442\u0440 KEV. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-31161 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u2014 9.8. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c HTTP-\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043c\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u00abcrushadmin\u00bb, \u0438 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u0430\u043a \u044d\u0442\u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0448\u043b\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 10.8.4 \u0438 11.3.1 .\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0441\u043b\u043e\u0436\u043d\u0438\u043b\u0430\u0441\u044c: \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043d\u043e \u0438 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0418\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e VulnCheck \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u043e\u043c \u043f\u043e \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0438\u044e CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a CVE-2025-2825 , \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 MITRE \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u0437\u0434\u043d\u0435\u0435, 27 \u043c\u0430\u0440\u0442\u0430, \u0441 \u043d\u043e\u0432\u044b\u043c \u043d\u043e\u043c\u0435\u0440\u043e\u043c \u2014 CVE-2025-31161 . \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0439 CVE \u0431\u044b\u043b \u043f\u0440\u0438\u0437\u043d\u0430\u043d \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442 \u043c\u0435\u0436\u0434\u0443 VulnCheck, MITRE \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c CrushFTP.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Outpost24, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435, \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 CVE \u0431\u044b\u043b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 MITRE \u0435\u0449\u0451 13 \u043c\u0430\u0440\u0442\u0430. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0430\u0447\u0430\u043b \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e 90-\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c VulnCheck, \u043d\u0435 \u0434\u043e\u0436\u0434\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043d\u0438 CrushFTP, \u043d\u0438 Outpost24.\n\n\u041f\u043e\u0437\u0434\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 VulnCheck \u043e\u0431\u0432\u0438\u043d\u0438\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u0441\u043b\u0430\u0432\u0448\u0438\u0441\u044c \u043d\u0430 \u0438\u0445 \u043f\u0440\u043e\u0441\u044c\u0431\u0443 \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c CVE \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 90 \u0434\u043d\u0435\u0439. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c MITRE \u043e\u0431\u0432\u0438\u043d\u0438\u043b\u0438 \u0432 \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043d\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0439\u0442\u0438 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443. \u0425\u043e\u0442\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e, \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u044b \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Huntress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 Proof-of-Concept, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 3 \u0430\u043f\u0440\u0435\u043b\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0435\u0441\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043d\u0430\u0447\u0430\u0442\u044c\u0441\u044f \u0435\u0449\u0451 30 \u043c\u0430\u0440\u0442\u0430. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0438\u0437 \u0441\u0444\u0435\u0440 \u043c\u0430\u0440\u043a\u0435\u0442\u0438\u043d\u0433\u0430, \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u0443\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u043e\u0432. \u0422\u0440\u0438 \u0438\u0437 \u044d\u0442\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438 \u0442\u0435\u043c \u0436\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 (MSP).\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AnyDesk \u0438 MeshAgent, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0431\u044b\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u00abd3d11.dll\u00bb \u2014 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TgBot. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Telegram-\u0431\u043e\u0442\u0430 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 6 \u0430\u043f\u0440\u0435\u043b\u044f \u0432 \u043c\u0438\u0440\u0435 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f 815 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 CrushFTP, \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0418\u0437 \u043d\u0438\u0445 487 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435, \u0430 250 \u2014 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CISA \u043e\u0431\u044f\u0437\u0430\u043b\u0430 \u0432\u0441\u0435 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0421\u0428\u0410 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 28 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-09T10:17:23.000000Z"}, {"uuid": "ed9fd0d0-491e-4e4a-896a-695964262edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/cyberbannews_ir/16130", "content": "\ud83e\ude99 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0646 \u0646\u0642\u0635 \u0645\u0634\u0627\u0628\u0647 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u06a9\u0631\u0648\u0645 \u062a\u0648\u0633\u0637 \u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633\n\n\ud83d\udd3a\u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633 \u06a9\u0647 \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 CVE-2025-2857 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u06cc\u0632\u0648\u0644\u0647\u200c\u0633\u0627\u0632\u06cc (Sandbox) \u0645\u0631\u0648\u0631\u06af\u0631 \u0639\u0628\u0648\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u062a\u0631\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd3b\u0628\u0631 \u0627\u0633\u0627\u0633 \u0627\u0639\u0644\u0627\u0645 \u0645\u0648\u0632\u06cc\u0644\u0627\u060c \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062a\u0646\u0647\u0627 \u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633 \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0634\u0648\u0627\u0647\u062f\u06cc \u0645\u0628\u0646\u06cc \u0628\u0631 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646 \u062f\u0631 \u0641\u0636\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f.\n\n\u2764\ufe0f \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644 \n\n#\u0627\u06cc\u0646\u062a\u0631\u0646\u062a #\u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633 #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u06af\u0648\u06af\u0644\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2025-03-29T12:42:49.000000Z"}, {"uuid": "d13712d9-2782-4a5e-b082-2ce8def1ef23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28371", "type": "seen", "source": "https://t.me/ViralCyber/13528", "content": "\ud83d\udd34 \u062a\u0647\u062f\u06cc\u062f \u062c\u062f\u06cc\u062f \u062f\u0631 \u067e\u0631\u062f\u0627\u0632\u0634 \u062a\u0635\u0648\u06cc\u0631 ChatGPT\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u067e\u0631\u062f\u0627\u0632\u0634 \u062a\u0635\u0648\u06cc\u0631 ChatGPT \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u0635\u0627\u0648\u06cc\u0631 \u0645\u062e\u0631\u0628 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635\u060c \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-28371\u060c \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0635\u06cc \u0627\u0632 \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u0632\u0628\u0627\u0646\u06cc \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 (LLMs) OpenAI \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632\u060c \u0633\u0631\u0642\u062a \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u06cc\u0627 \u062d\u062a\u06cc \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0645\u0646\u062c\u0631 \u0634\u0648\u062f. \u0627\u06cc\u0646 \u062a\u0647\u062f\u06cc\u062f \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 ChatGPT \u062f\u0631 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u0646\u06af\u0631\u0627\u0646\u200c\u06a9\u0646\u0646\u062f\u0647 \u0627\u0633\u062a.\n\n\u062c\u0632\u0626\u06cc\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0686\u06cc\u0633\u062a\u061f\n\u0634\u0646\u0627\u0633\u0647: CVE-2025-28371\n\n\u0646\u0648\u0639 \u062a\u0647\u062f\u06cc\u062f: \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (Remote Code Execution - RCE)\n\n\u0634\u062f\u062a \u062e\u0637\u0631: \u0628\u062d\u0631\u0627\u0646\u06cc (\u0627\u0645\u062a\u06cc\u0627\u0632 CVSS: 9.1)\n\n\u062a\u0623\u062b\u06cc\u0631: \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u062a\u0635\u0627\u0648\u06cc\u0631 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u062d\u0627\u0648\u06cc \u06a9\u062f \u0645\u062e\u0631\u0628\u060c \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u067e\u0631\u062f\u0627\u0632\u0634 \u062a\u0635\u0648\u06cc\u0631 ChatGPT \u0631\u0627 \u0641\u0631\u06cc\u0628 \u062f\u0647\u0646\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0631\u0627 \u0634\u0648\u0646\u062f.\n\n\u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631: \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc ChatGPT \u0628\u0627 \u0642\u0627\u0628\u0644\u06cc\u062a \u067e\u0631\u062f\u0627\u0632\u0634 \u062a\u0635\u0648\u06cc\u0631\u060c \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc \u0627\u0628\u0631\u06cc \u0648 API\u200c\u0647\u0627\u06cc \u06cc\u06a9\u067e\u0627\u0631\u0686\u0647\u200c\u0634\u062f\u0647 \u0628\u0627 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0634\u062e\u0635 \u062b\u0627\u0644\u062b.\n\n\n\u0645\u0637\u0627\u0644\u0639\u0647 \u06a9\u0627\u0645\u0644 \u062e\u0628\u0631 \ud83d\udc49\n\n\ud83c\udd94 @TakianCo\n\ud83c\uddee\ud83c\uddf7", "creation_timestamp": "2025-05-20T07:47:22.000000Z"}, {"uuid": "95d51baa-e55d-476a-9341-f3b5f46ba3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28231", "type": "seen", "source": "https://t.me/cvedetector/23338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28231 - Itel Electronics IP Stream Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28231 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:41.000000Z"}, {"uuid": "09eca25d-7661-4dea-95c7-fb440c6fdf61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28238", "type": "seen", "source": "https://t.me/cvedetector/23335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28238 - Elber REBLE310 Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28238 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:39.000000Z"}, {"uuid": "a8b7f752-a20b-44bb-8b37-86ad85475cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28237", "type": "seen", "source": "https://t.me/cvedetector/23334", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28237 - WorldCast Systems ECRESO FM/DAB/TV Transmitter Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28237 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges via a crafted JSON payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:35.000000Z"}, {"uuid": "35f8f954-a204-4c28-8710-1a375924f838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28235", "type": "seen", "source": "https://t.me/cvedetector/23337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28235 - Soundcraft Ui Series Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-28235 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:40.000000Z"}, {"uuid": "6f79aceb-a786-48f5-acb4-31051a674a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28233", "type": "seen", "source": "https://t.me/cvedetector/23336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28233 - BW Broadcast TX600/150/1000/30/50 Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28233 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:39.000000Z"}, {"uuid": "b1cf8b67-6a11-48b4-9023-543c1249f68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28074", "type": "seen", "source": "https://t.me/cvedetector/24857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28074 - phpList XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2025-28074 \nPublished : May 8, 2025, 9:15 p.m. | 17\u00a0minutes ago \nDescription : phpList prior to 3.6.3 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploitable when the application dynamically references internal paths and processes untrusted input without escaping, allowing an attacker to inject malicious JavaScript. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:50.000000Z"}, {"uuid": "3b1c4ab0-4734-43c0-95ee-30038192918f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28101", "type": "seen", "source": "https://t.me/cvedetector/23269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28101 - FlaskBlog File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28101 \nPublished : April 17, 2025, 6:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog v2.6.1 allows attackers to delete article titles created by other users via supplying a crafted POST request. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T23:01:08.000000Z"}, {"uuid": "e6363ed7-4e3b-429c-9d11-3f4ff71a436e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28009", "type": "seen", "source": "https://t.me/cvedetector/23268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28009 - Dietiqa App SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28009 \nPublished : April 17, 2025, 6:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T23:01:04.000000Z"}, {"uuid": "076e58db-d831-40b6-a50a-e38dc81dbb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28055", "type": "seen", "source": "https://t.me/cvedetector/25210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28055 - GalWeb Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28055 \nPublished : May 13, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:43:55.000000Z"}, {"uuid": "850852d3-8576-4b5c-8957-e1f20f09ed38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28056", "type": "seen", "source": "https://t.me/cvedetector/25208", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28056 - Apache Rebuild SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28056 \nPublished : May 13, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:43:50.000000Z"}, {"uuid": "5af1ec68-895a-452f-a1d5-ac2af1fdae79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2806", "type": "seen", "source": "https://t.me/cvedetector/24821", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2806 - TagDiv Composer WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-2806 \nPublished : May 8, 2025, 12:15 p.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the \u2018data\u2019 parameter in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T15:56:39.000000Z"}, {"uuid": "65bb6d8b-e14c-4c41-8181-d98bcc9979b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28200", "type": "seen", "source": "https://t.me/cvedetector/24968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28200 - Victure RX1800 Default Password Weakness\", \n  \"Content\": \"CVE ID : CVE-2025-28200 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:38.000000Z"}, {"uuid": "a5dccb94-f676-4355-869d-394f9f716000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28203", "type": "seen", "source": "https://t.me/cvedetector/24966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28203 - Victure RX1800 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28203 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:33.000000Z"}, {"uuid": "d837e4cc-0e7e-4a02-8bae-19977a0ff659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28202", "type": "seen", "source": "https://t.me/cvedetector/24965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28202 - Victure RX1800 SSH/Telnet Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28202 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH and Telnet services without authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:32.000000Z"}, {"uuid": "994056ed-78d1-49cb-808c-89e9da0b58a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28201", "type": "seen", "source": "https://t.me/cvedetector/24964", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28201 - Victure RX1800 Root RCE\", \n  \"Content\": \"CVE ID : CVE-2025-28201 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain root access. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:32.000000Z"}, {"uuid": "ab4ebb7a-cca9-4492-9bd1-a4db39e442f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28073", "type": "seen", "source": "https://t.me/cvedetector/24870", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28073 - phpList Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28073 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : phpList 3.6.