{"vulnerability": "2025-46", "sightings": [{"uuid": "6cb62b60-bff1-4c15-87bc-26f568fbc880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/deskmodder.de/post/3lpbbkfrr3g2k", "content": "", "creation_timestamp": "2025-05-16T05:16:00.904418Z"}, {"uuid": "2fea575d-a357-4a7e-b946-f5fc04bb65f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq3qotwzea22", "content": "", "creation_timestamp": "2025-05-26T17:56:09.163256Z"}, {"uuid": "4f0016fe-039a-48e9-889b-a5f732d13ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpj3ov65gzv2", "content": "", "creation_timestamp": "2025-05-19T07:55:24.032379Z"}, {"uuid": "512415a6-a853-46b8-9bdf-95eb34a16fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4693", "type": "seen", "source": "https://bsky.app/profile/silby.bsky.social/post/3lpbesz3np225", "content": "", "creation_timestamp": "2025-05-16T06:14:31.721932Z"}, {"uuid": "512a5bd6-c924-40ed-b30b-7ffa9390fe41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46647", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lt7xtrpnqc52", "content": "", "creation_timestamp": "2025-07-05T14:30:49.221165Z"}, {"uuid": "e5465cdc-b681-4741-8dcf-a388a5765295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq3rjqdhlk2a", "content": "", "creation_timestamp": "2025-05-26T18:11:11.405506Z"}, {"uuid": "c1a6354a-a10a-44a5-b184-b42f0aea2ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4641", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lpbgonpzzs23", "content": "", "creation_timestamp": "2025-05-16T06:47:52.426673Z"}, {"uuid": "b85d6cbe-ffac-43ae-9ad5-35659b3ea477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4603", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpvb2eiandw2", "content": "", "creation_timestamp": "2025-05-24T04:01:23.421338Z"}, {"uuid": "7cedbef0-59e9-4c3e-9a3e-a25d8060264d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46358", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01", "content": "", "creation_timestamp": "2025-07-08T10:00:00.000000Z"}, {"uuid": "25ca52de-51ca-4ab8-80d0-4f40365054ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46801", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lpbgp7tlwk23", "content": "", "creation_timestamp": "2025-05-16T06:48:11.487565Z"}, {"uuid": "eb6d5621-02c1-48f0-926e-b7a7cf002b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4602", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpvb2ovbklj2", "content": "", "creation_timestamp": "2025-05-24T04:02:11.003718Z"}, {"uuid": "98c224fb-e4b6-4181-81c0-d77d2d74ef86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lpbi5mplnk2w", "content": "", "creation_timestamp": "2025-05-16T07:14:10.815954Z"}, {"uuid": "b5b77d34-e746-4157-ace2-b9a221311022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/114516271716011266", "content": "", "creation_timestamp": "2025-05-16T07:14:13.169768Z"}, {"uuid": "5e881e1d-6454-48d8-97c8-0fb0342bff2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/radiosiskofm.fr/post/3lqudv2ngns2h", "content": "", "creation_timestamp": "2025-06-05T12:43:37.241841Z"}, {"uuid": "eae58ec0-24c7-4ced-9dbb-db050ad436f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46704", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08", "content": "", "creation_timestamp": "2025-07-10T10:00:00.000000Z"}, {"uuid": "a3a5a0f8-0634-4bdc-9571-c6e302c9df40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/radiosiskofm.fr/post/3lqudv5onyc2h", "content": "", "creation_timestamp": "2025-06-05T12:43:37.749587Z"}, {"uuid": "051651d1-f742-4e25-8fda-09867a65158e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpblffqd2rs2", "content": "", "creation_timestamp": "2025-05-16T08:12:15.105209Z"}, {"uuid": "542d641a-ed12-4ba6-96e9-94346bc87c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpvl4ovsuz22", "content": "", "creation_timestamp": "2025-05-24T07:00:32.930699Z"}, {"uuid": "533d0b08-4066-477b-9690-e1e0b140fb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa2koxx2p", "content": "", "creation_timestamp": "2025-05-19T09:13:46.191205Z"}, {"uuid": "2461f90e-0d10-4f65-ae56-28ae18e8bd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lpbncfvwgs2t", "content": "", "creation_timestamp": "2025-05-16T08:46:18.543810Z"}, {"uuid": "35f94821-bc34-4d86-b706-61cb879b2181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lpbo5zy6ll2j", "content": "", "creation_timestamp": "2025-05-16T09:01:44.485538Z"}, {"uuid": "eec5de45-c12c-400e-8461-72ed75de4564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4664", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpvsfcvvuz32", "content": "", "creation_timestamp": "2025-05-24T09:11:18.048093Z"}, {"uuid": "2e5631b2-a0b6-4b84-b458-891cf41d3d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lr2sr7li6p2f", "content": "", "creation_timestamp": "2025-06-08T02:25:48.207564Z"}, {"uuid": "be336087-a4a8-4696-a06b-04820df05ff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "861d8322-208e-4a7f-bbed-535ae6773821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46566", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqqkl2lmpn2q", "content": "", "creation_timestamp": "2025-06-04T00:32:34.355629Z"}, {"uuid": "08ca3946-3eeb-4ad8-9596-9a8deb7fd2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46822", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lq433mh2ht2v", "content": "", "creation_timestamp": "2025-05-26T21:02:17.013005Z"}, {"uuid": "bdb453c3-911a-4917-97d7-c22552625cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lqfhir3i222f", "content": "", "creation_timestamp": "2025-05-30T14:38:21.786191Z"}, {"uuid": "4b49a2ca-d144-468f-9500-ada4db2a0d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrellrrifh2s", "content": "", "creation_timestamp": "2025-06-11T23:44:06.937141Z"}, {"uuid": "4fa4a826-075b-4e73-a1ca-53cff2089685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb3njyq5y2l", "content": "", "creation_timestamp": "2025-07-06T01:11:09.941464Z"}, {"uuid": "8bf5f43f-53a5-47cb-a991-5f8a66a12f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lpbrfaglm22h", "content": "", "creation_timestamp": "2025-05-16T09:59:32.728399Z"}, {"uuid": "49ddc4e4-c95c-44f9-af6c-f6ebd03fe130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46807", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114613841197886220", "content": "", "creation_timestamp": "2025-06-02T12:47:07.058122Z"}, {"uuid": "9fd4a353-2374-4ba6-bd83-e369a3b55030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46358", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lti3tu3ut324", "content": "", "creation_timestamp": "2025-07-08T20:03:20.585525Z"}, {"uuid": "d751ceb5-b05b-4af8-acff-f0e0ea032ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4689", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsxtqmvdjc2r", "content": "", "creation_timestamp": "2025-07-02T08:55:46.076753Z"}, {"uuid": "4c42f4aa-779a-43ca-8a35-d9f065ef6591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46806", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmusy63kia2", "content": "", "creation_timestamp": "2025-06-02T13:28:46.880784Z"}, {"uuid": "86c54e41-9750-4034-a60d-8cb208a83ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lreucjorme2g", "content": "", "creation_timestamp": "2025-06-12T02:20:00.317441Z"}, {"uuid": "6a80d617-03d4-4f84-bbc8-a68b823774b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46807", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmutvq4lix2", "content": "", "creation_timestamp": "2025-06-02T13:28:49.765092Z"}, {"uuid": "32e066a0-985b-42ad-b2c7-2933f4bef2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpply3kli62j", "content": "", "creation_timestamp": "2025-05-21T21:59:53.618225Z"}, {"uuid": "f39917bb-2903-4c6e-a7cf-838f9181699e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4654", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsxu4y5ttm2k", "content": "", "creation_timestamp": "2025-07-02T09:02:40.462714Z"}, {"uuid": "ee110c62-defc-4ec2-addd-e0c4ae7fb892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "a084e13c-d0d2-4741-b5f1-f28b2a664f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/mrtechking.bsky.social/post/3lpjitte2uo2h", "content": "", "creation_timestamp": "2025-05-19T11:47:51.860994Z"}, {"uuid": "761e64f0-c4ec-4835-a99e-5769d14b8b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3lquykqnbkk2d", "content": "", "creation_timestamp": "2025-06-05T18:53:38.008600Z"}, {"uuid": "04a0dc79-b75d-42e3-84f0-351e0ef05097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lquylr3voa2r", "content": "", "creation_timestamp": "2025-06-05T18:54:08.976622Z"}, {"uuid": "fcb8544c-9d98-4137-a81d-0aed0df56328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lpjmq7dbbav2", "content": "", "creation_timestamp": "2025-05-19T12:57:30.259562Z"}, {"uuid": "9bde3f06-1173-447e-9cbd-6c7c06084930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46176", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lqbaipb5ocx2", "content": "", "creation_timestamp": "2025-05-28T22:22:38.442318Z"}, {"uuid": "4bdf861c-230c-48ea-a150-34d8b2372ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4682", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3sr4bcy2", "content": "", "creation_timestamp": "2025-05-27T03:36:09.832104Z"}, {"uuid": "02ed5ac9-12a3-42f9-a56c-7a7f73d46f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4683", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3u2kqt52", "content": "", "creation_timestamp": "2025-05-27T03:36:17.866301Z"}, {"uuid": "f95cd3e2-b893-4610-abfb-798e682b57f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lpbvjpamjk2v", "content": "", "creation_timestamp": "2025-05-16T11:13:36.035236Z"}, {"uuid": "8ec246bc-d69b-4f98-8528-ba4eb12683e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lquzpkyxqg2s", "content": "", "creation_timestamp": "2025-06-05T19:14:10.459580Z"}, {"uuid": "64bbef05-cbc9-4637-ad30-83ddd4709c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpbxbi2g3wz2", "content": "", "creation_timestamp": "2025-05-16T11:44:55.213321Z"}, {"uuid": "b67d7d33-3591-4680-abe2-c4ffc683dc37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46647", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltfohpkg2k2e", "content": "", "creation_timestamp": "2025-07-07T20:58:34.763478Z"}, {"uuid": "a60f0ff7-22b4-4764-afe8-b64c758a2f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4664", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpbxm7fduta2", "content