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:19:06.000000Z"}, {"uuid": "9636b4fa-9530-4d38-9fcf-c5527ed31b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28128", "type": "seen", "source": "https://t.me/cvedetector/23780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28128 - Mytel Telecom Online Account System Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-28128 \nPublished : April 25, 2025, 8:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T23:22:01.000000Z"}, {"uuid": "e032909e-a3fc-486f-8067-756d05bf3643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2850", "type": "seen", "source": "https://t.me/cvedetector/23804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2850 - \"GL.iNet Router Unauthorized Download Interface Processing Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2850 \nPublished : April 26, 2025, 8:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been rated as problematic. This issue affects some unknown processing of the component Download Interface. The manipulation leads to improper authorization. It is recommended to upgrade the affected component. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T11:54:14.000000Z"}, {"uuid": "e53fec6a-abb3-4c2b-b737-ead9c81e740a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2811", "type": "seen", "source": "https://t.me/cvedetector/23793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2811 - \"GL.iNet Router Regular Expression Complexity Inefficient Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2811 \nPublished : April 26, 2025, 7:15 a.m. | 20\u00a0minutes ago \nDescription : A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been declared as problematic. This vulnerability affects unknown code of the component API. The manipulation leads to inefficient regular expression complexity. It is recommended to upgrade the affected component. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T10:13:46.000000Z"}, {"uuid": "7aa6c4ee-2513-4e6f-8117-85096fa49953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2866", "type": "seen", "source": "https://t.me/cvedetector/23858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2866 - LibreOffice PDF Signature Spoofing\", \n  \"Content\": \"CVE ID : CVE-2025-2866 \nPublished : April 27, 2025, 7:15 p.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation.  \n  \n  \n  \n  \nIn the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid  \n  \n  \n  \n  \nThis issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T23:00:35.000000Z"}, {"uuid": "c173d567-c20c-4280-983b-0424284faf66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2801", "type": "seen", "source": "https://t.me/cvedetector/23792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2801 - WordPress Create Custom Forms Plugin Arbitrary Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2801 \nPublished : April 26, 2025, 4:15 a.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T07:43:24.000000Z"}, {"uuid": "94dff8bb-7100-4689-b0c3-ad5c5158282c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2851", "type": "seen", "source": "https://t.me/cvedetector/23803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2851 - GL.iNet RPC Handler Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-2851 \nPublished : April 26, 2025, 8:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T11:54:14.000000Z"}, {"uuid": "ae727bd1-798d-4c04-a515-7b63f684ff2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28036", "type": "seen", "source": "https://t.me/cvedetector/23558", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28036 - TOTOLINK A950RG Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28036 \nPublished : April 22, 2025, 6:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T22:35:39.000000Z"}, {"uuid": "cb0c008b-b9b3-446d-84d7-5daaea8817c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28354", "type": "seen", "source": "https://t.me/cvedetector/23754", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28354 - Entrust Corp Printer Manager Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2025-28354 \nPublished : April 25, 2025, 2:15 p.m. | 43\u00a0minutes ago \nDescription : An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers to execute a directory traversal via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T17:30:46.000000Z"}, {"uuid": "2f84e612-5ce2-4b51-87f0-d4968c8fb3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28169", "type": "seen", "source": "https://t.me/cvedetector/23622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28169 - BYD QIN PLUS DM-i Dilink OS Unencrypted Broadcast Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28169 \nPublished : April 23, 2025, 8:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers to execute a man-in-the-middle attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T00:31:15.000000Z"}, {"uuid": "ef88ff5a-be59-426b-8ce4-455387607e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28021", "type": "seen", "source": "https://t.me/cvedetector/23614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28021 - TOTOLINK A810R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28021 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:36.000000Z"}, {"uuid": "5ffe664e-e261-42e0-b044-3c85f0bfb5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28020", "type": "seen", "source": "https://t.me/cvedetector/23615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28020 - TOTOLINK A800R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28020 \nPublished : April 23, 2025, 5:16 p.m. | 59\u00a0minutes ago \nDescription : TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T21:10:37.000000Z"}, {"uuid": "8b5edadf-7211-44ed-95f8-c07a173e2b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28034", "type": "seen", "source": "https://t.me/cvedetector/23523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28034 - TOTOLINK Router Pre-Auth Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28034 \nPublished : April 22, 2025, 2:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T18:24:18.000000Z"}, {"uuid": "d13150ee-132b-4d82-8ac7-c8983f451f0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28024", "type": "seen", "source": "https://t.me/cvedetector/23538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28024 - TOTOLINK A810R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28024 \nPublished : April 22, 2025, 4:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T20:54:57.000000Z"}, {"uuid": "1bbcf17f-8837-4c75-a691-6910def7ba92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28355", "type": "seen", "source": "https://t.me/cvedetector/23351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28355 - Volmarg Personal Management System CSRF Attack\", \n  \"Content\": \"CVE ID : CVE-2025-28355 \nPublished : April 18, 2025, 7:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T23:16:15.000000Z"}, {"uuid": "69943a93-4334-4116-b61e-022d9fe3a5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28037", "type": "seen", "source": "https://t.me/cvedetector/23532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28037 - TOTOLINK A810R/A950RG Remote Command Execution\", \n  \"Content\": \"CVE ID : CVE-2025-28037 \nPublished : April 22, 2025, 4:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T20:54:50.000000Z"}, {"uuid": "c4c207ca-1750-4624-b6bf-4ea7df453524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28197", "type": "seen", "source": "https://t.me/cvedetector/23345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28197 - Crawl4AI SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-28197 \nPublished : April 18, 2025, 8:15 p.m. | 29\u00a0minutes ago \nDescription : Crawl4AI <=0.4.247\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T23:16:08.000000Z"}, {"uuid": "faf6e712-7981-4f2f-b7ad-1636d2e25fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28031", "type": "seen", "source": "https://t.me/cvedetector/23531", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28031 - TOTOLINK A810R Hardcoded Telnet Password\", \n  \"Content\": \"CVE ID : CVE-2025-28031 \nPublished : April 22, 2025, 4:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T20:54:46.000000Z"}, {"uuid": "0ee955f9-ffd7-43ad-8e7e-0e7d279644c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28030", "type": "seen", "source": "https://t.me/cvedetector/23530", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28030 - TOTOLINK A810R Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28030 \nPublished : April 22, 2025, 4:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T20:54:45.000000Z"}, {"uuid": "45713c40-bde4-4019-a91c-be8a70ffb8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28033", "type": "seen", "source": "https://t.me/cvedetector/23522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28033 - Totolink Router Pre-Auth Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28033 \nPublished : April 22, 2025, 2:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T18:24:17.000000Z"}, {"uuid": "644eecd0-630a-451d-9054-3d8f5c9ced00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28032", "type": "seen", "source": "https://t.me/cvedetector/23521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28032 - TOTOLINK Router Pre-Auth Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28032 \nPublished : April 22, 2025, 2:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T18:24:13.000000Z"}, {"uuid": "e74f3e4e-e894-4eef-a730-b0a11e61b6f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2839", "type": "seen", "source": "https://t.me/cvedetector/23485", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2839 - WordPress WP Import Export Lite Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2839 \nPublished : April 22, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018wpiePreviewData\u2019 function in all versions up to, and including, 3.9.27 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T10:02:36.000000Z"}, {"uuid": "063e64db-482a-49d2-9edd-f025caa34de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28121", "type": "seen", "source": "https://t.me/cvedetector/23441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28121 - Code-Projects Online Exam Mastering System XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28121 \nPublished : April 21, 2025, 3:15 p.m. | 26\u00a0minutes ago \nDescription : code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the \"q\" parameter allowing remote attackers to execute arbitrary code. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T18:09:15.000000Z"}, {"uuid": "d8542a14-8106-4373-b5c0-1905c30649f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28104", "type": "seen", "source": "https://t.me/cvedetector/23459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28104 - LaskBlog Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-28104 \nPublished : April 21, 2025, 6:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T22:20:11.000000Z"}, {"uuid": "940fc741-73c0-464e-97d4-0e45cfd46aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28103", "type": "seen", "source": "https://t.me/cvedetector/23458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28103 - LaskBlog Arbitrary Account Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28103 \nPublished : April 21, 2025, 6:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T22:20:11.000000Z"}, {"uuid": "07821ff0-9c94-4ad2-b98a-197430f8bc96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "seen", "source": "https://t.me/cvedetector/23453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28367 - MojoPortal Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28367 \nPublished : April 21, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : mojoPortal <=2.9.0.1\nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T19:49:41.000000Z"}, {"uuid": "2998bc74-b042-497a-ad6e-11f2ed766585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28099", "type": "seen", "source": "https://t.me/cvedetector/23450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28099 - Opencms Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28099 \nPublished : April 21, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp, \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T19:49:35.000000Z"}, {"uuid": "e49eab15-d44d-4648-9181-0d0e2850b929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28102", "type": "seen", "source": "https://t.me/cvedetector/23449", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28102 - FlaskBlog XSS\", \n  \"Content\": \"CVE ID : CVE-2025-28102 \nPublished : April 21, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parameter at /createpost. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T19:49:34.000000Z"}, {"uuid": "9194bd77-7139-423f-8c67-24ba56456aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28059", "type": "seen", "source": "https://t.me/cvedetector/23340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28059 - Nagios Network Analyzer Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28059 \nPublished : April 18, 2025, 5:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke associated API tokens, enabling unauthorized access to restricted functions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:45.000000Z"}, {"uuid": "781e41f1-4acc-4555-a5bb-f8e58b9b24ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28145", "type": "seen", "source": "https://t.me/cvedetector/22978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28145 - Edimax Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28145 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:22.000000Z"}, {"uuid": "d53bb27f-f39a-471e-965d-9e373cb2c18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28144", "type": "seen", "source": "https://t.me/cvedetector/22977", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28144 - Edimax BR-6478AC Router Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28144 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:21.000000Z"}, {"uuid": "00754177-d108-4eab-9247-734c255cc5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28143", "type": "seen", "source": "https://t.me/cvedetector/22976", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28143 - Edimax Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28143 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:18.000000Z"}, {"uuid": "4d2b2a2d-7d18-48ef-ade1-cb1d23f0f35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28142", "type": "seen", "source": "https://t.me/cvedetector/22975", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28142 - Edimax Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28142 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:17.000000Z"}, {"uuid": "6cd0e293-61f8-4696-9115-f96f5b09d07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28399", "type": "seen", "source": "https://t.me/cvedetector/22998", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28399 - Erick xmall Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28399 \nPublished : April 15, 2025, 7:16 p.m. | 56\u00a0minutes ago \nDescription : An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T22:28:04.000000Z"}, {"uuid": "0c07e778-8b15-4352-81d5-88b9fb31e305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28100", "type": "seen", "source": "https://t.me/cvedetector/22987", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28100 - DingfanzuCMS SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-28100 \nPublished : April 15, 2025, 6:15 p.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the \"operateOrder.php\" id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T21:37:49.000000Z"}, {"uuid": "3bcdf5de-8077-40f4-8d66-b28e86013884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2830", "type": "seen", "source": "https://t.me/cvedetector/22980", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2830 - Thunderbird Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2830 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the victim's system. This vulnerability is not limited to Linux; similar behavior has been observed on Windows as well. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:24.000000Z"}, {"uuid": "3713f107-24d1-473b-b65e-bf47a9d7f865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28198", "type": "seen", "source": "https://t.me/cvedetector/22962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28198 - Hitout Car Sale SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28198 \nPublished : April 15, 2025, 4:16 p.m. | 1\u00a0hour ago \nDescription : A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:01.000000Z"}, {"uuid": "7264313f-3071-42cf-9322-39a6545fff61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28137", "type": "seen", "source": "https://t.me/cvedetector/22954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28137 - TOTOLINK A810R Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28137 \nPublished : April 15, 2025, 2:15 p.m. | 54\u00a0minutes ago \nDescription : The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T17:26:32.000000Z"}, {"uuid": "c4573fb7-dce1-4901-afcf-3d8f63ad4188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28136", "type": "seen", "source": "https://t.me/cvedetector/22953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28136 - TOTOLINK A800R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28136 \nPublished : April 15, 2025, 2:15 p.m. | 54\u00a0minutes ago \nDescription : TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T17:26:32.000000Z"}, {"uuid": "94e7d429-0b85-481d-8301-e2bf2dbca2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2816", "type": "seen", "source": "https://t.me/cvedetector/24177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2816 - WordPress Page View Count Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2816 \nPublished : May 1, 2025, 3:15 a.m. | 55\u00a0minutes ago \nDescription : The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_message_dontshow() function in versions 2.8.0 to 2.8.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to one on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T06:28:13.000000Z"}, {"uuid": "5dfbb3f6-c6f0-49ec-9808-fe83fded861f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2890", "type": "seen", "source": "https://t.me/cvedetector/24075", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2890 - TagDiv Opt-In Builder WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-2890 \nPublished : April 30, 2025, 9:15 a.m. | 21\u00a0minutes ago \nDescription : The tagDiv Opt-In Builder plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018subscriptionCouponId\u2019 parameter in all versions up to, and including, 1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T12:03:34.000000Z"}, {"uuid": "7443a140-cf1b-4eeb-ab1b-dbe2ac7f3db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2893", "type": "seen", "source": "https://t.me/cvedetector/23983", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2893 - WordPress Gutenverse Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-2893 \nPublished : April 29, 2025, 7:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Gutenverse \u2013 Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T10:58:35.000000Z"}, {"uuid": "725edd1d-5f5e-40d9-99a0-57823c8ced45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "https://t.me/cvedetector/24008", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2817 - Mozilla Firefox System File Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-2817 \nPublished : April 29, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T16:49:55.000000Z"}, {"uuid": "6bab6aac-a321-49de-941f-aa5d27df32d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2807", "type": "seen", "source": "https://t.me/cvedetector/22437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2807 - Motor's Car Dealership & Classified Listings Plugin Unauthenticated Plugin Installation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2807 \nPublished : April 8, 2025, 10:15 a.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Motors \u2013 Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check in the mvl_setup_wizard_install_plugin() function in all versions up to, and including, 1.4.64. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T13:59:43.000000Z"}, {"uuid": "72df694f-96b5-4a81-a812-f3d61deb1f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28400", "type": "seen", "source": "https://t.me/cvedetector/22330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28400 - Apache Struts Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28400 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the postID parameter in the edit method \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:59.000000Z"}, {"uuid": "93e85cd5-4ce5-453c-836e-b2a58ebd530f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2882", "type": "seen", "source": "https://t.me/cvedetector/22427", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2882 - GreenPay by Green.Money Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-2882 \nPublished : April 8, 2025, 8:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between 3.0.0 and 3.0.9 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T11:29:14.000000Z"}, {"uuid": "80b9e609-1418-4338-9c24-b2055e34fa30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2876", "type": "seen", "source": "https://t.me/cvedetector/22454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2876 - MelaPress WordPress Unauthenticated User Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2876 \nPublished : April 8, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T15:40:23.000000Z"}, {"uuid": "d7014e9e-fdbf-4b09-bd67-00d79bb6e8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28411", "type": "seen", "source": "https://t.me/cvedetector/22321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28411 - RUoYi RCE\", \n  \"Content\": \"CVE ID : CVE-2025-28411 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:45.000000Z"}, {"uuid": "627c8cbc-9bba-46c0-9403-36102755be2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2808", "type": "seen", "source": "https://t.me/cvedetector/22436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2808 - Motors Car Dealership & Classified Listings Plugin Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-2808 \nPublished : April 8, 2025, 10:15 a.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Motors \u2013 Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Phone Number parameter in all versions up to, and including, 1.4.63 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T13:59:43.000000Z"}, {"uuid": "0928da39-d551-4861-ac53-c15f67b97736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2883", "type": "seen", "source": "https://t.me/cvedetector/22435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2883 - SagePay Payments Using Contact Form 7 WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-2883 \nPublished : April 8, 2025, 10:15 a.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T13:59:42.000000Z"}, {"uuid": "a3404d5f-0e08-445e-bb73-18860a3bebf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28405", "type": "seen", "source": "https://t.me/cvedetector/22331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28405 - RUoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28405 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the changeStatus method \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:45:00.000000Z"}, {"uuid": "b3cb7edc-2d0b-4464-87ec-2c73ba667eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28408", "type": "seen", "source": "https://t.me/cvedetector/22329", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28408 - RUoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28408 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/{deptId} endpoint does not properly validate the deptId parameter \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:55.000000Z"}, {"uuid": "3f07ac44-fd3d-4619-8782-db3315996634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28407", "type": "seen", "source": "https://t.me/cvedetector/22328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28407 - Apache RUoYi Unauthenticated Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28407 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endpoint does not properly validate whether the requesting user has permission to modify the specified dictId \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:54.000000Z"}, {"uuid": "873222fb-8a70-4ea0-b0d5-20f015d88513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28406", "type": "seen", "source": "https://t.me/cvedetector/22327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28406 - RUoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28406 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobLogId parameter \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:53.000000Z"}, {"uuid": "38aea967-11fe-413e-aac8-1e98c6826d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28403", "type": "seen", "source": "https://t.me/cvedetector/22326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28403 - RUoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28403 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method does not properly validate whether the requesting user has administrative privileges before allowing modifications to system configuration settings \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:53.000000Z"}, {"uuid": "c1c6171a-e355-47bf-8010-ee9d5ce0b556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28402", "type": "seen", "source": "https://t.me/cvedetector/22325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28402 - Ruyi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28402 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobId parameter \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:52.000000Z"}, {"uuid": "ccb33417-099f-4cd9-93b2-077be2f6eee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28401", "type": "seen", "source": "https://t.me/cvedetector/22324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28401 - \"RUoYi Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-28401 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:47.000000Z"}, {"uuid": "c7b82349-ac3d-4361-b553-6d71667e94b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28413", "type": "seen", "source": "https://t.me/cvedetector/22323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28413 - RUoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28413 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the SysDictTypeController component \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:46.000000Z"}, {"uuid": "0be20abe-66a9-4abd-bbad-738a78347f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28412", "type": "seen", "source": "https://t.me/cvedetector/22322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28412 - RUoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28412 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the /editSave method in SysNoticeController \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:46.000000Z"}, {"uuid": "31c53915-6ba9-4760-87b3-bd9a4e2f6617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28409", "type": "seen", "source": "https://t.me/cvedetector/22319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28409 - RUoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28409 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endpoint does not properly validate whether the requesting user has permission to add a menu item under the specified parentId \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:40.000000Z"}, {"uuid": "f77ba4f2-844d-4b8f-b193-ade8d071507f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28410", "type": "seen", "source": "https://t.me/cvedetector/22320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28410 - \"RUoYi Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-28410 \nPublished : April 7, 2025, 4:15 p.m. | 27\u00a0minutes ago \nDescription : An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T18:44:44.000000Z"}, {"uuid": "8ea26cb2-c211-4091-a2b7-4834890588a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28254", "type": "seen", "source": "https://t.me/cvedetector/21487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28254 - Leantime Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-28254 \nPublished : March 28, 2025, 9:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:27:05.000000Z"}, {"uuid": "86e996cf-8e9d-46a7-83eb-9eff30326d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28072", "type": "seen", "source": "https://t.me/cvedetector/23177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28072 - PHPGurukul Pre-School Enrollment System Directory Traversal Vulnerability in manage-teachers.php\", \n  \"Content\": \"CVE ID : CVE-2025-28072 \nPublished : April 16, 2025, 9:15 p.m. | 30\u00a0minutes ago \nDescription : PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T00:25:53.000000Z"}, {"uuid": "2043d2de-a229-4e26-8157-cc3f7f446942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2803", "type": "seen", "source": "https://t.me/cvedetector/21505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2803 - WordPress So-Called Air Quotes Plugin Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2803 \nPublished : March 29, 2025, 7:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : The So-Called Air Quotes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T10:28:56.000000Z"}, {"uuid": "347d1626-654a-413b-b494-f678f9b36b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2840", "type": "seen", "source": "https://t.me/cvedetector/21503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2840 - WordPress DAP to Autoresponders Email Syncing Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-2840 \nPublished : March 29, 2025, 7:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T10:28:55.000000Z"}, {"uuid": "d3b2b532-c3ea-4bd4-ba1a-5311e2c55953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28094", "type": "seen", "source": "https://t.me/cvedetector/21471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28094 - Shopxo SSRF and XSS Vulnerabilities\", \n  \"Content\": \"CVE ID : CVE-2025-28094 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:44.000000Z"}, {"uuid": "762d477b-052b-43a5-8337-ed0b0580a180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28093", "type": "seen", "source": "https://t.me/cvedetector/21470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28093 - ShopXO SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-28093 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:44.000000Z"}, {"uuid": "c40b44d2-931d-4147-8d92-72655238b2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28092", "type": "seen", "source": "https://t.me/cvedetector/21469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28092 - ShopXO SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-28092 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:43.000000Z"}, {"uuid": "f06d9b34-d947-4669-b1f9-7c83fe17f289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28091", "type": "seen", "source": "https://t.me/cvedetector/21468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28091 - Maccms10 SSRF in Add Article\", \n  \"Content\": \"CVE ID : CVE-2025-28091 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:42.000000Z"}, {"uuid": "aaa812f2-26b4-42ee-92ab-1889b947655b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28090", "type": "seen", "source": "https://t.me/cvedetector/21479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28090 - Maccms Server-Side Request Forgery (SSRF)\", \n  \"Content\": \"CVE ID : CVE-2025-28090 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:56.000000Z"}, {"uuid": "41a3773f-d4f7-4f0c-bb75-2aaaa6cc3216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28089", "type": "seen", "source": "https://t.me/cvedetector/21478", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28089 - Maccms SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28089 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:56.000000Z"}, {"uuid": "82e7fc18-8148-4d2a-a936-197233eb09e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28087", "type": "seen", "source": "https://t.me/cvedetector/21477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28087 - Sourcecodester Online Exam System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28087 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:52.000000Z"}, {"uuid": "b2df8571-5b1d-485e-9e7a-642bc20b4ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28097", "type": "seen", "source": "https://t.me/cvedetector/21473", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28097 - OneNav HTTP Header XSS\", \n  \"Content\": \"CVE ID : CVE-2025-28097 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:49.000000Z"}, {"uuid": "ee2dadc4-bbfa-4685-846b-88b742e7ce1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28096", "type": "seen", "source": "https://t.me/cvedetector/21472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28096 - OneNav SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28096 \nPublished : March 28, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:26:45.000000Z"}, {"uuid": "3e71c21a-0914-4167-8c65-6e58eadde63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2868", "type": "seen", "source": "https://t.me/cvedetector/21394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2868 - Cisco Clinic Queuing System Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-2868 \nPublished : March 28, 2025, 11:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the\u00a0page parameter in /index.