": "", "creation_timestamp": "2025-05-16T11:51:19.501228Z"}, {"uuid": "d4fcdde6-1b4b-429c-90b2-d64a96ee98be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpvzlj4tek2k", "content": "", "creation_timestamp": "2025-05-24T11:19:22.792785Z"}, {"uuid": "9750234d-c067-4140-bd62-8ba0def4355a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqv4fgr44h2m", "content": "", "creation_timestamp": "2025-06-05T20:02:11.878217Z"}, {"uuid": "9c3240da-1ce6-4e3a-957e-7a46d651dc1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114517512101338293", "content": "", "creation_timestamp": "2025-05-16T12:29:21.611712Z"}, {"uuid": "bfc495cc-f56a-4aca-ac51-7c134abdf611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114517512490374930", "content": "", "creation_timestamp": "2025-05-16T12:29:27.495750Z"}, {"uuid": "d1c57fd1-afb0-42f8-9134-b03090b66e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4678", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbglpbjzt2m", "content": "", "creation_timestamp": "2025-06-10T17:36:36.263737Z"}, {"uuid": "e19df3be-1548-4092-ad81-eb6737666a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lpbzrnyqfk25", "content": "", "creation_timestamp": "2025-05-16T12:29:35.762417Z"}, {"uuid": "ed7e8ef9-2e6c-4637-8168-91a9084686c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpq2g3g3uw2u", "content": "", "creation_timestamp": "2025-05-22T02:18:16.035663Z"}, {"uuid": "4c2bb1a0-cf0d-4a31-9968-14cc04da74ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbgunogjg2u", "content": "", "creation_timestamp": "2025-06-10T17:41:36.589813Z"}, {"uuid": "ae88bc19-5d40-4d5b-9ecd-d97e188d58b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46041", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrquv7tebj2u", "content": "", "creation_timestamp": "2025-06-16T21:02:29.182342Z"}, {"uuid": "5e9cfa67-9a3f-4a86-bf5e-0ca5a714863f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lrkihwqi7x2q", "content": "", "creation_timestamp": "2025-06-14T08:04:15.686225Z"}, {"uuid": "c82d77c8-8caf-4d54-a47f-a5129c05f5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46647", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lt4acgvqfd2s", "content": "", "creation_timestamp": "2025-07-04T02:51:08.346720Z"}, {"uuid": "73042598-7d7e-4f9a-abd0-8c5439bd01c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/eldinerolat.bsky.social/post/3lrkiig3zsx27", "content": "", "creation_timestamp": "2025-06-14T08:04:31.427871Z"}, {"uuid": "4ac27ee9-ab95-4680-9113-6888811097c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpc3nx5iks2e", "content": "", "creation_timestamp": "2025-05-16T13:03:16.938106Z"}, {"uuid": "3635cec7-d6ec-4980-bd78-c7c9b86215c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lsalzfkqoz2l", "content": "", "creation_timestamp": "2025-06-23T03:06:17.403896Z"}, {"uuid": "9a6981e9-1ac8-4da0-b8e0-6fad0550806e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpwcspxg2k2l", "content": "", "creation_timestamp": "2025-05-24T14:04:31.345801Z"}, {"uuid": "d08920ba-8b11-4818-bc8e-ae53ef18d210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/hackmanac.com/post/3lpjvmsb2a22j", "content": "", "creation_timestamp": "2025-05-19T15:36:45.235689Z"}, {"uuid": "92a4dc6a-06af-427c-8bf3-6618682aa5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpwcy6ehsk2l", "content": "", "creation_timestamp": "2025-05-24T14:07:32.463384Z"}, {"uuid": "b5084ac6-bb7e-4637-b082-5ded69b162ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46093", "type": "seen", "source": "https://gist.github.com/nikolai0x/f61a8bfcdaa244e0c46931d74d10c4ea", "content": "", "creation_timestamp": "2025-06-27T04:15:50.000000Z"}, {"uuid": "70fea0b6-cdf3-4e0f-a168-e313d6651697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4641", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lpjy6g6heq2j", "content": "", "creation_timestamp": "2025-05-19T16:22:12.516753Z"}, {"uuid": "918ecd9b-2625-4d50-ac50-f7c1f3cad9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46094", "type": "seen", "source": "https://gist.github.com/nikolai0x/6d1466d03c5a7f95bf6b362d0b4c6c76", "content": "", "creation_timestamp": "2025-06-27T04:19:03.000000Z"}, {"uuid": "4cbf8c71-8c0f-4294-88ea-0d2a8fc6ae78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4600", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114517919488436129", "content": "", "creation_timestamp": "2025-05-16T14:12:57.976345Z"}, {"uuid": "d2a79def-f46c-48f0-a090-ed15b28f3028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "13b01f5a-5d54-4748-904c-920e53fe6b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lpcasmrubt2x", "content": "", "creation_timestamp": "2025-05-16T14:35:23.222068Z"}, {"uuid": "14dcc0a2-b43a-4a25-b31c-c2659293deb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/217", "content": "", "creation_timestamp": "2025-06-05T17:14:55.000000Z"}, {"uuid": "dc1021c0-7188-4e7c-8c55-606805b8869c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46804", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5bujcdeor2", "content": "", "creation_timestamp": "2025-05-27T08:36:55.850204Z"}, {"uuid": "cd273e91-37f4-4401-b47f-f3828993b275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0169", "content": "", "creation_timestamp": "2025-05-16T10:41:47.000000Z"}, {"uuid": "5a5b8258-acde-4c17-b429-04648e97e799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4670", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcdppylpun2", "content": "", "creation_timestamp": "2025-05-29T08:53:55.800274Z"}, {"uuid": "5c8fc9b9-9367-42ca-8486-6f0e705fe0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4600", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpcizo4hue2e", "content": "", "creation_timestamp": "2025-05-16T17:02:32.516925Z"}, {"uuid": "c457331b-97c5-4434-9ff3-9b7e3aa4b0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lpwyzuamho2d", "content": "", "creation_timestamp": "2025-05-24T20:42:11.086301Z"}, {"uuid": "4c1debd5-94c1-4be0-b88a-a496394f1757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "bd5456ad-da21-4d4d-8fba-66112e552514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpcmxv7njga2", "content": "", "creation_timestamp": "2025-05-16T18:13:07.737287Z"}, {"uuid": "24bbff5d-b6f8-4fe2-b381-920321ccbf83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4631", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zhclzfd2", "content": "", "creation_timestamp": "2025-05-31T07:11:57.796983Z"}, {"uuid": "4729659a-efbc-4a17-b763-72ca3dd7c137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltic6i2wne2z", "content": "", "creation_timestamp": "2025-07-08T21:56:39.001802Z"}, {"uuid": "bd381cac-82e3-4878-8a3f-17bff4424eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpkantusbt52", "content": "", "creation_timestamp": "2025-05-19T18:55:36.919079Z"}, {"uuid": "6a7f150d-f2d1-4cd9-b228-8a9f1d44d656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4607", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zmkxrvd2", "content": "", "creation_timestamp": "2025-05-31T07:12:08.712591Z"}, {"uuid": "4b43fc04-d182-4e02-b9a0-29e9afc7c862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4672", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zoqbpi42", "content": "", "creation_timestamp": "2025-05-31T07:12:29.129286Z"}, {"uuid": "3e02028c-b15f-4034-b1b8-a9dbfe52e0e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqvrhuwwpr2p", "content": "", "creation_timestamp": "2025-06-06T02:19:22.463956Z"}, {"uuid": "3d802d72-bbc7-4509-b06d-11b5a52a05de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsby4zjwjb2v", "content": "", "creation_timestamp": "2025-06-23T16:15:42.735888Z"}, {"uuid": "68838034-4aa6-4357-b8c6-f4ce3b5a0bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqno4glenc2d", "content": "", "creation_timestamp": "2025-06-02T20:58:00.036821Z"}, {"uuid": "1994ece0-6a6c-4784-8602-f6bfa0f2b6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4667", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrl267osbc2u", "content": "", "creation_timestamp": "2025-06-14T13:20:56.194519Z"}, {"uuid": "daacbf06-1ce6-4add-b965-1b57f942859d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4687", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqchx2t7owv2", "content": "", "creation_timestamp": "2025-05-29T10:08:50.871090Z"}, {"uuid": "e599adae-1d6c-408b-815f-5958b1831e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "7931aeb4-3b58-42ea-b85a-ef876a5af99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lr5d4wwubw2a", "content": "", "creation_timestamp": "2025-06-09T02:24:01.315720Z"}, {"uuid": "b38c717e-8510-48fd-ba08-560800a327af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgjffnt2l", "content": "", "creation_timestamp": "2025-05-16T21:02:23.904088Z"}, {"uuid": "ba58d249-37ab-4543-a1a4-2580a06a2157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4631", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqhfzzphrp2p", "content": "", "creation_timestamp": "2025-05-31T09:17:30.017487Z"}, {"uuid": "2bfa896b-7fc1-4abb-9508-fa7c44af7421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://bsky.app/profile/lukasberan.com/post/3ltc4nmntis2o", "content": "", "creation_timestamp": "2025-07-06T11:01:50.726660Z"}, {"uuid": "b63a0a38-ec08-415d-8695-4fab0f1d7280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4631", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114601706669748054", "content": "", "creation_timestamp": "2025-05-31T09:21:08.695467Z"}, {"uuid": "c4a7d97f-3aa9-4dd9-b0c9-f1e7cdb6c5f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://bsky.app/profile/lukasberan.com/post/3ltc4nqfmj22o", "content": "", "creation_timestamp": "2025-07-06T11:01:51.267759Z"}, {"uuid": "6d40f11a-8d65-46f6-a8bf-f58a7d602915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4607", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqhgcyifyb2s", "content": "", "creation_timestamp": "2025-05-31T09:22:30.716467Z"}, {"uuid": "685131b8-4acc-4612-9e00-0106a298d73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://bsky.app/profile/lukasberan.com/post/3ltc4nqfohk2o", "content": "", "creation_timestamp": "2025-07-06T11:01:51.809999Z"}, {"uuid": "ce42b826-a51a-49cc-ba30-02e4f3d628ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/14", "content": "", "creation_timestamp": "2025-07-08T19:35:54.000000Z"}, {"uuid": "b36195a2-c6a6-4c4b-98a2-406da531ec9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpxm5jn2ab2u", "content": "", "creation_timestamp": "2025-05-25T02:24:14.368818Z"}, {"uuid": "87b3a4b9-4adf-440a-bc2e-9b9554b17b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqhglxhhl42e", "content": "", "creation_timestamp": "2025-05-31T09:27:31.619037Z"}, {"uuid": "214104a8-7187-4ac9-af2e-a63d52d8fbb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsycvsiflh2r", "content": "", "creation_timestamp": "2025-07-02T13:27:06.667354Z"}, {"uuid": "127f280f-e35b-482a-9344-9e5765583950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://bsky.app/profile/lukasberan.com/post/3ltc4nqfpgs2o", "content": "", "creation_timestamp": "2025-07-06T11:01:52.360804Z"}, {"uuid": "a0591b73-5915-4e33-8b5e-af50b10f18ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lpdcpphwh42o", "content": "", "creation_timestamp": "2025-05-17T00:42:12.141338Z"}, {"uuid": "e2f73feb-0ca6-4eca-b551-0bf83577d325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46647", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsyd4nwrrx2o", "content": "", "creation_timestamp": "2025-07-02T13:30:55.999145Z"}, {"uuid": "f8195e13-ebe6-419a-9b69-fbf1bec7aef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114520418910056674", "content": "", "creation_timestamp": "2025-05-17T00:48:40.589586Z"}, {"uuid": "6170a668-4718-40d6-ad15-dae5ca0660b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkhhfvp6k2g", "content": "", "creation_timestamp": "2025-05-19T20:55:41.748815Z"}, {"uuid": "2eccfbd0-3917-4499-90f3-01e2e526f807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lpkh5bk5dvj2", "content": "", "creation_timestamp": "2025-05-19T20:57:43.592660Z"}, {"uuid": "6cdc1b04-15f9-4263-b069-29cf79be1cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46653", "type": "seen", "source": "https://gist.github.com/gregory-hive/802f4c8c5bd5becc607c1b7ebd88fcaf", "content": "", "creation_timestamp": "2025-05-22T14:53:41.000000Z"}, {"uuid": "0392f8e3-123d-4d8a-bbed-1bc0f6e5f89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/walknews.bsky.social/post/3lpdoq7zc7u2v", "content": "", "creation_timestamp": "2025-05-17T04:17:14.741472Z"}, {"uuid": "05a0cdc0-2051-4a66-b4c3-386cebcc2e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkhlu7iuc2g", "content": "", "creation_timestamp": "2025-05-19T20:58:10.716167Z"}, {"uuid": "46b77f9f-83c6-462a-9fbe-9efb04479d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkhlu7iuc2g", "content": "", "creation_timestamp": "2025-05-19T20:58:10.812672Z"}, {"uuid": "870efda8-972e-4e3b-8e6b-1607c5a1be5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr5tvcjsf42e", "content": "", "creation_timestamp": "2025-06-09T07:23:58.231476Z"}, {"uuid": "a958fb27-480b-41ec-a0d7-6e726c80e512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lprg5jeozv2y", "content": "", "creation_timestamp": "2025-05-22T15:20:52.848215Z"}, {"uuid": "3102a0e1-1d6a-4b08-95d8-16ff4c3e466b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "9aef5e22-17a9-49bf-b206-19204f284dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lprgg554xs2e", "content": "", "creation_timestamp": "2025-05-22T15:25:42.012318Z"}, {"uuid": "ea7f12fd-602b-43a8-a851-17d3d63fd347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqcnz53ook2m", "content": "", "creation_timestamp": "2025-05-29T11:56:51.853479Z"}, {"uuid": "6ab157b4-2754-4318-b0f7-e81feccab127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46441", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpkigoxswr2v", "content": "", "creation_timestamp": "2025-05-19T21:13:10.109840Z"}, {"uuid": "5a28f4b0-3948-497e-95a2-c498b875ac3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46822", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrltx76q5k2u", "content": "", "creation_timestamp": "2025-06-14T21:02:21.732134Z"}, {"uuid": "7378ec71-4a00-4fe4-8e4b-11564c12ef3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4687", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqcotypviq2a", "content": "", "creation_timestamp": "2025-05-29T12:11:52.679421Z"}, {"uuid": "f91f1af0-37e0-4198-8068-bc4f82408917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46227", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lnfgs7o7yf27", "content": "", "creation_timestamp": "2025-04-22T10:10:07.216060Z"}, {"uuid": "34cf1118-fde6-4a76-90f7-55036546707b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46035", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrgg5g2jhk2s", "content": "", "creation_timestamp": "2025-06-12T17:11:55.547601Z"}, {"uuid": "64306453-fefb-4464-91bd-9f595b11d7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/ksite.de/post/3lpyeniabp62f", "content": "", "creation_timestamp": "2025-05-25T09:42:40.275413Z"}, {"uuid": "05f456a8-f682-44de-984f-44d4d95e773c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/ksite.de/post/3lpyfauhmuj2w", "content": "", "creation_timestamp": "2025-05-25T09:53:30.437063Z"}, {"uuid": "64b9a2ce-4678-4fe8-a9c4-e6caea7380d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46647", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/2", "content": "", "creation_timestamp": "2025-07-02T11:04:26.000000Z"}, {"uuid": "93d8b1dd-1c4d-499c-a7b1-f9790517aebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46229", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lnfhbtxjvp2n", "content": "", "creation_timestamp": "2025-04-22T10:18:51.787342Z"}, {"uuid": "00073eb3-699b-4df3-acc2-88534cf204a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46225", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lnfhz4bs5p27", "content": "", "creation_timestamp": "2025-04-22T10:31:52.260205Z"}, {"uuid": "8b9372c9-7270-4e66-b864-45db8df71fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju4t4tq2c", "content": "", "creation_timestamp": "2025-04-22T11:04:52.614675Z"}, {"uuid": "3c666c5c-cad1-4ef2-8742-c16985b0ad2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju54jrx2l", "content": "", "creation_timestamp": "2025-04-22T11:04:53.281146Z"}, {"uuid": "28c96fe0-519a-4886-b43e-56b68dbddc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju57q4l2y", "content": "", "creation_timestamp": "2025-04-22T11:04:53.870323Z"}, {"uuid": "a83f3248-9556-4522-988f-7a8349cfe2d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46237", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5d3mx2l", "content": "", "creation_timestamp": "2025-04-22T11:04:54.464201Z"}, {"uuid": "29ca07d2-3fee-4deb-887e-68f74d410bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5h2tu2h", "content": "", "creation_timestamp": "2025-04-22T11:04:55.083861Z"}, {"uuid": "d33e7a9b-2caf-4829-bd8e-6342d309cb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5kf6l2g", "content": "", "creation_timestamp": "2025-04-22T11:04:55.698532Z"}, {"uuid": "dc183733-371b-49d8-a859-6e80d0de5f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46254", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5njuz2d", "content": "", "creation_timestamp": "2025-04-22T11:04:56.268721Z"}, {"uuid": "65f848ef-1673-46e2-a2a4-11df396fa7c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5ri6d2r", "content": "", "creation_timestamp": "2025-04-22T11:04:56.868403Z"}, {"uuid": "66cc03b4-815f-40ff-866a-940013a8654f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5ukap2j", "content": "", "creation_timestamp": "2025-04-22T11:04:57.462920Z"}, {"uuid": "9726411b-07ea-4be8-9fe2-5f7a4cb0fef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5xvnh2l", "content": "", "creation_timestamp": "2025-04-22T11:04:58.044190Z"}, {"uuid": "66f644f4-90d3-47cf-8642-ddefd063d27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46236", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju63lpg2v", "content": "", "creation_timestamp": "2025-04-22T11:04:58.638725Z"}, {"uuid": "7d846ab5-b166-44f8-acda-9cbb2761b8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju67qla2c", "content": "", "creation_timestamp": "2025-04-22T11:04:59.176751Z"}, {"uuid": "87cd2e53-b523-4b61-87d9-d75b27aaf3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6cy2d2y", "content": "", "creation_timestamp": "2025-04-22T11:04:59.732942Z"}, {"uuid": "94f170f2-50dd-4c1f-be2e-163e68cd1701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46250", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6gxeu2u", "content": "", "creation_timestamp": "2025-04-22T11:05:00.299153Z"}, {"uuid": "f59be200-6f7a-49f3-b506-9f45c4b7b14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6kgeq2c", "content": "", "creation_timestamp": "2025-04-22T11:05:00.871862Z"}, {"uuid": "3f489f17-a45b-466b-83f3-8aad5227201d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6nwmo2v", "content": "", "creation_timestamp": "2025-04-22T11:05:01.458975Z"}, {"uuid": "e8b6f5d4-0dbb-4f83-a9c4-7f48ba751012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6rdyo2v", "content": "", "creation_timestamp": "2025-04-22T11:05:02.062504Z"}, {"uuid": "7187892c-3e85-41d2-a0a1-c1c0c9230c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6umig2v", "content": "", "creation_timestamp": "2025-04-22T11:05:02.619824Z"}, {"uuid": "87a36972-2b8b-4562-b47b-ba93cebbc4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6y4lx2b", "content": "", "creation_timestamp": "2025-04-22T11:05:03.193179Z"}, {"uuid": "f17b3438-ff7d-464d-b3b1-ea375e40acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju73k7y2c", "content": "", "creation_timestamp": "2025-04-22T11:05:03.744611Z"}, {"uuid": "ee47a0bc-06ff-4198-b207-e3e5e1980810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46241", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114381456600313679", "content": "", "creation_timestamp": "2025-04-22T11:48:39.621037Z"}, {"uuid": "31cc6b8d-d601-4b6b-85c8-fdc1eb38907a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46216", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgqzjp4x2r", "content": "", "creation_timestamp": "2025-04-23T05:14:46.763955Z"}, {"uuid": "bc7a7478-c55c-47de-89e1-295e7867591c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgqzwqun2h", "content": "", "creation_timestamp": "2025-04-23T05:14:48.028225Z"}, {"uuid": "f7c51638-0eba-410f-b6ec-1f5310093c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgr223ec2g", "content": "", "creation_timestamp": "2025-04-23T05:14:48.565050Z"}, {"uuid": "f4ceaaf5-fc39-46e9-b4c1-3c3c7f144795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgr25xkx2r", "content": "", "creation_timestamp": "2025-04-23T05:14:49.169768Z"}, {"uuid": "b0d4fa81-321e-478a-8d36-5ec2de6a0547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgr2axko2t", "content": "", "creation_timestamp": "2025-04-23T05:14:49.753574Z"}, {"uuid": "15c8df4d-5c59-4e7f-987f-c3ea75bcff7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgr2ewls2b", "content": "", "creation_timestamp": "2025-04-23T05:14:50.337438Z"}, {"uuid": "6b38134a-eb91-4f73-a2d7-1fafb7d3e408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgr2ieoo24", "content": "", "creation_timestamp": "2025-04-23T05:14:50.908125Z"}, {"uuid": "5282ebb9-0d20-4599-afbe-5a0260f93b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgr2m34c2b", "content": "", "creation_timestamp": "2025-04-23T05:14:51.476753Z"}, {"uuid": "b68cc8d2-e5ca-4e1e-895d-9aea8c906296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhgr2pjj22v", "content": "", "creation_timestamp": "2025-04-23T05:14:52.056858Z"}, {"uuid": "8c135048-6748-4a4f-818e-0ca33c556129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46221", "type": "seen", "source": "https://infosec.exchange/users/adulau/statuses/114386114067990689", "content": "", "creation_timestamp": "2025-04-23T07:33:08.266779Z"}, {"uuid": "39e96b67-8029-4e49-b609-607cae74766d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "ab2d8340-c016-4134-a0d0-dfe537104e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lprmjzxrss2n", "content": "", "creation_timestamp": "2025-05-22T17:15:15.641577Z"}, {"uuid": "dce7f042-d665-400c-b2ef-faad55a6b098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://bsky.app/profile/justineo.bsky.social/post/3lsv2okawks2r", "content": "", "creation_timestamp": "2025-07-01T06:21:53.196127Z"}, {"uuid": "e3af06ae-9cb7-416a-beb5-221a80b490fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "seen", "source": "https://bsky.app/profile/justineo.bsky.social/post/3lsv2okawks2r", "content": "", "creation_timestamp": "2025-07-01T06:21:53.318618Z"}, {"uuid": "b6c6557d-e467-4fd0-ae3c-3e504c867ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4064350", "content": "", "creation_timestamp": "2025-05-22T18:26:12.282528Z"}, {"uuid": "77ed21bf-b913-4fb3-bd83-808a65e6a561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46078", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcyzk27oqq2", "content": "", "creation_timestamp": "2025-05-29T15:14:09.128113Z"}, {"uuid": "77b19928-d0b9-4a01-bdd7-fc60ac00ba07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lrcduz5r6a2r", "content": "", "creation_timestamp": "2025-06-11T02:20:47.395992Z"}, {"uuid": "3ee77102-1d13-4d9a-8666-67b4cc1ad21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46080", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcyznhq2yn2", "content": "", "creation_timestamp": "2025-05-29T15:14:34.131780Z"}, {"uuid": "5c1c0fc4-df93-4677-90c4-dba1a46acf36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpkzjsdt6u2p", "content": "", "creation_timestamp": "2025-05-20T02:19:08.021541Z"}, {"uuid": "9e1be2f8-3f31-4d58-a971-d676412fc519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lprsr3o6fc2f", "content": "", "creation_timestamp": "2025-05-22T19:06:35.185115Z"}, {"uuid": "c0f22a55-b809-4f52-9268-27a577ff21f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4691", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqho24w4kaj2", "content": "", "creation_timestamp": "2025-05-31T11:40:52.211769Z"}, {"uuid": "b530938c-92f4-4966-a15b-e9971cac7c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46807", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrsdxdbs52s2", "content": "", "creation_timestamp": "2025-06-17T11:04:51.330919Z"}, {"uuid": "441d50c2-ef0a-48cd-91cc-8902cc47da25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46806", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrsdxdbs52s2", "content": "", "creation_timestamp": "2025-06-17T11:04:51.483262Z"}, {"uuid": "fe92c215-7298-48ba-9951-f8fdf68a8141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqgwgl2t", "content": "", "creation_timestamp": "2025-04-23T17:19:26.240626Z"}, {"uuid": "4c619252-c366-4515-b964-2758e3ba70f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqvkiu2d", "content": "", "creation_timestamp": "2025-04-23T17:19:28.706045Z"}, {"uuid": "6db67d9f-ed62-4c6e-81fa-6ee2d5d367ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjsrt7ek2b", "content": "", "creation_timestamp": "2025-04-24T01:14:46.513842Z"}, {"uuid": "95e3ee50-2f4b-42ac-a94f-711a8087044a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjss6q4z2g", "content": "", "creation_timestamp": "2025-04-24T01:14:47.274995Z"}, {"uuid": "7d81ee8a-5055-4b32-be5b-e874a59506b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjssfrly2d", "content": "", "creation_timestamp": "2025-04-24T01:14:48.524076Z"}, {"uuid": "d7a89768-6994-448d-9eeb-f57726b5def0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46400", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjstceyb24", "content": "", "creation_timestamp": "2025-04-24T01:14:51.788793Z"}, {"uuid": "289c1041-90c3-425d-bbce-d43af1fac2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46419", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114390477161060154", "content": "", "creation_timestamp": "2025-04-24T02:02:42.655146Z"}, {"uuid": "019dd62e-31b0-4cf4-9c04-edac3530fa50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46417", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxacgr652s", "content": "", "creation_timestamp": "2025-04-24T05:14:58.735720Z"}, {"uuid": "2d70e94d-b8c7-4e96-ac96-ba91076de1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46376", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxacqkus2u", "content": "", "creation_timestamp": "2025-04-24T05:14:59.353266Z"}, {"uuid": "0c0e9472-d4ca-4320-b1c6-7f73042d1e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46379", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxacu4dt2g", "content": "", "creation_timestamp": "2025-04-24T05:14:59.913304Z"}, {"uuid": "6b4b20f1-8433-4dc6-a657-97f21f3202e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxacxewn24", "content": "", "creation_timestamp": "2025-04-24T05:15:00.445062Z"}, {"uuid": "e60ac5b6-2a6a-40a6-9d6b-f73b8eacb046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxad2uu52b", "content": "", "creation_timestamp": "2025-04-24T05:15:00.988004Z"}, {"uuid": "b374cc66-334f-4a81-aad8-ed7747d9c71a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46380", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxad6kdd2g", "content": "", "creation_timestamp": "2025-04-24T05:15:01.553238Z"}, {"uuid": "a37c5556-0bed-4fb6-ba42-335a18d6da53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46374", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxadbu442b", "content": "", "creation_timestamp": "2025-04-24T05:15:02.107666Z"}, {"uuid": "4b89a8dd-cafa-4d95-96a8-4281fbe67b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46375", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxadfboe2t", "content": "", "creation_timestamp": "2025-04-24T05:15:02.694350Z"}, {"uuid": "b61de2ea-0596-417e-ae2a-5a5465437c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46381", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxadlume2t", "content": "", "creation_timestamp": "2025-04-24T05:15:03.845146Z"}, {"uuid": "243768d3-9075-4b41-a9cb-2d834383b71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxadszak2v", "content": "", "creation_timestamp": "2025-04-24T05:15:04.956152Z"}, {"uuid": "1ffae142-da24-4c93-aed3-74db0055b7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46157", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrvihwunfk23", "content": "", "creation_timestamp": "2025-06-18T17:03:32.312182Z"}, {"uuid": "91ce7d94-f73f-4de0-b3f0-755883d458fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "505ac955-6b85-4eaa-b036-1dfd2e880b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrviqvbfeb2v", "content": "", "creation_timestamp": "2025-06-18T17:08:32.697862Z"}, {"uuid": "a4f88397-8acb-4533-bfb8-1dc9361e91ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lq6bls4wdo2z", "content": "", "creation_timestamp": "2025-05-27T18:03:59.805163Z"}, {"uuid": "3e87264b-1c95-439d-9a54-ebb2bcf98bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqhwrfmab42s", "content": "", "creation_timestamp": "2025-05-31T14:16:54.141965Z"}, {"uuid": "49915967-dca3-470e-bf7e-28c118bd9e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46421", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114393337184532437", "content": "", "creation_timestamp": "2025-04-24T14:10:02.760045Z"}, {"uuid": "f5e2b575-5f49-408e-aa66-a0dad5123e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46421", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4xbh6232", "content": "", "creation_timestamp": "2025-04-24T14:16:48.191819Z"}, {"uuid": "e33127d8-56d7-403c-b180-4cccc4066a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4xahclj2", "content": "", "creation_timestamp": "2025-04-24T14:16:52.141797Z"}, {"uuid": "365c26ad-42ab-400a-ad57-7da494e816f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnl2ovt4bx2t", "content": "", "creation_timestamp": "2025-04-24T15:49:30.305105Z"}, {"uuid": "4465c6a7-0acb-4940-b024-e5cda4b07d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46420", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnl2ow23es2l", "content": "", "creation_timestamp": "2025-04-24T15:49:31.563330Z"}, {"uuid": "ccdf4c23-1c27-4e5f-8662-16c799d609e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46248", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114394195025744587", "content": "", "creation_timestamp": "2025-04-24T17:48:12.629145Z"}, {"uuid": "a98239a7-349d-4d4d-9877-742ea404a9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46264", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114394195062057542", "content": "", "creation_timestamp": "2025-04-24T17:48:13.451497Z"}, {"uuid": "51c4a26e-b986-4bfe-a774-1db28b396879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlcsf7jbw2t", "content": "", "creation_timestamp": "2025-04-24T18:14:37.274690Z"}, {"uuid": "372449c4-4e73-4e4e-830f-927199ed2310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlcsfdgib2b", "content": "", "creation_timestamp": "2025-04-24T18:14:37.884606Z"}, {"uuid": "232e9ed5-cc2e-47fe-9c4c-4514dccf7003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "content": "", "creation_timestamp": "2025-04-24T10:00:00.000000Z"}, {"uuid": "ef757034-e6fb-480f-8265-d8489fb611c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "content": "", "creation_timestamp": "2025-04-24T10:00:00.000000Z"}, {"uuid": "86561520-bf8a-4979-87e0-98bc09e9c06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "content": "", "creation_timestamp": "2025-04-24T10:00:00.000000Z"}, {"uuid": "a226c7bf-12ea-4807-a598-25eb5c9636b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "content": "", "creation_timestamp": "2025-04-24T10:00:00.000000Z"}, {"uuid": "b2286bcf-3dba-4d17-96b7-a4ab7a0d2411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "content": "", "creation_timestamp": "2025-04-24T10:00:00.000000Z"}, {"uuid": "82935a4a-10f5-449f-80b5-742107c3c4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlx7k5i5t2t", "content": "", "creation_timestamp": "2025-04-25T00:19:52.707120Z"}, {"uuid": "85019db7-04b2-41f5-ba73-03d780c4afe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlx7kie7i2y", "content": "", "creation_timestamp": "2025-04-25T00:19:53.341434Z"}, {"uuid": "6f2c3b6a-5a0f-4b6d-bdb9-b2f525c69377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlx7kma362u", "content": "", "creation_timestamp": "2025-04-25T00:19:53.848690Z"}, {"uuid": "b3c929e4-186d-4a28-8ff8-4cc050010366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlx7kpsyc2j", "content": "", "creation_timestamp": "2025-04-25T00:19:54.397740Z"}, {"uuid": "b0068b74-1254-4e8c-9ef5-cf069d3b9486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlx7ktjya2r", "content": "", "creation_timestamp": "2025-04-25T00:19:54.955409Z"}, {"uuid": "f6a4487c-2767-4b81-833b-f1095352e14c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2h2i6ztn2", "content": "", "creation_timestamp": "2025-04-25T01:30:03.826769Z"}, {"uuid": "d5d61249-8f68-4735-b49d-53125b53e97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2h4rzpdq2", "content": "", "creation_timestamp": "2025-04-25T01:30:04.444922Z"}, {"uuid": "9be61de8-c1a9-47c3-b4b8-163e8aec5d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2h5bd5fq2", "content": "", "creation_timestamp": "2025-04-25T01:30:05.061362Z"}, {"uuid": "962d2fc9-d8e8-4100-b7ce-a21da1ac2e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2h6u4cdn2", "content": "", "creation_timestamp": "2025-04-25T01:30:05.750280Z"}, {"uuid": "5f5dc81d-b281-4f96-9ccf-652fcc54176a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2hbz4csq2", "content": "", "creation_timestamp": "2025-04-25T01:30:06.420334Z"}, {"uuid": "ab5782f3-e374-43df-8e18-b16bcd2f180d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114396083148109848", "content": "", "creation_timestamp": "2025-04-25T01:48:23.968793Z"}, {"uuid": "d43d8a5b-445d-423c-a9d2-8a04b4da6404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114396083117632011", "content": "", "creation_timestamp": "2025-04-25T01:48:24.360743Z"}, {"uuid": "6022b9df-c1c7-4e6f-9b15-94440dd23f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114396083215618783", "content": "", "creation_timestamp": "2025-04-25T01:48:25.825504Z"}, {"uuid": "9647f295-e140-46a3-8a3f-76ab7a90192f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114396083184859623", "content": "", "creation_timestamp": "2025-04-25T01:48:26.140771Z"}, {"uuid": "96ab1438-4772-4ea8-bb6f-9a585fc93140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114396083253467428", "content": "", "creation_timestamp": "2025-04-25T01:48:26.473062Z"}, {"uuid": "1a93859a-1a11-4d3f-b3b5-964c85e8cfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46545", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdotkurin2", "content": "", "creation_timestamp": "2025-04-25T04:04:39.594068Z"}, {"uuid": "dca33367-348a-4a3c-94b2-4217b9511efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46547", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdowftehn2", "content": "", "creation_timestamp": "2025-04-25T04:04:40.215661Z"}, {"uuid": "5f1a84f5-6b76-42d0-905a-db5e4c4f764a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46544", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdotlxnjr2", "content": "", "creation_timestamp": "2025-04-25T04:04:40.827977Z"}, {"uuid": "f2fd5381-11d1-4ae2-93a4-be0d6949c14d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46546", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdoxjvfxr2", "content": "", "creation_timestamp": "2025-04-25T04:04:41.515799Z"}, {"uuid": "ae79b4d0-daac-4f82-9279-16fc1f3649be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46595", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdoxt47br2", "content": "", "creation_timestamp": "2025-04-25T04:04:42.123614Z"}, {"uuid": "98614e8b-d197-43c6-9d87-bae62d100378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46547", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmibfp2ff2y", "content": "", "creation_timestamp": "2025-04-25T05:25:08.849236Z"}, {"uuid": "5b901ceb-345b-4f42-8382-5f9a1e3f1aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46545", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmibfyrnx2h", "content": "", "creation_timestamp": "2025-04-25T05:25:09.398834Z"}, {"uuid": "dae3c134-3145-428e-b570-7e98178da2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmibg3om22d", "content": "", "creation_timestamp": "2025-04-25T05:25:09.975458Z"}, {"uuid": "39ef15df-f494-4658-b513-dd06b2c3b9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46544", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmibg7ob42b", "content": "", "creation_timestamp": "2025-04-25T05:25:10.541344Z"}, {"uuid": "49163064-02ec-4901-b71a-92eaf99072c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46546", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmibgdeqg24", "content": "", "creation_timestamp": "2025-04-25T05:25:11.111139Z"}, {"uuid": "62a7450b-2528-40f3-aff3-f13ca92dbba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46599", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmiyzwz5qs2", "content": "", "creation_timestamp": "2025-04-25T05:42:37.248066Z"}, {"uuid": "ab1e1e21-6b1d-4d1e-88be-705216712b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46613", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxtnpo7z2", "content": "", "creation_timestamp": "2025-04-25T07:07:22.544474Z"}, {"uuid": "c28fa0c4-6e58-4e73-baf2-f5c0145995ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxzjsx432", "content": "", "creation_timestamp": "2025-04-25T07:07:24.771883Z"}, {"uuid": "265d3f50-e71e-441e-8c2b-3cf51fe3f8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmobfwqrcz2", "content": "", "creation_timestamp": "2025-04-25T07:12:41.844890Z"}, {"uuid": "26e5baf5-712d-4362-a71f-2dac069de7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46248", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnmrivhypc2z", "content": "", "creation_timestamp": "2025-04-25T08:10:24.832108Z"}, {"uuid": "23743fae-8e12-475f-953f-8691b4feb7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnms2m33jg2y", "content": "", "creation_timestamp": "2025-04-25T08:20:18.262254Z"}, {"uuid": "033d48a7-aabd-49fa-be3a-1b557149f9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmvfxvxdt24", "content": "", "creation_timestamp": "2025-04-25T09:20:20.843495Z"}, {"uuid": "eb740f52-892e-4ac7-816b-884f7b7fdf2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46482", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmvfycwv32v", "content": "", "creation_timestamp": "2025-04-25T09:20:21.492482Z"}, {"uuid": "31b34a63-d3d1-43b9-a338-347cf9d6f8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46535", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnmvfyg7zs2b", "content": "", "creation_timestamp": "2025-04-25T09:20:22.039176Z"}, {"uuid": "3f83439a-5ab4-430b-8a38-46e4bbb3cdc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114397971373382349", "content": "", "creation_timestamp": "2025-04-25T09:48:34.851722Z"}, {"uuid": "1fa14897-ccc6-466f-8293-90139e91dedd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46535", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmxlksra4b2", "content": "", "creation_timestamp": "2025-04-25T10:44:57.138003Z"}, {"uuid": "3e2e9f88-db3e-41c9-996e-e25f1e086510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46482", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmxllcdipj2", "content": "", "creation_timestamp": "2025-04-25T10:44:57.677789Z"}, {"uuid": "91ea6996-d5d7-4057-a75a-874e13595b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnnabrq53a25", "content": "", "creation_timestamp": "2025-04-25T12:34:51.200821Z"}, {"uuid": "a56e4804-c385-4b70-bf8f-ede8ee67e341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114398817254860717", "content": "", "creation_timestamp": "2025-04-25T13:23:41.981689Z"}, {"uuid": "941a9a35-e506-495d-bd0a-42b614c6c3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnnmtsbwyy2b", "content": "", "creation_timestamp": "2025-04-25T16:19:41.958267Z"}, {"uuid": "afef6687-5442-49ff-87c3-bb3216b5dd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46618", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq763sed24", "content": "", "creation_timestamp": "2025-04-25T17:19:46.247368Z"}, {"uuid": "1f03f83c-df59-4624-b8c3-dce3d52c3e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76nkbl2r", "content": "", "creation_timestamp": "2025-04-25T17:19:49.346478Z"}, {"uuid": "f452312d-2748-422a-8a25-794259ec2174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq777c2d2g", "content": "", "creation_timestamp": "2025-04-25T17:19:52.355355Z"}, {"uuid": "83ebf858-b72b-4de6-8111-6d874101a591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46333", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedfwzl62y", "content": "", "creation_timestamp": "2025-04-25T23:20:03.629302Z"}, {"uuid": "35860804-f66f-450e-87fa-50b503c83379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "2479deb0-4b5d-44b8-8d4d-8a6caab54403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/googlediscovery.com/post/3lpefne4xvq2d", "content": "", "creation_timestamp": "2025-05-17T11:07:15.020218Z"}, {"uuid": "8cff971c-cdd6-4d1d-bd4d-33a442f2cb6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lpehltdw3c2n", "content": "", "creation_timestamp": "2025-05-17T11:42:10.326351Z"}, {"uuid": "2b061546-ef39-4fc5-a4a5-699367d7f47a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46646", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnq2rakus2f2", "content": "", "creation_timestamp": "2025-04-26T15:34:14.130304Z"}, {"uuid": "75176a69-c08d-4f8b-ac5b-15c2ed39b363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46652", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqfa6ttpim2", "content": "", "creation_timestamp": "2025-04-26T18:41:30.154626Z"}, {"uuid": "7077adb8-a78f-4da9-a47b-1c458baf0734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnqhwzeutt2a", "content": "", "creation_timestamp": "2025-04-26T19:29:59.288525Z"}, {"uuid": "9f69dc61-cd60-4a5f-9ff4-0e848af10a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnqowpuzzi2d", "content": "", "creation_timestamp": "2025-04-26T21:35:07.086545Z"}, {"uuid": "88b53d97-e26d-4788-956c-d289c170e26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46655", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqow3d5lqo2", "content": "", "creation_timestamp": "2025-04-26T21:37:08.903640Z"}, {"uuid": "9c13bcb4-b5d8-43ba-b795-63da9aed4c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46656", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqowbwrl5o2", "content": "", "creation_timestamp": "2025-04-26T21:37:09.476579Z"}, {"uuid": "f2332fbe-0891-4d1c-8d8a-4e3a1c4862ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46653", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqow6bsi772", "content": "", "creation_timestamp": "2025-04-26T21:37:10.185429Z"}, {"uuid": "cb0c4394-3e2f-4c66-aa72-6c49a42b1152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46654", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqow6hszp72", "content": "", "creation_timestamp": "2025-04-26T21:37:10.850227Z"}, {"uuid": "f83b140a-b696-4fe7-8955-e42e66de0b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46654", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvni5g5b2b", "content": "", "creation_timestamp": "2025-04-26T23:35:11.754745Z"}, {"uuid": "648a4f8b-2e9e-4949-a698-ebdd59fbea69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46655", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvnijvzm2r", "content": "", "creation_timestamp": "2025-04-26T23:35:13.038863Z"}, {"uuid": "11b8381d-8d73-48d8-ac98-e4c263b1754a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvnimmnb2y", "content": "", "creation_timestamp": "2025-04-26T23:35:13.592223Z"}, {"uuid": "8d27d665-8a40-4939-abfa-93544c6dacd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvniqhjb2b", "content": "", "creation_timestamp": "2025-04-26T23:35:14.227205Z"}, {"uuid": "7d09863d-7ac0-4e60-9c52-79e6f80ab3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46672", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114407408963291150", "content": "", "creation_timestamp": "2025-04-27T01:48:41.127277Z"}, {"uuid": "8b778c68-417e-4145-a69d-2285cca80664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46673", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114407408963291150", "content": "", "creation_timestamp": "2025-04-27T01:48:41.218005Z"}, {"uuid": "416b31a5-8a44-4058-a5a3-3a5404f997e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46674", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114407408963291150", "content": "", "creation_timestamp": "2025-04-27T01:48:41.302166Z"}, {"uuid": "72431ffc-9c92-4f6f-94f5-3eb0a580dfc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46675", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114407408963291150", "content": "", "creation_timestamp": "2025-04-27T01:48:41.388219Z"}, {"uuid": "2c2a22f7-3536-4452-b965-adc97feabf0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2z2ml42g", "content": "", "creation_timestamp": "2025-04-27T03:35:24.332693Z"}, {"uuid": "f1ec5dc7-3715-4886-b1ba-b76c090a56d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46675", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2zjq3u2r", "content": "", "creation_timestamp": "2025-04-27T03:35:25.604448Z"}, {"uuid": "979f8aa5-75aa-4dbd-90e4-3c3a0ff10dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2zne3z2b", "content": "", "creation_timestamp": "2025-04-27T03:35:26.182108Z"}, {"uuid": "e9c8c04e-702e-4ccf-9ac9-5617c6c8e279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46576", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2zpzqp2s", "content": "", "creation_timestamp": "2025-04-27T03:35:26.819645Z"}, {"uuid": "3c0f38f3-373a-449e-95dc-78e5dfa88a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2ztzwq24", "content": "", "creation_timestamp": "2025-04-27T03:35:27.440718Z"}, {"uuid": "0915cabc-f00f-48c1-bce6-4ce54262dd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2zx3dm2j", "content": "", "creation_timestamp": "2025-04-27T03:35:27.998942Z"}, {"uuid": "99cefcbe-717b-45d1-9f81-2b598954b6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46580", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd323bfz2b", "content": "", "creation_timestamp": "2025-04-27T03:35:28.625223Z"}, {"uuid": "eb5d6017-27b1-4db9-a41e-4484d460dde6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46574", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd326pmn2h", "content": "", "creation_timestamp": "2025-04-27T03:35:29.233089Z"}, {"uuid": "d43d0dac-4b01-47d1-9471-7cf0b5798f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd32bvfu2g", "content": "", "creation_timestamp": "2025-04-27T03:35:29.875420Z"}, {"uuid": "3338ec76-9346-40fe-b920-e7f54dba7bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46578", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd32faqr2b", "content": "", "creation_timestamp": "2025-04-27T03:35:30.458203Z"}, {"uuid": "f6b5a0ec-2b1f-4ec4-afe0-096ffd2a6981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46674", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd32im6b2b", "content": "", "creation_timestamp": "2025-04-27T03:35:31.074289Z"}, {"uuid": "a9c72e81-c00e-4c98-a82f-6878c6f134de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46579", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114407881036637438", "content": "", "creation_timestamp": "2025-04-27T03:48:44.578954Z"}, {"uuid": "e750a759-a480-4ce8-81d2-4ee856849491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46580", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgaqi5i4k2", "content": "", "creation_timestamp": "2025-04-27T04:40:03.949946Z"}, {"uuid": "b0cac42e-85ea-4588-84d4-904d1bfbad5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46579", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgarfkurk2", "content": "", "creation_timestamp": "2025-04-27T04:40:04.469409Z"}, {"uuid": "1d627f3e-2922-4e11-acb7-c1914995a16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46578", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgasbciv72", "content": "", "creation_timestamp": "2025-04-27T04:40:04.990119Z"}, {"uuid": "10da6c94-2d44-44b5-b280-6b2715e0c6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46577", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgatdj4p72", "content": "", "creation_timestamp": "2025-04-27T04:40:05.540209Z"}, {"uuid": "ff96644e-62aa-4a0c-9a88-359a20d9b9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46576", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgavg4fj72", "content": "", "creation_timestamp": "2025-04-27T04:40:06.128788Z"}, {"uuid": "7fa5ac38-8b12-465d-9fc8-d47ab2c6f0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46575", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgawuifp62", "content": "", "creation_timestamp": "2025-04-27T04:40:06.695456Z"}, {"uuid": "51bb05cd-947c-4a66-9dd2-2506e1b3763a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46574", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgaxjzz7k2", "content": "", "creation_timestamp": "2025-04-27T04:40:07.236170Z"}, {"uuid": "fabed122-0622-42e7-8f7f-901a24c6c8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46672", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgb244k362", "content": "", "creation_timestamp": "2025-04-27T04:40:08.352992Z"}, {"uuid": "d9dcd360-47e7-44bc-a55e-14d569739998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46355", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxt62uvvi2", "content": "", "creation_timestamp": "2025-06-03T09:28:12.358938Z"}, {"uuid": "5165f1a8-9abf-440e-bf6b-731780476455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4669", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpemg4jmh42h", "content": "", "creation_timestamp": "2025-05-17T13:08:28.528329Z"}, {"uuid": "1103be78-d5e7-49ec-9aa6-ecb1c198a613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46173", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6j7vo77go2", "content": "", "creation_timestamp": "2025-05-27T20:20:38.451506Z"}, {"uuid": "59d9d545-e7a5-45b1-9e11-3995729d7100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpepzq7sis2c", "content": "", "creation_timestamp": "2025-05-17T14:13:06.969234Z"}, {"uuid": "7b68382c-1b95-4dff-b97f-da87e4ce98f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46657", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnsyy5swpj2d", "content": "", "creation_timestamp": "2025-04-27T19:40:10.669262Z"}, {"uuid": "12014d5d-79a0-45ae-aa86-98b0aa53d50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46687", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7owjlu72a", "content": "", "creation_timestamp": "2025-04-27T21:40:20.089042Z"}, {"uuid": "e379229a-94be-40ff-9b4a-8daa011c6f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46688", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7ox45mx2j", "content": "", "creation_timestamp": "2025-04-27T21:40:22.999724Z"}, {"uuid": "acf8706b-3e89-4ba8-b130-cf1770c21880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46722", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdcfkkdvo32", "content": "", "creation_timestamp": "2025-05-29T18:02:03.492438Z"}, {"uuid": "d5005752-8434-465a-9263-b52ee222ff54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lpevytnwg22y", "content": "", "creation_timestamp": "2025-05-17T16:00:05.636140Z"}, {"uuid": "f310f77b-e7eb-490b-a490-7994a1dd1070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46570", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdcp3xzobo2", "content": "", "creation_timestamp": "2025-05-29T18:07:54.044812Z"}, {"uuid": "050eb567-e2e7-4615-8be3-72bf3e8e28ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4610", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpezabvragj2", "content": "", "creation_timestamp": "2025-05-17T17:01:21.187588Z"}, {"uuid": "c4b155b0-727f-4f97-8f51-027335a0a9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lps3xo6ksc2d", "content": "", "creation_timestamp": "2025-05-22T21:51:20.791596Z"}, {"uuid": "d6507ac8-8f26-43b0-a