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T13:33:49.000000Z"}, {"uuid": "3d3f3e76-d0b6-4408-8567-7bf3fe3c37a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2869", "type": "seen", "source": "https://t.me/cvedetector/21393", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2869 - Cisco Clinic Queuing System Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-2869 \nPublished : March 28, 2025, 11:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the\u00a0id parameter in /manage_user.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T13:33:48.000000Z"}, {"uuid": "662a2c1f-193f-4e8e-aa03-d863a8f2f2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2870", "type": "seen", "source": "https://t.me/cvedetector/21392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2870 - \" Clinic Queuing System XSS\"\", \n  \"Content\": \"CVE ID : CVE-2025-2870 \nPublished : March 28, 2025, 11:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : Reflected Cross-Site Scripting (XSS) vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the\u00a0page parameter in /patient_side.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T13:33:47.000000Z"}, {"uuid": "fc31c230-d38f-4a6a-bdb9-278d8da102e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2835", "type": "seen", "source": "https://t.me/cvedetector/21260", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2835 - Zhangyd-c OneBlog SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2835 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:18.000000Z"}, {"uuid": "f3249b60-614b-4b73-a815-db26e9452cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://t.me/cvedetector/21362", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2894 - Go1 Unauthenticated Remote Command Execution Backdoor\", \n  \"Content\": \"CVE ID : CVE-2025-2894 \nPublished : March 28, 2025, 3:15 a.m. | 51\u00a0minutes ago \nDescription : The Go1\u00a0also known as \"The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level,\" contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T05:12:12.000000Z"}, {"uuid": "0386ec34-12e0-4836-8e10-d2a7975cc56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2804", "type": "seen", "source": "https://t.me/cvedetector/21379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2804 - TagDiv Composer for WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2804 \nPublished : March 28, 2025, 6:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the 'account_id' and 'account_username' parameters in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T09:23:00.000000Z"}, {"uuid": "c6c54b7b-ba11-4033-9eca-011d1116fdb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28253", "type": "seen", "source": "https://t.me/cvedetector/21347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28253 - MainWP Dashboard XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2025-28253 \nPublished : March 27, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Dashboard v5.3.4 exists in class/class-mainwp-post-handler.php, where unsanitized user input from $_POST['sites'], $_POST['clients'], and $_POST['search'] is passed into the MainWP_User::render_table function. Despite using sanitize_text_field and wp_unslash, the values are not adequately protected against HTML or script injection. This flaw could allow an attacker to inject malicious scripts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T01:01:12.000000Z"}, {"uuid": "6aff5511-db65-4e00-b77b-54b694a9d849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2888", "type": "seen", "source": "https://t.me/cvedetector/21345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2888 - Apache Snapshot Timestamp Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-2888 \nPublished : March 27, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : During a snapshot rollback, the client incorrectly caches the timestamp metadata. If the client checks the cache when attempting to perform the next update, the update timestamp validation will fail, preventing the next update until the cache is cleared. Users should upgrade to tough version 0.20.0 or later and ensure any forked or derivative code is patched to incorporate the new fixes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T01:01:10.000000Z"}, {"uuid": "28b92013-c3be-4916-9ac4-c5bd3eb4e168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2887", "type": "seen", "source": "https://t.me/cvedetector/21344", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2887 - Apache Target Rollback Detection Vulnerability (Client Side Attack)\", \n  \"Content\": \"CVE ID : CVE-2025-2887 \nPublished : March 27, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : During a target rollback, the client fails to detect the rollback for delegated targets. This could cause the client to fetch a target from an incorrect source, altering the target contents. Users should upgrade to tough version 0.20.0 or later and ensure any forked or derivative code is patched to incorporate the new fixes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T01:01:07.000000Z"}, {"uuid": "5fb618a9-af27-4547-a9c5-425842a24feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2886", "type": "seen", "source": "https://t.me/cvedetector/21343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2886 - Apache DNS Delegation Validation Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-2886 \nPublished : March 27, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : Missing validation of terminating delegation causes the client to continue searching the defined delegation list, even after searching a terminating delegation. This could cause the client to fetch a target from an incorrect source, altering the target contents. Users should upgrade to tough version 0.20.0 or later and ensure any forked or derivative code is patched to incorporate the new fixes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T01:01:06.000000Z"}, {"uuid": "1e486cf7-6302-454b-991e-c2673c40b4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2885", "type": "seen", "source": "https://t.me/cvedetector/21340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2885 - Apache HTTP Server XML External Entity (XXE) Injection\", \n  \"Content\": \"CVE ID : CVE-2025-2885 \nPublished : March 27, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : Missing validation of the root metatdata version number could allow an actor to supply an arbitrary version number to the client instead of the intended version in the root metadata file, altering the version fetched by the client. Users should upgrade to tough version 0.20.0 or later and ensure any forked or derivative code is patched to incorporate the new fixes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T01:01:04.000000Z"}, {"uuid": "9a709abe-d633-47ec-850c-26d842f3d31c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2878", "type": "seen", "source": "https://t.me/cvedetector/21342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2878 - Kentico CMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2878 \nPublished : March 27, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in Kentico CMS up to 13.0.178. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /CMSInstall/install.aspx of the component Additional Database Installation Wizard. The manipulation of the argument new database leads to cross site scripting. The attack can be launched remotely. Upgrading to version 13.0.179 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T01:01:05.000000Z"}, {"uuid": "d1a23272-7ea0-4b7c-8023-df289a521b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2854", "type": "seen", "source": "https://t.me/cvedetector/21301", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2854 - \"Code-Projects Payroll Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2854 \nPublished : March 27, 2025, 3:16 p.m. | 20\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file update_employee.php. The manipulation of the argument emp_type leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T16:39:10.000000Z"}, {"uuid": "264c3db5-7512-42d3-9467-1d0f4e071137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2847", "type": "seen", "source": "https://t.me/cvedetector/21273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2847 - Codezips Gym Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2847 \nPublished : March 27, 2025, 1:15 p.m. | 14\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/over_month.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T14:58:21.000000Z"}, {"uuid": "b8426393-8107-4eda-8059-a09d679878e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2846", "type": "seen", "source": "https://t.me/cvedetector/21274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2846 - SourceCodester Online Eyewear Shop SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2846 \nPublished : March 27, 2025, 1:15 p.m. | 14\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects the function registration of the file /oews/classes/Users.php?f=registration of the component Registration. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T14:58:22.000000Z"}, {"uuid": "a2b7ecf1-c7c7-432a-8c93-1bdff6f9679e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2831", "type": "seen", "source": "https://t.me/cvedetector/21263", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2831 - Mingyuefusu Tushuguanlixitong SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2831 \nPublished : March 27, 2025, 3:15 a.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : A vulnerability has been found in mingyuefusu \u660e\u6708\u590d\u82cf tushuguanlixitong \u56fe\u4e66\u7ba1\u7406\u7cfb\u7edf up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as critical. This vulnerability affects the function getBookList of the file /admin/bookList?page=1&limit=10. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:20.000000Z"}, {"uuid": "a6faf965-26c5-490c-9400-e0f7aa6fabe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2832", "type": "seen", "source": "https://t.me/cvedetector/21262", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2832 - Mingyuefusu Tushuguanlixitong Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2832 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : A vulnerability was found in mingyuefusu \u660e\u6708\u590d\u82cf tushuguanlixitong \u56fe\u4e66\u7ba1\u7406\u7cfb\u7edf up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:20.000000Z"}, {"uuid": "e2ee3d5a-d7c8-44ff-bd7b-b1e0eae7f1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2833", "type": "seen", "source": "https://t.me/cvedetector/21261", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2833 - Zhangyd-c OneBlog Regular Expression Inefficient Complexity Remote Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2833 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:19.000000Z"}, {"uuid": "e39e51f7-ef14-4b09-b00b-e7ff94f1c295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2814", "type": "seen", "source": "https://t.me/cvedetector/22801", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2814 - \"Verisign Crypt::CBC Insecure Random Number Generation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2814 \nPublished : April 13, 2025, 12:15 a.m. | 32\u00a0minutes ago \nDescription : Crypt::CBC versions between 1.21 and 3.04 for Perl may use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.  \n  \nThis issue affects operating systems where \"/dev/urandom'\" is unavailable.\u00a0 In that case, Crypt::CBC will fallback to use the insecure rand() function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T03:33:14.000000Z"}, {"uuid": "f086054d-a492-4edb-9437-f4d8e471cb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2871", "type": "seen", "source": "https://t.me/cvedetector/22792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2871 - \"QuadMenu Cross-Site Request Forgery (CSRF) Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2871 \nPublished : April 12, 2025, 4:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : The WordPress Mega Menu \u2013 QuadMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the ajax_dismiss_notice() function. This makes it possible for unauthenticated attackers to update any user meta to a value of one, including wp_capabilities which could result in a privilege deescalation of an administrator, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-12T09:10:19.000000Z"}, {"uuid": "efe61b64-cb76-4008-bd13-0f377be80660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2841", "type": "seen", "source": "https://t.me/cvedetector/22788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2841 - Cart66 Cloud WordPress Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2841 \nPublished : April 12, 2025, 3:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : The Cart66 Cloud plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.7 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-12T06:39:53.000000Z"}, {"uuid": "625a56ea-0e79-4240-8d05-ef919f278d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2881", "type": "seen", "source": "https://t.me/cvedetector/22787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2881 - \"WordPress Developer Toolbar Sensitive Information Exposure\"\", \n  \"Content\": \"CVE ID : CVE-2025-2881 \nPublished : April 12, 2025, 3:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : The Developer Toolbar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-12T06:39:52.000000Z"}, {"uuid": "6fee6942-02f5-4e36-ae0b-7705423ec591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2836", "type": "seen", "source": "https://t.me/cvedetector/22093", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2836 - RegistrationMagic WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2836 \nPublished : April 4, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The RegistrationMagic \u2013 Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018payment_method\u2019 parameter in all versions up to, and including, 6.0.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T10:29:30.000000Z"}, {"uuid": "4df22886-0ea2-4a20-9160-b4489c2429ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28131", "type": "seen", "source": "https://t.me/cvedetector/21776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28131 - Nagios Network Analyzer Broken Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28131 \nPublished : April 1, 2025, 5:15 p.m. | 15\u00a0minutes ago \nDescription : A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with \"Read-Only\" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T19:44:17.000000Z"}, {"uuid": "5a35f5b5-494e-4cda-910a-047311c1e831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2874", "type": "seen", "source": "https://t.me/cvedetector/21954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2874 - WordPress User Submitted Posts Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2874 \nPublished : April 3, 2025, 8:15 a.m. | 38\u00a0minutes ago \nDescription : The User Submitted Posts \u2013 Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T11:03:12.000000Z"}, {"uuid": "1276c817-a661-4c87-9c6f-70c2c4d4c285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2842", "type": "seen", "source": "https://t.me/cvedetector/21874", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2842 - Tempo Operator ClusterRoleBinding Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-2842 \nPublished : April 2, 2025, 12:15 p.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : A flaw was found in the Tempo Operator. When the Jaeger UI Monitor Tab functionality is enabled in a Tempo instance managed by the Tempo Operator, the Operator creates a ClusterRoleBinding for the Service Account of the Tempo instance to grant the cluster-monitoring-view ClusterRole.  \nThis can be exploited if a user has 'create' permissions on TempoStack and 'get' permissions on Secret in a namespace (for example, a user has ClusterAdmin permissions for a specific namespace), as the user can read the token of the Tempo service account and therefore has access to see all cluster metrics. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T16:39:36.000000Z"}, {"uuid": "ef591bbd-1a01-436f-868a-84be2e4ae6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28132", "type": "seen", "source": "https://t.me/cvedetector/21777", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28132 - Nagios Network Analyzer Session Reuse Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28132 \nPublished : April 1, 2025, 5:15 p.m. | 15\u00a0minutes ago \nDescription : A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T19:44:18.000000Z"}, {"uuid": "026176da-1a28-4d0f-a852-556568399d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2891", "type": "seen", "source": "https://t.me/cvedetector/21738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2891 - \"Real Estate 7 WordPress Theme Arbitrary File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2891 \nPublished : April 1, 2025, 8:15 a.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible if front-end listing submission has been enabled. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T11:57:25.000000Z"}, {"uuid": "e66a3dda-36ec-4438-8827-4d4dbdcef4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2889", "type": "seen", "source": "https://t.me/cvedetector/22175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2889 - WordPress Link Library Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2889 \nPublished : April 5, 2025, 12:15 a.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Additional Parameters in all versions up to, and including, 7.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T04:53:25.000000Z"}, {"uuid": "5e0469d9-d4f1-4a83-b43c-660e5ec3126b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28928", "type": "seen", "source": "https://t.me/cvedetector/21195", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28928 - Google ReCaptcha for WordPress Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28928 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sureshdsk Are you robot google recaptcha for wordpress allows Reflected XSS. This issue affects Are you robot google recaptcha for wordpress: from n/a through 2.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:21.000000Z"}, {"uuid": "86933875-f566-45a9-ab3a-2c185f58dad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28146", "type": "seen", "source": "https://t.me/cvedetector/22145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28146 - Edimax Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28146 \nPublished : April 4, 2025, 2:15 p.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T18:01:34.000000Z"}, {"uuid": "5b0eaa4e-f25f-400e-a523-48b916fe48f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28939", "type": "seen", "source": "https://t.me/cvedetector/21193", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28939 - WordPress Google Calendar Manager SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28939 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound WP Google Calendar Manager allows Blind SQL Injection. This issue affects WP Google Calendar Manager: from n/a through 2.1. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:19.000000Z"}, {"uuid": "1860eea7-f5f8-4e5b-98b1-38ee8bf331fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28935", "type": "seen", "source": "https://t.me/cvedetector/21192", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28935 - Fancybox Plus Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-28935 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in puzich Fancybox Plus allows Reflected XSS. This issue affects Fancybox Plus: from n/a through 1.0.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:19.000000Z"}, {"uuid": "9603e27a-a67f-412e-af8d-7359a7963923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28942", "type": "seen", "source": "https://t.me/cvedetector/21190", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28942 - Trust Payments Gateway for WooCommerce SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-28942 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Trust Payments Trust Payments Gateway for WooCommerce allows SQL Injection. This issue affects Trust Payments Gateway for WooCommerce: from n/a through 1.1.4. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:14.000000Z"}, {"uuid": "6a912a82-8586-425d-995b-fc7d4913a04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28934", "type": "seen", "source": "https://t.me/cvedetector/21191", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28934 - Apache NotFound Simple Post Series Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-28934 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Simple Post Series allows Reflected XSS. This issue affects Simple Post Series: from n/a through 2.4.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:15.000000Z"}, {"uuid": "ac66b035-5595-4512-958e-a322fe4525bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28924", "type": "seen", "source": "https://t.me/cvedetector/21194", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28924 - ZenphotoPress Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-28924 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ZenphotoPress allows Reflected XSS. This issue affects ZenphotoPress: from n/a through 1.8. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:20.000000Z"}, {"uuid": "6feee971-b6a1-4517-9af6-51898b2565f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2819", "type": "seen", "source": "https://t.me/cvedetector/21189", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2819 - GT-SoftControl File Upload Vulnerability (Path Traversal)\", \n  \"Content\": \"CVE ID : CVE-2025-2819 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:13.000000Z"}, {"uuid": "783ddbae-f8bc-4550-a2c5-893d274ef37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2820", "type": "seen", "source": "https://t.me/cvedetector/21187", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2820 - Cisco Device Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-2820 \nPublished : March 26, 2025, 3:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : An authenticated attacker can compromise the availability of the device via the network \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:12.000000Z"}, {"uuid": "e0bf668c-83a8-4ddb-8e07-d3b4a7eaad7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/cvedetector/21185", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2825 - CrushFTP Unauthenticated Remote Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2825 \nPublished : March 26, 2025, 4:15 p.m. | 28\u00a0minutes ago \nDescription : CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T18:04:07.000000Z"}, {"uuid": "266830a9-d839-48ec-a156-d267031391f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28904", "type": "seen", "source": "https://t.me/cvedetector/21113", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28904 - Shamalli Web Directory Free SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28904 \nPublished : March 25, 2025, 7:15 p.m. | 56\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free allows Blind SQL Injection. This issue affects Web Directory Free: from n/a through 1.7.6. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T22:00:05.000000Z"}, {"uuid": "7bb23a7f-be0b-46d4-ab7c-2a205086bba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/15390", "content": "\ud83d\udea8CVE-2025-2825: Unauthenticated HTTP(S) port access on CrushFTPv10/v11\n\nCVSS: 9.8\n\nhttps://darkwebinformer.com/cve-2025-2825-unauthenticated-http-s-port-access-on-crushftpv10-v11/", "creation_timestamp": "2025-03-26T19:05:24.000000Z"}, {"uuid": "c90e0726-2dde-40ef-b19b-71f86d5f91ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/14576", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udcc5 Date: 2025-03-14 03:28:39\n\ud83d\udea8 Title: Alleged disclosure of WordPress ThemeEgg ToolKit 1.2.9 Shell Upload Exploit\n\ud83d\udee1\ufe0f Victim Country: \n\ud83c\udfed Victim Industry: \n\ud83c\udfe2 Victim Organization: \n\ud83c\udf10 Victim Site: \n\ud83d\udcdc Category: Vulnerability\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Threat Actor: Nxploited\n\ud83c\udf0d Network: openweb\n\ud83d\udd17 Claim: https://0day.today/exploit/description/39947\n\ud83d\udcdd Description: The threat actor claims to have released an exploit targeting the WordPress ThemeEgg ToolKit version 1.2.9. This exploit allows attackers to upload malicious shell files, posing a critical security risk to PHP-based web applications. The vulnerability is tracked as CVE-2025-28915.\n\n\u26a0\ufe0f Stay ahead of cyber threats! Subscribe to the Paid Threat Feed at https://t.me/DarkWebInformer_Bot for real-time updates (Website excluded). Want to pay via crypto? Visit https://darkwebinformer.com/crypto-payments.", "creation_timestamp": "2025-03-14T04:28:41.000000Z"}, {"uuid": "bf05610c-5fcf-4984-a891-c60ab5479c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "Telegram/G15wVBqjD5ciQZEC-pLp7UMEzS5D3GMG5LcowHadM2yxqg", "content": "", "creation_timestamp": "2025-03-28T09:46:34.000000Z"}, {"uuid": "70fb18ac-e228-4200-a31d-b55d82d89001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28009", "type": "published-proof-of-concept", "source": "Telegram/qHHI_vQOBL8Z1CD5olDOQcbDtdjW7f5zX5LulKCAEXmFyzY", "content": "", "creation_timestamp": "2025-04-17T11:00:05.000000Z"}, {"uuid": "b59647b7-3fee-4857-949e-7c1e1e3d9514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2801", "type": "seen", "source": "Telegram/58oUu--thuTl0z9YXe4tcdvklZdyfP1JbAcIPSjB2zT1L5k", "content": "", "creation_timestamp": "2025-04-26T06:00:31.000000Z"}, {"uuid": "0fb2617b-4472-452c-ad4a-50ca6479d6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "Telegram/9k_C5JXeLGhpcgGl3TlsIBGRr_8CSnsQH8RurvDjcthq00c", "content": "", "creation_timestamp": "2025-04-11T17:00:09.000000Z"}, {"uuid": "6d8d67f5-ed71-4ebb-969e-1d2fe1690f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "Telegram/XNLx_ZMfaYJPSssBYVCxDS29QMLR-1ADDL8FdocgP4IFZM4", "content": "", "creation_timestamp": "2025-04-03T09:00:06.000000Z"}, {"uuid": "3cb4871d-42e9-4ce3-a9eb-9cc71b44c3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "published-proof-of-concept", "source": "Telegram/S6VJZCEtnsvYjBlLt3__8k7cd1SGolH21EEfYkD1jnOqybU", "content": "", "creation_timestamp": "2025-03-30T13:00:05.000000Z"}, {"uuid": "eb231ba2-8961-490b-a746-0482b430d862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "Telegram/XWNVTNV35dvmt9z1kuRKrDP-n4wp3QUtmRLqVkoNNpbDXx4", "content": "", "creation_timestamp": "2025-04-02T17:00:08.000000Z"}, {"uuid": "aa4fd105-ff0c-437b-acd6-49f2e5219732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "Telegram/opiaIzcs52hHVTB1h97tO9r0DkFsroY0XQvSbFQdLORheEA", "content": "", "creation_timestamp": "2025-04-02T09:10:28.000000Z"}, {"uuid": "554cf8b7-5d90-46f9-ba4e-27ecb1d39ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "published-proof-of-concept", "source": "Telegram/XwMj3S90GEtdkqRuWZV_WB2RJcptNkituBjb1L6ih0r2y1w", "content": "", "creation_timestamp": "2025-03-30T05:00:08.000000Z"}, {"uuid": "b3b97d30-0422-43b6-8c5e-31826931767a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2803", "type": "seen", "source": "Telegram/aF4xicIreuyE5yRRD33dmWV9qZXjTlaEQ3JU-sQx2NkHh1A", "content": "", "creation_timestamp": "2025-03-29T09:31:14.000000Z"}, {"uuid": "32d17f3f-a6c5-482a-85ae-9f36dc05a7b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2807", "type": "published-proof-of-concept", "source": "Telegram/jugPolFPlglHUcgQOfXJundEsc_sTfJEDQSC3utb4wUBt-0", "content": "", "creation_timestamp": "2025-04-08T21:00:06.000000Z"}, {"uuid": "8075c4ff-e107-40fe-a5b8-6899f5b57752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2807", "type": "published-proof-of-concept", "source": "Telegram/PFczZxou3M8bxtA_ogzzcgh7g-AmtdGPjCcJVMEUDXCS9Y4", "content": "", "creation_timestamp": "2025-04-08T17:00:08.000000Z"}, {"uuid": "a42251b8-5d8a-4743-8d9a-d4446bf80d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28355", "type": "published-proof-of-concept", "source": "Telegram/025r9Ac4mA6AzmYH4V_5jxzygPRuLIkjd6NMrYR-gf6fiv4", "content": "", "creation_timestamp": "2025-04-18T17:00:10.000000Z"}, {"uuid": "e0b5321e-433c-4e77-97af-9616a4bd50f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2809", "type": "seen", "source": "Telegram/YDvcAPdlvLvCcoAwvz9gU9VvCprHDRzeT4kOSIV0t5J2ank", "content": "", "creation_timestamp": "2025-04-10T10:31:20.000000Z"}, {"uuid": "9362e193-24f3-4697-99ad-7d67a9e7ef4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28346", "type": "published-proof-of-concept", "source": "Telegram/P5LDm3S4VTfGYBgu3ytMcEur8FEGyy2Co8KdeMUu5EMrSc8", "content": "", "creation_timestamp": "2025-04-11T23:00:05.000000Z"}, {"uuid": "0fba1e69-2f2c-465b-a8ca-ae18107032fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2805", "type": "seen", "source": "Telegram/YDvcAPdlvLvCcoAwvz9gU9VvCprHDRzeT4kOSIV0t5J2ank", "content": "", "creation_timestamp": "2025-04-10T10:31:20.000000Z"}, {"uuid": "b14e49f6-5014-4dd1-9560-12fe2d770dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2802", "type": "published-proof-of-concept", "source": "Telegram/hsgN3TUNjstII56MQUCxIc5_azQBv0P4FDc7kkmVAdY01Mk", "content": "", "creation_timestamp": "2025-05-06T07:00:55.000000Z"}, {"uuid": "0e6a6c21-7efb-4e15-a76d-7c4fdd053b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "published-proof-of-concept", "source": "Telegram/6dlU4QbhjC-C_L4Pj9RI3h9dT6ZG3i42hrGY9HoOz9OH_bU", "content": "", "creation_timestamp": "2025-03-13T20:00:06.000000Z"}, {"uuid": "9b4dc053-47f8-4e2e-bfd4-333bce26da69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2816", "type": "published-proof-of-concept", "source": "Telegram/wLP7EEtWDIp6XKVZ9fYU3aJYauXwiYL5iTecHqfrGV151Zc", "content": "", "creation_timestamp": "2025-05-01T06:00:40.000000Z"}, {"uuid": "51764607-d9e0-4849-96bd-78ab2697a77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2812", "type": "seen", "source": "Telegram/9NKvNB1vhiQ9HCsh6KHjnVHDcPQMbEoQC5oa2MSssSFvCg4", "content": "", "creation_timestamp": "2025-05-02T11:30:24.000000Z"}, {"uuid": "adddd34c-f834-4720-8e51-60c1c52bd141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "Telegram/OgOjH-P9-6lC1GpUtLcVIj1A2sVUmvlFAFkLSv297xt1nio", "content": "", "creation_timestamp": "2025-04-29T18:02:12.000000Z"}, {"uuid": "b920b1ec-e0c0-4a7a-90a0-d1457ee80845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2817", "type": "seen", "source": "Telegram/BW6CS1c2yfnfr5Hz14FjC2Gy13hRBqMEHYLNjuSPHeFguDw", "content": "", "creation_timestamp": "2025-04-29T18:02:11.000000Z"}, {"uuid": "9e04cd2c-735a-42e8-b7ac-9fb637b935f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2851", "type": "seen", "source": "Telegram/HjJutrkSIT1x5nSo5qlRtHJDt1zplVPxU4H8qmew5tzjdIg", "content": "", "creation_timestamp": "2025-04-26T11:30:37.000000Z"}, {"uuid": "c55f4663-d61f-42ab-8c5c-5cd9582a0eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "published-proof-of-concept", "source": "Telegram/9LVGSk6wVw0IWhEGPHpvxSTJTnKNt02SSt_xE5fqoYcZYJA", "content": "", "creation_timestamp": "2025-03-14T20:00:08.000000Z"}, {"uuid": "db5f2769-645a-4d09-8d7b-106421862cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "published-proof-of-concept", "source": "Telegram/E6R0RTFhRVkzL0XvyGJLYGLmtOVWOOq1YD8cIv5SyhOq51o", "content": "", "creation_timestamp": "2025-03-12T20:00:07.000000Z"}, {"uuid": "23ce776c-9a4a-4882-8076-58ffa3c4406a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "published-proof-of-concept", "source": "Telegram/YXXAYpim7CTBciEsZ274r31Y5zZFEUA-ADCgFk7JYE3PFkE", "content": "", "creation_timestamp": "2025-03-12T10:00:05.000000Z"}, {"uuid": "162784b2-f7c6-42b6-b3b4-c1be658dcb87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/proxy_bar/2601", "content": "CrushFTP\n\n* CVE-2025-2825 \u0438 CVE-2025-31161\n* Dual exploiter\n*", "creation_timestamp": "2025-04-20T09:41:34.000000Z"}, {"uuid": "622abfd5-8af8-4873-af11-54f2ddeefe07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/zero_day_uz/478", "content": "CrushFTP\n\n* CVE-2025-2825 \u0438 CVE-2025-31161\n* Dual exploiter\n*", "creation_timestamp": "2025-04-21T16:13:30.000000Z"}, {"uuid": "7b671e06-3432-4f87-9336-b981d8444149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/true_secator/6889", "content": "\u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 ForumTroll \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Google 0-day \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u0442\u0430\u043a\u0436\u0435\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u00a0\u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u043c\u0435\u0442\u0438\u0432 \u0441\u0445\u043e\u0436\u0438\u0435 \u0437\u0430\u043a\u043e\u043d\u043e\u043c\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0434\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0434\u043b\u044f Windows.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0442\u0440\u0443\u0434\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u0434 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0431\u044e\u0434\u0436\u0435\u0442\u0430.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Consumer Affairs, Mozilla \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0430\u0441\u044c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 2,5 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b. \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0421\u0428\u0410 \u043f\u043e \u043b\u0438\u043d\u0438\u0438 USAID.\n\n\u0418 \u0434\u0435\u043b\u043e \u0434\u0430\u0436\u0435 \u043d\u0435 \u0442\u043e\u043c, \u0447\u0442\u043e 2,5 \u043c\u043b\u043d. \u0432 \u043e\u0431\u0449\u0435\u043c \u043c\u043d\u043e\u0433\u043e\u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043d\u043e\u043c \u0431\u044e\u0434\u0436\u0435\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 (653 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b. \u0434\u043e\u0445\u043e\u0434\u0430 \u0432 2023 \u0433\u043e\u0434\u0443) - \u044d\u0442\u043e \u043a\u0430\u043a \u043a\u0430\u043f\u043b\u044f \u0432 \u043c\u043e\u0440\u0435, \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u0435\u0437\u0434\u0435\u0441\u0443\u0449\u0435\u0435 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431 \u0432 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0435\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0446\u0435\u043f\u0442\u0443\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u044c.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Forescout \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 46 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0442\u0440\u0435\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u043e\u043b\u043d\u0435\u0447\u043d\u044b\u0445 \u0438\u043d\u0432\u0435\u0440\u0442\u043e\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u044b\u00a0SUN:DOWN \u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u043b\u0438 \u0438\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b.\n\n\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 - Growatt, SMA \u0438 Sungrown.\n\nSMA\u00a0\u0438\u00a0Sungrow\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. Growatt \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u043a\u043e\u043d\u0435\u0446 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438.\n\n2. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Esri \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u00a0\u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 ArcGIS.\n\nCVE-2025-2538 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8/10.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 ArcGIS - \u044d\u0442\u043e \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u043e\u043f\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 1100 \u0441\u0438\u0441\u0442\u0435\u043c ArcGIS.\n\n3. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u044b \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 CrushFTP, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0441\u0444\u0435\u0440\u0435 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CrushFTP \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443, \u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442\u0441\u044f, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f DMZ.\n\nCrushFTP 11.3.1+ \u0438 10.8.4+ \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0417\u0430\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 CrushFTP \u0442\u0443\u043f\u044f\u0442 \u0438 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u044e\u0442 CVE, VulnCheck \u0440\u0435\u0448\u0438\u043b\u0430 \u0432\u0437\u044f\u0442\u044c \u043d\u0430 \u0441\u0435\u0431\u044f \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u00a0\u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 CVE-2025-2825.\n\n\u041d\u043e \u0433\u0435\u043d\u0434\u0438\u0440 CrushFTP \u043f\u043e\u0441\u0442\u0443\u043f\u043e\u043a \u043d\u0435 \u043e\u0446\u0435\u043d\u0438\u043b \u0438 \u043f\u0440\u0438\u0433\u0440\u043e\u0437\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0434\u043e\u0431\u0440\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043d\u0435 \u043e\u0442\u043a\u0430\u0442\u044f\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440.\u00a0\n\n4. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e Sonatype,\u00a0\u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 90 \u0434\u043d\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Tomcat \u0432 \u0442\u0440\u0438 \u0440\u0430\u0437\u0430 \u0447\u0430\u0449\u0435, \u0447\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435.\n\n5. PoC\u00a0\u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043b\u0430\u043a\u0430 IngressNightmare \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f.", "creation_timestamp": "2025-03-28T18:30:05.000000Z"}, {"uuid": "e4206568-4681-47be-8b7d-0ac950a2c139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6915", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0441\u043a\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043a\u043e\u0438\u0445 \u043f\u043e\u0434 \u043d\u0430\u043a\u043e\u043f\u0438\u043b\u043e\u0441\u044c. \u0412\u043a\u0440\u0430\u0442\u0446\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u043d\u0430\u0447\u0430\u043b\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Apache Camel \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0439 CVE-2025-27636. \u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0441\u0432\u0435\u0436\u0435\u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439\u00a0PoC.\n\n2. Project Discovery \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CrushFTP, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u043a CVE-2025-2825. \u0422\u0430\u043a \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Endor Labs \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Parquet \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10/10, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0444\u0430\u0439\u043b\u044b Parquet.\n\nCVE-2025-30065 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043c\u043e\u0434\u0443\u043b\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 parquet-avro. \u0417\u0430\u043a\u0440\u0430\u043b\u0430\u0441\u044c \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 1.8.0 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c Parquet \u0432\u0435\u0440\u0441\u0438\u0438 1.15.1.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Endor Labs, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0442 \u0438\u043b\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u044e\u0442 \u0444\u0430\u0439\u043b\u044b Parquet \u0447\u0435\u0440\u0435\u0437 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Hadoop \u0438\u043b\u0438 Spark, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u0434 Parquet Java.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-30065 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u043c\u043e\u0433\u0443\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041f\u044c\u0435\u0440 \u041a\u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u0435\u0441\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Brocade Fiber Channel.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 - \u044d\u0442\u043e \u0434\u0432\u0435 RCE \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043b\u0430\u0431\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043c\u044c \u043e\u0448\u0438\u0431\u043e\u043a, \u0430 \u0442\u0440\u0438 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 EoL-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n5. \u041e\u043d \u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0442\u0447\u0435\u0442 \u043e \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Palo Alto Network.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Tenable \u043f\u043e\u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Google Cloud, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0443\u044e ImageRunner, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 Cloud Run, Container Registry \u0438 Artifact Registry \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0431\u0440\u043e\u0441\u043a\u0438 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n7. Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 Canon.\n\n8. ERNW \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 VMware Carbon Black Cloud. \u0412\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\n9. Project Black \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 unauth RCE \u0432 \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 ZendTo. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443, \u043d\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e CVE \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u0442.\n\n10. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u042d\u0432\u0430\u043d \u041a\u043e\u043d\u043d\u0435\u043b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 APIO \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Verizon Call Filter, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Verizon.\n\n11. Searchlight Cyber \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SQLi \u0432 Halo ITSM, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n12. Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0442\u0440\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0430 Jenkins - \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0438 \u0448\u0435\u0441\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 - \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u0445.\n\n13. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c SafeBreach \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438\u00a0Google 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Quick Share.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 DEFCON \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437 \u0438\u0445 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f.", "creation_timestamp": "2025-04-04T19:30:05.000000Z"}, {"uuid": "f1ba7b4e-2bc7-4fec-b097-69ba2125860f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "https://t.me/ctinow/233172", "content": "CrushFTP CVE-2025-2825 flaw actively exploited in the wild\nhttps://ift.tt/IXBqJK8", "creation_timestamp": "2025-04-01T16:24:40.000000Z"}, {"uuid": "3289e8ab-c36c-48fa-a298-d58ba9cea11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/ctinow/232991", "content": "Mozilla fixed critical Firefox vulnerability CVE-2025-2857\nhttps://ift.tt/tNPnL2Y", "creation_timestamp": "2025-03-28T11:19:50.000000Z"}, {"uuid": "7cd1687d-5c69-4803-ad80-15e77d93adee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-29)", "content": "", "creation_timestamp": "2026-07-30T10:15:07.465511Z"}, {"uuid": "a12d8ed1-624e-40c0-8d2f-524b750bc25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:07.465129Z"}, {"uuid": "135c9c30-ef6a-49a5-acab-48f8484e8b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "https://t.me/information_security_channel/53322", "content": "CrushFTP Blames Security Firms for Fast Exploitation of Vulnerability\nhttps://www.securityweek.com/hackers-attempting-to-exploit-crushftp-vulnerability/\n\nShadowserver has started seeing exploitation attempts aimed at a CrushFTP vulnerability tracked as CVE-2025-2825 and CVE-2025-31161.\nThe post CrushFTP Blames Security Firms for Fast Exploitation of Vulnerability (https://www.securityweek.com/hackers-attempting-to-exploit-crushftp-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-04-01T13:41:11.000000Z"}, {"uuid": "27075cb7-0c50-488d-864b-3011d175bc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "exploited", "source": "https://t.me/thehackernews/6571", "content": "\ud83d\udea8 Firefox users, update now!\n\nA critical bug (CVE-2025-2857) just got patched\u2014same sandbox escape class as the Chrome zero-day (CVE-2025-2783) actively exploited in the wild.\n\n\ud83d\udcd6 Full story: https://thehackernews.com/2025/03/mozilla-patches-critical-firefox-bug.html\n\n\ud83d\udd12 Patch now | Spread the word | Stay safe", "creation_timestamp": "2025-03-28T06:48:21.000000Z"}, {"uuid": "335c6c54-bc2f-4cf3-98f5-77ed8b3c48fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/xakep_ru/17306", "content": "Mozilla \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442: Firefox \u0434\u043b\u044f Windows \u0443\u044f\u0437\u0432\u0438\u043c \u043f\u0435\u0440\u0435\u0434 \u043f\u043e\u0431\u0435\u0433\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Firefox 136.0.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0432 Windows-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\nhttps://xakep.ru/2025/03/28/cve-2025-2857/", "creation_timestamp": "2025-03-28T17:23:27.000000Z"}, {"uuid": "88c98a48-f8c0-4a7f-8f82-7351e90fcf0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5105", "content": "CrushFTP Authentication Bypass - CVE-2025-2825 #CrushFTP #AuthenticationBypass #VulnerabilityResearch #CVE2025-2825 #NucleiTemplate https://projectdiscovery.io/blog/crushftp-authentication-bypass", "creation_timestamp": "2026-08-03T02:14:01.569487Z"}, {"uuid": "dd408f15-53c4-4029-bf47-a35d4f1cfd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28168", "type": "seen", "source": "https://t.me/cvedetector/24454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28168 - Outsystems Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28168 \nPublished : May 5, 2025, 2:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : Outsystems Multiple File Upload < 3.1.0 is vulnerable to Unrestricted File Upload. The vulnerability is because file extension and size validations are enforced solely on the client side. An attacker can intercept the upload request and modify the parameter to bypass extension restrictions and upload arbitrary files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T17:33:01.000000Z"}, {"uuid": "2ec5d987-3a24-49fd-92c8-f6a4ab526279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2812", "type": "seen", "source": "https://t.me/cvedetector/24342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2812 - Mydata Informatics Ticket Sales Automation SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-2812 \nPublished : May 2, 2025, 9:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection.This issue affects Ticket Sales Automation: before 03.04.2025 (DD.MM.YYYY). \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T13:26:07.000000Z"}, {"uuid": "1b34c478-39ff-405c-8a22-19eb58123e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2880", "type": "seen", "source": "https://t.me/cvedetector/24330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2880 - Yame Link In Bio WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-2880 \nPublished : May 2, 2025, 3:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : The Yame | Link In Bio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:58.000000Z"}, {"uuid": "fdcf8f39-b883-49c5-903f-8da98908d64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2802", "type": "seen", "source": "https://t.me/cvedetector/24543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2802 - WordPress LayoutBoxx Plugin Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2802 \nPublished : May 6, 2025, 5:15 a.m. | 32\u00a0minutes ago \nDescription : The LayoutBoxx plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.3.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T08:37:10.000000Z"}, {"uuid": "a5bce967-5b90-4fc5-997b-d62ca6653197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28062", "type": "seen", "source": "https://t.me/cvedetector/24475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28062 - ERPNext CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28062 \nPublished : May 5, 2025, 4:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3. The vulnerability allows an attacker to perform unauthorized actions such as user deletion, password resets, and privilege escalation due to missing CSRF protections. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:55.000000Z"}, {"uuid": "5ac39991-2c06-4b25-9f14-e6eec64aa7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2898", "type": "seen", "source": "https://t.me/cvedetector/24615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2898 - IBM Maximo Application Suite Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2898 \nPublished : May 6, 2025, 3:16 p.m. | 46\u00a0minutes ago \nDescription : IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control (RBAC) configurations. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T18:39:52.000000Z"}, {"uuid": "b0b9bc49-2586-4ebe-a74c-96afeec43bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2821", "type": "seen", "source": "https://t.me/cvedetector/24670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2821 - WordPress Search Exclude Plugin Unauthenticated Data Modification\", \n  \"Content\": \"CVE ID : CVE-2025-2821 \nPublished : May 7, 2025, 3:15 a.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_rest_permission function in all versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to modify plugin settings, excluding content from search results. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T07:12:52.000000Z"}, {"uuid": "eda76d76-cb9d-41a7-a081-38e004086505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5105", "content": "CrushFTP Authentication Bypass - CVE-2025-2825 #CrushFTP #AuthenticationBypass #VulnerabilityResearch #CVE2025-2825 #NucleiTemplate https://projectdiscovery.io/blog/crushftp-authentication-bypass", "creation_timestamp": "2026-08-02T02:00:03.712641Z"}, {"uuid": "05831917-e59f-410e-ac5f-1be054a5905b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "content": "", "creation_timestamp": "2026-05-11T00:00:00.000000Z"}, {"uuid": "02fed90f-416a-40dd-b3ce-b7b9b5d6a69d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1afd5ba2-5e7069c341d325b8", "content": "The Dark Side of Unitree Robot Dogs\nArbitrary command execution with the Wi-Fi password. (Credit: Benn Jordan)Continuing on his quest to expose the dark underbelly of modern technology, [Benn Jordan] recently did a deep-dive into the rise of so-called robot dogs. Although their most striking resemblance with biological dogs is that they also have four legs and generally follow commands, [Benn] found many issues with them that range from safety issues due to limited sensory capabilities, to basic security vulnerabilities, all the way to suspicious network traffic from Unitree\u2019s robot dog firmware.\nAlthough not the only seller of this type of quadruped robot, Unitree Robotics has made a name for itself by offering very capable and yet very cheap products. Their basic quadruped robot costs only a few thousand clams and features Lidar and heaps of processing power, all of which should make it a pretty useful device.\nDespite this, [Benn] found that the original task that he\u2019d envisioned for the robot, as in protecting his chickens from uninvited visitors, wouldn\u2019t quite work as the robot is rather blind. The reason for this is the placement of the Lidar below the head, which obscures most of what\u2019s behind and around the robot. Rather than risk trampled chickens and chicks, this plan was thus abandoned.\nWhen digging further into the robot, he found an easy to exploit arbitrary command execution flaw via the Wi-Fi password entry field, a year-old CVE-2025-2894 exploit, as well as highly suspicious traffic to Chinese servers whenever the robot\u2019s software figured that it was not being watched.\nAlthough much of this can be circumvented with hacks, issues like the sensory limitations and general distrust of firmware updates makes using these robots a rather daunting and often ill-advised proposition.\nyoutube.com/embed/lA8WuXDXfcI?\u2026 \nhackaday.com/2026/05/12/the-da\u2026", "creation_timestamp": "2026-05-13T02:19:12.147800Z"}, {"uuid": "b4d132d2-c196-4ade-a0f7-225941a09a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://bsky.app/profile/le-fil-robotique.bsky.social/post/3mlpq3yqfuy2s", "content": "Unitree vend des quadrup\u00e8des avec Lidar pour quelques milliers d'euros, bien moins que Boston Dynamics. Un ing\u00e9nieur y a trouv\u00e9 une faille d'ex\u00e9cution de code (CVE-2025-2894) via le champ mot de passe Wi-Fi. https://www.lefilrobotique.fr/article/3688983", "creation_timestamp": "2026-05-13T06:59:08.477079Z"}, {"uuid": "654ea404-7aaf-48e4-aea6-f4c88f02f7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "content": "", "creation_timestamp": "2026-08-16T10:15:07.511312Z"}, {"uuid": "c66524d1-2de1-43ad-af31-8ac8ec55bf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-28269", "type": "published-proof-of-concept", "source": "https://github.com/rrainn/js-object-utilities/security/advisories/GHSA-hpqf-m68j-2pfx", "content": "", "creation_timestamp": "2025-04-06T18:13:23.000000Z"}, {"uuid": "73026e36-e988-4b3c-8e90-53017b60858e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:15:08.565787Z"}, {"uuid": "8fa041ff-9ee0-4d33-b04d-d04a35c65e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "2442af90-f383-4651-a0ef-fcbbd1e76c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:15:08.840386Z"}, {"uuid": "076bcce7-ddbf-4f65-99f3-c6c7650530c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "content": "", "creation_timestamp": "2026-06-01T00:00:00.000000Z"}, {"uuid": "62aafb0e-43c1-47a7-94f5-2f5c90a1c055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "58861d8e-ec32-4cce-8b07-fde6e40f6400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28137", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.360063Z"}, {"uuid": "44af85ca-6459-4a8f-8245-82c5dac6c515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/purp_sec/467", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-22457 \u2014 \u0441\u043d\u043e\u0432\u0430 Ivanti. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Connect Secure, Policy Secure \u0438 ZTA Gateways, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-31334 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRar, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 Windows \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2024-53868 \u2014 \u0431\u0430\u0433 \u0432 Apache Traffic Server, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-2825 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 S3. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35 CVE-2025-3161 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Cisco Webex Meetings. \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2945 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 pgAdmin 4, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e eval() Python.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:19.911800Z"}, {"uuid": "d2a0f855-ed00-47cf-bf55-79cedf47b6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/purp_sec/432", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Mozilla \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox (ESR), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-2783 \u2014 \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo \u043d\u0430 Windows. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Chrome \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\udd35 CVE-2025-30091 \u2014 \u0431\u0430\u0433 \u0432 MoxieManager, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043c\u0435\u0434\u0438\u0430, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0432 PHP \u0438 .NET-\u0441\u0440\u0435\u0434\u044b. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-26512 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetApp SnapCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\ud83d\udd35 \u041d\u0430\u0431\u043e\u0440 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:20.964596Z"}, {"uuid": "a5abd856-3c3d-4607-a8de-b732b37a72ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "e0cf4302-21ce-4b00-8fe9-71799e063c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-11)", "content": "", "creation_timestamp": "2026-06-11T00:00:00.000000Z"}, {"uuid": "85c8c4db-b26e-4c72-bd94-313c0d4e8427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "c6a98af9-3cc0-49ef-a2c1-08359b4cc223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:08.037099Z"}, {"uuid": "288d99ce-8e98-4571-af23-dfc679acc07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28137", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.568155Z"}, {"uuid": "5efda232-bcec-4443-9262-bc31590088a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "449bdf09-2839-4df2-a29c-2d7f51f80d51", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55fd3232-9aeb-4965-9a83-159032cb3254", "content": "", "creation_timestamp": "2026-06-19T12:46:17.344724Z"}, {"uuid": "c7d4d27c-79dc-43ed-b387-dadcd330c3e2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/10feb010-e645-4a29-9ef9-200586aaea00", "content": "", "creation_timestamp": "2026-06-19T12:45:50.954008Z"}, {"uuid": "e2e73e7f-0a52-45be-a1df-87bfa7f45fa7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c64c61b2-0a4f-4b02-9acb-62a7db51897e", "content": "", "creation_timestamp": "2026-06-19T12:46:23.443805Z"}, {"uuid": "3fa307f6-0eab-473a-b0ef-7eecaf12ec96", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28367", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b30018cd-f0af-40ae-a23f-822d05bf616a", "content": "", "creation_timestamp": "2026-06-23T14:03:17.570791Z"}, {"uuid": "f2803f99-3681-4e44-9648-f9d37cd48ddf", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66854511-a07d-4d44-9305-2784a007f843", "content": "", "creation_timestamp": "2026-06-23T14:04:25.114410Z"}, {"uuid": "26422e0b-7040-43f0-8923-c1848c0d212e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28137", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d364fb18-bbe6-4d45-b8e5-cb2241828d1c", "content": "", "creation_timestamp": "2026-06-23T14:06:08.718403Z"}, {"uuid": "51673181-163b-4c4f-af03-8fcedc325855", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28036", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9237617a-b239-4188-bfe2-965e3b43e270", "content": "", "creation_timestamp": "2026-06-23T14:06:08.655088Z"}, {"uuid": "f92bedb0-d082-4036-983f-7c6aad32be28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/purp_sec/467", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-22457 \u2014 \u0441\u043d\u043e\u0432\u0430 Ivanti. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Connect Secure, Policy Secure \u0438 ZTA Gateways, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-31334 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRar, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 Windows \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2024-53868 \u2014 \u0431\u0430\u0433 \u0432 Apache Traffic Server, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-2825 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 S3. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35 CVE-2025-3161 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Cisco Webex Meetings. \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2945 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 pgAdmin 4, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e eval() Python.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:41.246092Z"}, {"uuid": "64862a5b-92a8-4ccc-8287-7e2fe11ced1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-28915", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mp6iow6vpj26", "content": "CVE-2025-28915: Critical WordPress Plugin Flaw Opens Doors to Full Site Takeover\u2014Patch Now! +\u00a0Video\n\nIntroduction: A recently disclosed critical vulnerability in the WordPress ecosystem, identified as CVE-2025-28915, is sending shockwaves through the cybersecurity community. This flaw, residing in\u2026", "creation_timestamp": "2026-06-26T08:12:02.273331Z"}, {"uuid": "644233e2-8d13-42c6-b03e-766023cb7b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/purp_sec/432", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Mozilla \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox (ESR), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-2783 \u2014 \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo \u043d\u0430 Windows. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Chrome \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\udd35 CVE-2025-30091 \u2014 \u0431\u0430\u0433 \u0432 MoxieManager, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043c\u0435\u0434\u0438\u0430, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0432 PHP \u0438 .NET-\u0441\u0440\u0435\u0434\u044b. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-26512 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetApp SnapCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\ud83d\udd35 \u041d\u0430\u0431\u043e\u0440 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:42.577604Z"}, {"uuid": "518ad3c6-374d-4eda-9362-eafec7e1f6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:15:08.337676Z"}, {"uuid": "f471349c-2bed-4c30-8967-056caff8898f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:15:06.934161Z"}, {"uuid": "8e440805-bb5b-4a86-ae13-203044bfdad3", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f4342aa-113e-48f9-b195-39c1ee4aca60", "content": "", "creation_timestamp": "2026-06-30T09:23:29.073293Z"}, {"uuid": "c55d291f-b472-43e8-a31a-7cdad7fefdba", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-28367", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6a9e34fc-690f-4ea3-87a5-2f3267fba967", "content": "", "creation_timestamp": "2026-06-30T09:23:57.242755Z"}, {"uuid": "2860402a-5449-4b36-b065-177d724c4ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:15:14.746774Z"}, {"uuid": "978f5759-8189-4a25-b1d3-ef6b2ebe16ac", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-28137", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "content": "", "creation_timestamp": "2026-06-30T11:39:52.605514Z"}, {"uuid": "5bada283-e6d3-450d-bb93-66cc6bfdcffa", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-28036", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/94e3ab1d-369a-4e48-8f12-2801eac2340d", "content": "", "creation_timestamp": "2026-06-30T11:39:49.813917Z"}, {"uuid": "9bdb9d50-a0aa-462b-a82f-9ccd1df26354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:15:07.687512Z"}, {"uuid": "8e516fb1-3003-4e61-aefd-d31820142d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "content": "", "creation_timestamp": "2026-08-22T10:15:08.436494Z"}, {"uuid": "698b4656-aa72-4310-a7cb-afc82f6f7f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/purp_sec/467", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-22457 \u2014 \u0441\u043d\u043e\u0432\u0430 Ivanti. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Connect Secure, Policy Secure \u0438 ZTA Gateways, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-31334 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRar, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 Windows \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2024-53868 \u2014 \u0431\u0430\u0433 \u0432 Apache Traffic Server, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-2825 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 S3. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35 CVE-2025-3161 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Cisco Webex Meetings. \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2945 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 pgAdmin 4, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e eval() Python.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:54.245799Z"}, {"uuid": "6225f11d-437b-4703-bc42-8ee5aec730e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "content": "", "creation_timestamp": "2026-07-12T10:15:05.539315Z"}, {"uuid": "7362ea92-8469-41a0-ac7e-6c142d2049b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/purp_sec/432", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-2857 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Mozilla \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox (ESR), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd35 CVE-2025-2783 \u2014 \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo \u043d\u0430 Windows. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 Chrome \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\ud83d\udd35 CVE-2025-30091 \u2014 \u0431\u0430\u0433 \u0432 MoxieManager, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043c\u0435\u0434\u0438\u0430, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0432 PHP \u0438 .NET-\u0441\u0440\u0435\u0434\u044b. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-26512 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetApp SnapCenter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\ud83d\udd35 \u041d\u0430\u0431\u043e\u0440 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:53.095014Z"}, {"uuid": "e3607f57-f8fd-40c2-a4f0-4d46ec97140a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/pleyades_it/11572", "content": "\u2757\ufe0fActualiza cuanto antes tu navegador Firefox para corregir la #vulnerabilidad cr\u00edtica CVE-2025-2857\nhttps://acortar.link/j1xSlf", "creation_timestamp": "2026-07-12T22:00:14.891405Z"}, {"uuid": "e93b467c-2815-4c99-8576-3e8d77b752c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/pleyades_it/11572", "content": "\u2757\ufe0fActualiza cuanto antes tu navegador Firefox para corregir la #vulnerabilidad cr\u00edtica CVE-2025-2857\nhttps://acortar.link/j1xSlf", "creation_timestamp": "2026-07-13T01:00:11.543182Z"}, {"uuid": "5b38bc63-d9a9-4367-a68c-dbae6f42a93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:30.355149Z"}, {"uuid": "50906faa-640f-466c-8b00-0da09f332a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/pleyades_it/11572", "content": "\u2757\ufe0fActualiza cuanto antes tu navegador Firefox para corregir la #vulnerabilidad cr\u00edtica CVE-2025-2857\nhttps://acortar.link/j1xSlf", "creation_timestamp": "2026-07-14T00:00:53.434224Z"}, {"uuid": "127302ba-ca12-4630-a94b-1d788c22c323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:09.574573Z"}, {"uuid": "746a49aa-c4a3-41dc-9af3-019d41214701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:15:08.916769Z"}, {"uuid": "0776a597-e512-44f0-89c0-280b912daa31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:15:09.735338Z"}, {"uuid": "ba7da5ab-7a9e-45d0-a13f-dbbe0c3dd5d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:15:16.414075Z"}, {"uuid": "3140f8ea-c5e6-434e-9f1c-5d9408b37653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/ZerodayAlert/470", "content": "\u0421\u0435\u0440\u0432\u0435\u0440\u044b CrushFTP \u043f\u043e\u0434 \u0447\u0443\u0436\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c\n\n\ud83d\udd13 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e CVSS. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u0435\u0433\u043e \u043b\u0438\u0446\u0430.\n\n\ud83e\udde9 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VulnCheck \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2025-2825, \u043d\u043e MITRE \u043f\u043e\u0437\u0436\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043d\u043e\u043c\u0435\u0440 CVE-2025-31161. \u042d\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c, MITRE \u0438 VulnCheck, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0438 \u0431\u0435\u0437 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83e\udde0 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0435\u0449\u0451 30 \u043c\u0430\u0440\u0442\u0430, \u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b. \u0412\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 AnyDesk, MeshAgent \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Telegram-\u0431\u043e\u0442\u0430.\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0435\u0441\u0442\u0440 KEV \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e \u043e\u0442 \u0432\u0441\u0435\u0445 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 28 \u0430\u043f\u0440\u0435\u043b\u044f. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0440\u0438\u0441\u043a\u043e\u043c \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n#crushftp #cve #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:14.377594Z"}, {"uuid": "8f43aeb9-146d-4cea-a1e4-f13e4dd22ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/ZerodayAlert/461", "content": "\ud83d\udee1 Firefox \u0441\u0440\u043e\u0447\u043d\u043e \u043b\u0430\u0442\u0430\u0435\u0442 \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows-\u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n \u0411\u0430\u0433 CVE-2025-2857 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u043a\u0430 \u0435\u0451 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438.\n\n \u041f\u043e\u0445\u043e\u0436\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 Chrome \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438\nGoogle \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e CVE-2025-2783, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u041c\u0418 \u0438 \u0432\u0443\u0437\u043e\u0432.\n\n \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\n\u0421\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u043e\u0432 \u2014 \u043d\u043e \u0431\u0435\u0437 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u0434\u0440\u044f\u0434 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u0440\u0435\u043d\u0434 \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u0430\u0442\u0430\u043a. \u0420\u0438\u0441\u043a \u0432\u044b\u0441\u043e\u043a, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0434\u043b\u044f Windows-\u0441\u0440\u0435\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #firefox #chrome @ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:15.033439Z"}, {"uuid": "48a1ac74-f017-4bdf-85c8-439da9780410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:15:38.758560Z"}, {"uuid": "a595a549-bb6f-4fdb-b57a-4778dc5f5354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/ZerodayAlert/461", "content": "\ud83d\udee1 Firefox \u0441\u0440\u043e\u0447\u043d\u043e \u043b\u0430\u0442\u0430\u0435\u0442 \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows-\u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0438\u0437 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n \u0411\u0430\u0433 CVE-2025-2857 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u043a\u0430 \u0435\u0451 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438.\n\n \u041f\u043e\u0445\u043e\u0436\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 Chrome \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438\nGoogle \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e CVE-2025-2783, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u041c\u0418 \u0438 \u0432\u0443\u0437\u043e\u0432.\n\n \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\n\u0421\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u0430\u043a\u043a\u0443\u0440\u0430\u0442\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u043e\u0432 \u2014 \u043d\u043e \u0431\u0435\u0437 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u0434\u0440\u044f\u0434 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u0440\u0435\u043d\u0434 \u0432 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u0430\u0442\u0430\u043a. \u0420\u0438\u0441\u043a \u0432\u044b\u0441\u043e\u043a, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0434\u043b\u044f Windows-\u0441\u0440\u0435\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #firefox #chrome @ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:13.875229Z"}, {"uuid": "c0faa0a5-ed53-49d3-a5ee-d2f71484fa2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "https://t.me/ZerodayAlert/470", "content": "\u0421\u0435\u0440\u0432\u0435\u0440\u044b CrushFTP \u043f\u043e\u0434 \u0447\u0443\u0436\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c\n\n\ud83d\udd13 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e CVSS. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u0435\u0433\u043e \u043b\u0438\u0446\u0430.\n\n\ud83e\udde9 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VulnCheck \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2025-2825, \u043d\u043e MITRE \u043f\u043e\u0437\u0436\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043d\u043e\u043c\u0435\u0440 CVE-2025-31161. \u042d\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c, MITRE \u0438 VulnCheck, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0438 \u0431\u0435\u0437 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83e\udde0 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0435\u0449\u0451 30 \u043c\u0430\u0440\u0442\u0430, \u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b. \u0412\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 AnyDesk, MeshAgent \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Telegram-\u0431\u043e\u0442\u0430.\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0435\u0441\u0442\u0440 KEV \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e \u043e\u0442 \u0432\u0441\u0435\u0445 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 28 \u0430\u043f\u0440\u0435\u043b\u044f. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0440\u0438\u0441\u043a\u043e\u043c \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n#crushftp #cve #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:28.554602Z"}, {"uuid": "5692e1ff-fa93-4f6d-8237-1072318d880f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/cyberwarehouse/758", "content": "CrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog\nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/", "creation_timestamp": "2026-07-26T02:00:13.352305Z"}, {"uuid": "7a7193a5-58f4-497f-bffa-0065c3bba571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/EchelonEyes/3786", "content": "Mozilla \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0432 Chrome\n\nMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2857. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0437\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 Google \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome (CVE-2025-2783), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Kaspersky, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 - \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome. \n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9680), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day", "creation_timestamp": "2026-07-26T02:00:31.430451Z"}, {"uuid": "0accc7f5-3dbf-4e46-9d69-4c5f9caa7946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/cyberwarehouse/758", "content": "CrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog\nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/", "creation_timestamp": "2026-07-27T00:00:29.405528Z"}, {"uuid": "2923f407-ebfa-4655-9297-8fecd24d66b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "seen", "source": "https://t.me/EchelonEyes/3786", "content": "Mozilla \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0432 Chrome\n\nMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2857. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0437\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 Google \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome (CVE-2025-2783), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Kaspersky, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 - \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome. \n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9680), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day", "creation_timestamp": "2026-07-27T00:00:37.166844Z"}, {"uuid": "edaa8128-8a97-4f6c-9bd9-46d1bbc4eaa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2857", "type": "exploited", "source": "https://t.me/EchelonEyes/3786", "content": "Mozilla \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 \u0431\u0430\u0433 \u0432 Chrome\n\nMozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-2857. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0434\u043b\u044f Windows, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0437\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 Google \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome (CVE-2025-2783), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043c\u0435\u0434\u0438\u0430 \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Kaspersky, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 - \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome. \n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432 \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u043d\u0435\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mozilla \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9680), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://therecord.media/firefox-sandbox-vulnerability-similar-chrome-zero-day", "creation_timestamp": "2026-07-28T00:00:52.955561Z"}, {"uuid": "99ea652d-1ce9-45a2-b2cd-994292f7591e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:15:15.930500Z"}, {"uuid": "aa2bd009-4a6f-46b4-89d9-7cdf0786900e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://t.me/xhqcankao/18527", "content": "\u673a\u5668\u4eba\u5236\u9020\u5546\u5b87\u6811\u79d1\u6280\u5728\u4ea7\u54c1\u4e2d\u7559\u6709\u540e\u95e8\n\n\u4e24\u540d\u5b89\u5168\u7814\u7a76\u4eba\u5458\u53d1\u73b0\uff0c\u676d\u5dde\u5b87\u6811\u79d1\u6280\u6709\u9650\u516c\u53f8\u5728\u5176\u6d41\u884c\u7684 Go1\u673a\u5668\u72d7\u4e0a\u9884\u88c5\u4e86\u4e00\u4e2a\u660e\u663e\u7684\u540e\u95e8\uff0c\u8be5\u540e\u95e8\u5141\u8bb8\u4efb\u4f55\u4eba\u76d1\u89c6\u5168\u7403\u7684\u5ba2\u6237\u3002\u65b0\u7684\u901a\u7528\u6f0f\u6d1e\u62ab\u9732\u5217\u8868\u786e\u8ba4\u8be5\u95ee\u9898\u5c5e\u4e8e\u4e25\u91cd\u6f0f\u6d1e\uff0c\u6b63\u5f0f\u7f16\u76ee CVE-2025-2894\u3002\u4efb\u4f55\u53d1\u73b0\u8be5\u516c\u5f00 web API \u7684\u4eba\u90fd\u53ef\u4ee5\u770b\u5230 Go1\u673a\u5668\u72d7\u7684\u4f4d\u7f6e\u3002\u5982\u679c\u673a\u5668\u72d7\u5904\u4e8e\u5728\u7ebf\u72b6\u6001\uff0c\u4ed6\u4eec\u751a\u81f3\u65e0\u9700\u767b\u5f55\u5373\u53ef\u67e5\u770b\u673a\u5668\u72d7\u5b9e\u65f6\u6444\u50cf\u5934\u753b\u9762\u3002\u5982\u679c\u673a\u5668\u72d7\u7684\u9ed8\u8ba4 Raspberry Pi \u51ed\u8bc1\u6ca1\u6709\u66f4\u6539\uff0c\u653b\u51fb\u8005\u4e5f\u53ef\u4ee5\u4f7f\u7528\u8fd9\u4e9b\u51ed\u8bc1\u5b8c\u5168\u63a7\u5236\u673a\u5668\u72d7\u3002\u7814\u7a76\u5458\u8868\u793a\uff0c\u4ed6\u4eec\u65e0\u6cd5\u660e\u786e\u65ad\u5b9a\u5b87\u6811\u79d1\u6280\u662f\u5426\u6709\u610f\u521b\u5efa\u76d1\u63a7\u540e\u95e8\uff0c\u6216\u8005\u8fd9\u4ec5\u4ec5\u662f\u201c\u67b6\u6784\u6df7\u4e71\uff0c\u7f16\u7a0b\u4e0d\u89c4\u8303\u201d\u6240\u81f4\u3002\n\n\u2014\u2014 Axios", "creation_timestamp": "2026-08-29T00:00:32.260661Z"}, {"uuid": "975db99e-02dd-49c2-8ed6-c5757f8da128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/reverseame/5105", "content": "CrushFTP Authentication Bypass - CVE-2025-2825 #CrushFTP #AuthenticationBypass #VulnerabilityResearch #CVE2025-2825 #NucleiTemplate https://projectdiscovery.io/blog/crushftp-authentication-bypass", "creation_timestamp": "2026-07-29T12:02:04.243227Z"}, {"uuid": "2c16792d-f17f-46ae-8e78-37d6839757b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://t.me/xhqcankao/18527", "content": "\u673a\u5668\u4eba\u5236\u9020\u5546\u5b87\u6811\u79d1\u6280\u5728\u4ea7\u54c1\u4e2d\u7559\u6709\u540e\u95e8\n\n\u4e24\u540d\u5b89\u5168\u7814\u7a76\u4eba\u5458\u53d1\u73b0\uff0c\u676d\u5dde\u5b87\u6811\u79d1\u6280\u6709\u9650\u516c\u53f8\u5728\u5176\u6d41\u884c\u7684 Go1\u673a\u5668\u72d7\u4e0a\u9884\u88c5\u4e86\u4e00\u4e2a\u660e\u663e\u7684\u540e\u95e8\uff0c\u8be5\u540e\u95e8\u5141\u8bb8\u4efb\u4f55\u4eba\u76d1\u89c6\u5168\u7403\u7684\u5ba2\u6237\u3002\u65b0\u7684\u901a\u7528\u6f0f\u6d1e\u62ab\u9732\u5217\u8868\u786e\u8ba4\u8be5\u95ee\u9898\u5c5e\u4e8e\u4e25\u91cd\u6f0f\u6d1e\uff0c\u6b63\u5f0f\u7f16\u76ee CVE-2025-2894\u3002\u4efb\u4f55\u53d1\u73b0\u8be5\u516c\u5f00 web API \u7684\u4eba\u90fd\u53ef\u4ee5\u770b\u5230 Go1\u673a\u5668\u72d7\u7684\u4f4d\u7f6e\u3002\u5982\u679c\u673a\u5668\u72d7\u5904\u4e8e\u5728\u7ebf\u72b6\u6001\uff0c\u4ed6\u4eec\u751a\u81f3\u65e0\u9700\u767b\u5f55\u5373\u53ef\u67e5\u770b\u673a\u5668\u72d7\u5b9e\u65f6\u6444\u50cf\u5934\u753b\u9762\u3002\u5982\u679c\u673a\u5668\u72d7\u7684\u9ed8\u8ba4 Raspberry Pi \u51ed\u8bc1\u6ca1\u6709\u66f4\u6539\uff0c\u653b\u51fb\u8005\u4e5f\u53ef\u4ee5\u4f7f\u7528\u8fd9\u4e9b\u51ed\u8bc1\u5b8c\u5168\u63a7\u5236\u673a\u5668\u72d7\u3002\u7814\u7a76\u5458\u8868\u793a\uff0c\u4ed6\u4eec\u65e0\u6cd5\u660e\u786e\u65ad\u5b9a\u5b87\u6811\u79d1\u6280\u662f\u5426\u6709\u610f\u521b\u5efa\u76d1\u63a7\u540e\u95e8\uff0c\u6216\u8005\u8fd9\u4ec5\u4ec5\u662f\u201c\u67b6\u6784\u6df7\u4e71\uff0c\u7f16\u7a0b\u4e0d\u89c4\u8303\u201d\u6240\u81f4\u3002\n\n\u2014\u2014 Axios", "creation_timestamp": "2026-08-28T00:00:06.920257Z"}, {"uuid": "e870e649-4249-4f61-8be9-517d8f425838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://t.me/reverseame/5105", "content": "CrushFTP Authentication Bypass - CVE-2025-2825 #CrushFTP #AuthenticationBypass #VulnerabilityResearch #CVE2025-2825 #NucleiTemplate https://projectdiscovery.io/blog/crushftp-authentication-bypass", "creation_timestamp": "2026-07-30T00:02:15.323137Z"}, {"uuid": "0f6d8d7f-886b-48ce-a60c-cce1731928c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:08.180676Z"}, {"uuid": "7bc8e936-143b-48b1-ae9b-3f73e588f9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:08.275121Z"}, {"uuid": "64280ce4-a912-4c83-84aa-d51ca5344603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:15:12.654794Z"}, {"uuid": "83259ece-f326-4782-97e8-280bf076a60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:08.673163Z"}, {"uuid": "15e72356-bab3-46ab-9935-b477e52e414e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:09.614833Z"}, {"uuid": "c560b65b-0aa0-4126-99cd-96a7cdba372a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Outpost24\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module leverages an authentication bypass in CrushFTP 11 < 11.3.1 and 10 < 10.8.4. Attackers\\n          with knowledge of a valid username can provide a crafted S3 authentication header to the CrushFTP web API\\n          to authenticate as that user without valid credentials. When successfully executed, the exploit will\\n          output working session cookies for the target user account.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/gather/crushftp_authbypass_cve_2025_2825\", \"is_install_path\": true, \"mod_time\": \"2025-04-03 10:24:46 +0000\", \"name\": \"CrushFTP AWS4-HMAC Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"gather/crushftp_authbypass_cve_2025_2825\", \"references\": [\"CVE-2025-2825\", \"URL-https://attackerkb.com/topics/k0EgiL9Psz/cve-2025-2825/rapid7-analysis\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:12.982697Z"}, {"uuid": "d71b94ed-41c5-43ec-8fc4-bea105eb0814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:15:09.238073Z"}]}