303-84cabd235698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46823", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdff6ajfvw2", "content": "", "creation_timestamp": "2025-05-29T18:57:39.990674Z"}, {"uuid": "e9ebe4e9-73ce-40c3-a651-87047f62591a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46352", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-148-03", "content": "", "creation_timestamp": "2025-05-29T10:00:00.000000Z"}, {"uuid": "4b78e113-e1e8-45d4-ab92-0d230ea73e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4666", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrcpumc6v42m", "content": "", "creation_timestamp": "2025-06-11T05:55:18.656599Z"}, {"uuid": "5de9a596-1520-4238-a415-d7ce6b4f2346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lpsetlwmjv2y", "content": "", "creation_timestamp": "2025-05-23T00:30:06.276828Z"}, {"uuid": "f6e6f062-4a0b-4be0-9c4d-b711acc81b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltir3535up2c", "content": "", "creation_timestamp": "2025-07-09T02:23:13.543882Z"}, {"uuid": "fac7c2c1-b782-4578-b478-b5cebcdd7ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnuvd7x4ke2a", "content": "", "creation_timestamp": "2025-04-28T13:40:09.788527Z"}, {"uuid": "07af83be-8852-422a-88b5-10c18bf231db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114416374724829885", "content": "", "creation_timestamp": "2025-04-28T15:48:50.642670Z"}, {"uuid": "46f63b18-39ae-447b-b821-3d7675fafc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46661", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114416525144211897", "content": "", "creation_timestamp": "2025-04-28T16:27:03.100109Z"}, {"uuid": "4e30acf5-9775-47eb-81ac-3d4b896f1d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lnv6ntrds22g", "content": "", "creation_timestamp": "2025-04-28T16:27:12.389504Z"}, {"uuid": "5f3e8e8c-e6b4-41b7-bced-f9acc70bbfab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46614", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzd4tqc2a", "content": "", "creation_timestamp": "2025-04-28T19:50:24.670633Z"}, {"uuid": "85d8c476-a1c9-4d0e-822d-42a0b2268fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnvvm6qvwd2i", "content": "", "creation_timestamp": "2025-04-28T23:17:47.000879Z"}, {"uuid": "55e9c2c1-7a40-4bb6-8480-c25ba1120c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46327", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5ugpdl2d", "content": "", "creation_timestamp": "2025-04-28T23:45:34.549373Z"}, {"uuid": "9605a337-4311-4957-8056-e9c677d0faa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46326", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5ukaaw2l", "content": "", "creation_timestamp": "2025-04-28T23:45:35.077150Z"}, {"uuid": "fdf6019b-d68a-4638-a6dd-a9b599060989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46328", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5vjscz2s", "content": "", "creation_timestamp": "2025-04-28T23:45:39.867355Z"}, {"uuid": "e90fb795-3ffa-4bcb-a514-64f9cab2da1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114592847077746070", "content": "", "creation_timestamp": "2025-05-29T19:48:02.189021Z"}, {"uuid": "1e54d52a-1c3a-440f-926b-93f17b4b9af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnw4x3c5os2t", "content": "", "creation_timestamp": "2025-04-29T01:29:09.430782Z"}, {"uuid": "b07ca992-4e3f-4ad3-b7e7-ffa2406446bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnw4x3c5os2t", "content": "", "creation_timestamp": "2025-04-29T01:29:09.524915Z"}, {"uuid": "7bdf7a75-1754-49b6-a1e9-9105c0a3d463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuecl4r2d", "content": "", "creation_timestamp": "2025-04-29T03:50:48.600516Z"}, {"uuid": "0fdb59e4-1f33-442f-90ef-9173c85f0c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweueg44v2a", "content": "", "creation_timestamp": "2025-04-29T03:50:49.207592Z"}, {"uuid": "36d747f0-0b02-489a-9ced-f68b9331afc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuemz6q2h", "content": "", "creation_timestamp": "2025-04-29T03:50:50.379405Z"}, {"uuid": "b78e186d-f348-4e14-84d2-90c05a822efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuepuqi2b", "content": "", "creation_timestamp": "2025-04-29T03:50:50.997474Z"}, {"uuid": "c77c82eb-e234-42a7-99d1-91b6d0c43ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuf3pva2h", "content": "", "creation_timestamp": "2025-04-29T03:50:52.840424Z"}, {"uuid": "6175906e-c3b4-4cce-89a9-3eb00f57b9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweufbzz32s", "content": "", "creation_timestamp": "2025-04-29T03:50:54.070672Z"}, {"uuid": "29dca842-89ca-45be-8538-053fc00ea0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweufjcez2d", "content": "", "creation_timestamp": "2025-04-29T03:50:55.326332Z"}, {"uuid": "2a06c113-a36a-49c0-a91b-c3ef1b317372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweufqooh2u", "content": "", "creation_timestamp": "2025-04-29T03:50:56.519195Z"}, {"uuid": "39c6c069-a543-4f39-a622-94554a8d8437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnweufufvu2r", "content": "", "creation_timestamp": "2025-04-29T03:50:57.135682Z"}, {"uuid": "63b9304b-0144-49a0-a29e-a344cbeab205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbtyfdb2b", "content": "", "creation_timestamp": "2025-04-29T07:50:58.557452Z"}, {"uuid": "e36f9f98-fa5c-4452-aa8e-a099fdeb5ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46338", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbubr4z2b", "content": "", "creation_timestamp": "2025-04-29T07:50:59.185194Z"}, {"uuid": "dc043eca-6a44-4196-aa2c-533561ca1108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46343", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbufr4n2v", "content": "", "creation_timestamp": "2025-04-29T07:50:59.743778Z"}, {"uuid": "3ac78a11-4d19-4fa8-90d3-d420e917b1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46822", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lpyhte3hkr22", "content": "", "creation_timestamp": "2025-05-25T10:39:38.211827Z"}, {"uuid": "3f3abb28-be05-4168-aea0-9e3b203170fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "8bb249e8-5a13-47b8-a8e9-a4ff256b589d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdjbxiugvg2", "content": "", "creation_timestamp": "2025-05-29T20:05:22.219185Z"}, {"uuid": "b6b42b0e-abd4-4520-b5f2-24773c16861e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpsoe5oluc2a", "content": "", "creation_timestamp": "2025-05-23T03:20:25.202815Z"}, {"uuid": "fd9c219a-8dc4-48aa-82dd-585e6212c2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqdk7ivhmf2a", "content": "", "creation_timestamp": "2025-05-29T20:21:29.884233Z"}, {"uuid": "e59b8c46-aae3-4351-845b-df9e2d13366f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lnx7kxbyys2m", "content": "", "creation_timestamp": "2025-04-29T11:48:43.497787Z"}, {"uuid": "673478f9-938c-49f0-9461-5af791dadf17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lnx7kxbyys2m", "content": "", "creation_timestamp": "2025-04-29T11:48:43.591685Z"}, {"uuid": "acf43800-27a6-4106-9a5d-847de10d87a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46350", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ikh2fj2n", "content": "", "creation_timestamp": "2025-04-29T19:50:36.159630Z"}, {"uuid": "376929c2-4aa4-4560-a4a1-5464b4deb65b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lny2il475r2n", "content": "", "creation_timestamp": "2025-04-29T19:50:39.340201Z"}, {"uuid": "28077c4d-bcea-4f72-a5b8-a7ea00925ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46347", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ilg6ii22", "content": "", "creation_timestamp": "2025-04-29T19:50:41.213089Z"}, {"uuid": "4f102d5a-5ef4-4608-bd8b-ba71be29c0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46348", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114423300046150064", "content": "", "creation_timestamp": "2025-04-29T21:10:02.200161Z"}, {"uuid": "902296b7-4137-4946-9756-92cbdf83ed66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46348", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114423451055151081", "content": "", "creation_timestamp": "2025-04-29T21:48:24.256606Z"}, {"uuid": "1182ff52-6f27-4b53-a7a6-416c8e43ecf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46549", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw2nbkw24", "content": "", "creation_timestamp": "2025-04-29T23:50:46.177699Z"}, {"uuid": "3fddb2e7-afd8-4f06-89c1-dcde7bb47fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46344", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw375k32t", "content": "", "creation_timestamp": "2025-04-29T23:50:49.248935Z"}, {"uuid": "fd26cbb6-41df-45f1-9af8-d1f297060665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46550", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw3mny32u", "content": "", "creation_timestamp": "2025-04-29T23:50:51.760443Z"}, {"uuid": "67c20516-37cf-4d3b-a772-27701e5b9942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46552", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw3q7dj2p", "content": "", "creation_timestamp": "2025-04-29T23:50:52.373560Z"}, {"uuid": "3e456a5e-ea93-4679-a8a5-783d29ea9adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw3tqn52n", "content": "", "creation_timestamp": "2025-04-29T23:50:52.977640Z"}, {"uuid": "bcb52e1a-62e5-4ecf-8026-7d9ccf762b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46348", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnykwiebkd2g", "content": "", "creation_timestamp": "2025-04-30T00:44:40.636835Z"}, {"uuid": "337d6194-9a04-4cdb-9592-836c39ca67bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46560", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyvdljsau24", "content": "", "creation_timestamp": "2025-04-30T03:50:58.343346Z"}, {"uuid": "5aa42f42-09c5-4972-9b16-785908aa55a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnz4dcqsts2p", "content": "", "creation_timestamp": "2025-04-30T05:56:06.627431Z"}, {"uuid": "27d1b5c2-4fba-4aa5-a94c-ac4f453084c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnz4defvc422", "content": "", "creation_timestamp": "2025-04-30T05:56:07.231367Z"}, {"uuid": "b3671541-798f-490c-86b7-9475af0b3e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnz4dejhrz24", "content": "", "creation_timestamp": "2025-04-30T05:56:07.759342Z"}, {"uuid": "3089e014-6edc-4c6e-acd7-6ae0c7c7bbb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnz4dencfc2p", "content": "", "creation_timestamp": "2025-04-30T05:56:08.274492Z"}, {"uuid": "e6923859-57ee-47d1-860f-d0dfb6effe13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnz4deqmtl2h", "content": "", "creation_timestamp": "2025-04-30T05:56:08.915220Z"}, {"uuid": "85f76b41-26b2-4087-b0a1-a1ff5f87727b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lpmcnvbq3s26", "content": "", "creation_timestamp": "2025-05-20T14:35:10.496576Z"}, {"uuid": "df5aa040-dd0f-4af8-9509-23d1baf80811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lqjuborwof25", "content": "", "creation_timestamp": "2025-06-01T08:37:39.428013Z"}, {"uuid": "42628e7d-b777-4a5c-889c-a0cbc454c501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46035", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114674439855906623", "content": "", "creation_timestamp": "2025-06-13T05:38:09.013426Z"}, {"uuid": "f08f2ed8-2e81-4773-8708-fc4364d770cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46724", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqdo2hm5ys25", "content": "", "creation_timestamp": "2025-05-29T21:30:15.895588Z"}, {"uuid": "aa7bbd69-d55c-49ad-a309-c0641e26f427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46342", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114427698692598891", "content": "", "creation_timestamp": "2025-04-30T15:48:38.743492Z"}, {"uuid": "1949ad2d-a3be-41c9-aa14-5a8963ff36d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46342", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114427741773438031", "content": "", "creation_timestamp": "2025-04-30T15:59:35.475037Z"}, {"uuid": "07224403-70a0-47d9-86d2-e141a9e7df8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo27rucdv72h", "content": "", "creation_timestamp": "2025-04-30T16:30:35.627251Z"}, {"uuid": "b69383c5-0d28-4c9c-bde3-1576b8cf5f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46619", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114428315490579118", "content": "", "creation_timestamp": "2025-04-30T18:25:29.406572Z"}, {"uuid": "ed6da2be-c364-46f0-a8da-095c455f6226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46558", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114428642542388304", "content": "", "creation_timestamp": "2025-04-30T19:48:40.959612Z"}, {"uuid": "b73a1352-c4e4-4d76-adcb-404006537aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46558", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo2n7ext6a2t", "content": "", "creation_timestamp": "2025-04-30T20:30:48.170858Z"}, {"uuid": "8510c296-4efd-4b31-9347-32c4ad1dd6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "710d662c-d5f4-40bd-91fa-041d8b18842c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/184", "content": "", "creation_timestamp": "2025-05-29T18:11:40.000000Z"}, {"uuid": "6dfa505a-03c5-4dee-924d-6aaed73193c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqxcx576fr2g", "content": "", "creation_timestamp": "2025-06-06T17:04:47.684400Z"}, {"uuid": "0d91578e-05ba-402c-9e36-4510551b3853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46339", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsq5nx4xkg2", "content": "", "creation_timestamp": "2025-06-04T21:18:01.389854Z"}, {"uuid": "b29049d4-c602-49c7-a9cd-4c6b34cf1f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114433867704399481", "content": "", "creation_timestamp": "2025-05-01T17:57:29.936935Z"}, {"uuid": "05947d3e-c6a5-4ec6-b922-77df2194ccd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo55xlkcaz2l", "content": "", "creation_timestamp": "2025-05-01T20:35:57.953243Z"}, {"uuid": "bb009c11-6439-4fbc-81c2-1726b348ff80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpopkn22o", "content": "", "creation_timestamp": "2025-05-01T22:01:01.209675Z"}, {"uuid": "a59db521-add2-4a82-9a2c-6e09ca6eff5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpp4fve22", "content": "", "creation_timestamp": "2025-05-01T22:01:02.633675Z"}, {"uuid": "b03c1b7c-2a30-48c8-acfc-06d19fb5ffd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46628", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpp7q6w2r", "content": "", "creation_timestamp": "2025-05-01T22:01:03.257096Z"}, {"uuid": "ce66f58d-0d04-42e6-9d07-e34f11eb643a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46633", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppd7hh2h", "content": "", "creation_timestamp": "2025-05-01T22:01:03.876405Z"}, {"uuid": "20bf170d-c1a1-4711-a110-1653b83a9dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46626", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppglqz2h", "content": "", "creation_timestamp": "2025-05-01T22:01:04.472848Z"}, {"uuid": "e0a3b03b-d9d1-4372-8ea1-8df813062fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46629", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppjzcs2o", "content": "", "creation_timestamp": "2025-05-01T22:01:05.054531Z"}, {"uuid": "c7984002-e355-4a1e-9449-c5ce1c510dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46632", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppngbg2j", "content": "", "creation_timestamp": "2025-05-01T22:01:07.399090Z"}, {"uuid": "9c3cfd5f-d6be-4685-9c1c-248d445ceeee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46634", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptgga32p", "content": "", "creation_timestamp": "2025-05-01T22:01:08.500552Z"}, {"uuid": "67d81132-91b7-4633-859a-266b2f4f6077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptjouu2l", "content": "", "creation_timestamp": "2025-05-01T22:01:09.134523Z"}, {"uuid": "851eeaa7-b90f-4750-9067-9eb395eee7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46631", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptmzd42l", "content": "", "creation_timestamp": "2025-05-01T22:01:09.836827Z"}, {"uuid": "45ef03c6-abb4-4105-ba81-f9361513a769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpttur72p", "content": "", "creation_timestamp": "2025-05-01T22:01:11.446613Z"}, {"uuid": "f069c00f-a856-4bed-ba2c-8b5f8034fbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46630", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptx5vg2r", "content": "", "creation_timestamp": "2025-05-01T22:01:11.962697Z"}, {"uuid": "d7643a81-1e14-4d6b-b772-b0188c881b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4671", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpbj44u5hy2", "content": "", "creation_timestamp": "2025-06-03T12:17:48.587305Z"}, {"uuid": "51aaecbd-9c59-47d7-bb80-028c8e3e0073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46619", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lo5vx5oqij23", "content": "", "creation_timestamp": "2025-05-02T03:45:12.854939Z"}, {"uuid": "2b8492d8-cc47-40d8-96f3-ce366b0861c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lo6gyxg7fs2t", "content": "", "creation_timestamp": "2025-05-02T08:50:27.005050Z"}, {"uuid": "16da26f4-4fc9-4a72-aae4-37a61906c25e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46341", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsq64pjlt42", "content": "", "creation_timestamp": "2025-06-04T21:18:13.583415Z"}, {"uuid": "7497809a-ab46-4965-88f0-9a5a285f74f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4611", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lq23umnv3a2m", "content": "", "creation_timestamp": "2025-05-26T02:10:54.782526Z"}, {"uuid": "302af3eb-b67e-49ab-954e-8cd2366272f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46352", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114593829033866899", "content": "", "creation_timestamp": "2025-05-29T23:57:45.576311Z"}, {"uuid": "fccb0f73-c368-4711-a815-34612818c923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqpdnhphjz2k", "content": "", "creation_timestamp": "2025-06-03T12:55:58.883198Z"}, {"uuid": "362bdd23-7fb3-4fe7-9187-1a9039bb6ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46332", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7gnmckelv2", "content": "", "creation_timestamp": "2025-05-02T18:18:56.344011Z"}, {"uuid": "c752f53e-6cf4-4776-96ed-c5084c7fd122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46332", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7mr5rz2b2p", "content": "", "creation_timestamp": "2025-05-02T20:06:15.267970Z"}, {"uuid": "97843689-f8ca-4ed5-9506-2f53a7013f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46723", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7vcxbg7uz2", "content": "", "creation_timestamp": "2025-05-03T01:36:03.870232Z"}, {"uuid": "904457a1-3efe-4e26-a6c0-277b598155d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loaavfzvjp2p", "content": "", "creation_timestamp": "2025-05-03T02:06:25.598591Z"}, {"uuid": "4d53eb20-a282-42bd-8a6b-66920c549d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46332", "type": "seen", "source": "https://bsky.app/profile/rss.y-u-e.workers.dev/post/3loaxz3alf42j", "content": "", "creation_timestamp": "2025-05-03T09:00:05.318773Z"}, {"uuid": "e8fdebb9-7800-458b-b923-3fd589271d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46352", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdwjqncnxy2", "content": "", "creation_timestamp": "2025-05-30T00:02:41.664510Z"}, {"uuid": "fabaa043-cead-4cd4-b16d-45046f9951f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqsv6g2q352s", "content": "", "creation_timestamp": "2025-06-04T22:47:40.517695Z"}, {"uuid": "9b6f8344-8cd1-425f-a8c6-4edf7a553fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsse2mtmbr2q", "content": "", "creation_timestamp": "2025-06-30T04:31:43.441970Z"}, {"uuid": "7d3bfad4-2fd9-4023-a9be-2b2ce5c50678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lqe2fgvjqk2r", "content": "", "creation_timestamp": "2025-05-30T01:11:11.494503Z"}, {"uuid": "35596d23-96d3-4f49-a203-78ba1e1263d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqe2ga4b4k27", "content": "", "creation_timestamp": "2025-05-30T01:11:35.175553Z"}, {"uuid": "30dc0038-e529-4724-acf2-8fbc41d3cebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lofirlxcki2p", "content": "", "creation_timestamp": "2025-05-05T04:10:45.708790Z"}, {"uuid": "cf8d8a44-311a-437e-be67-62cfad6b2a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lofirnzats2g", "content": "", "creation_timestamp": "2025-05-05T04:10:48.247885Z"}, {"uuid": "51bf3c53-5b63-404a-a582-2920b10f9b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46762", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lofs5aqiwc2p", "content": "", "creation_timestamp": "2025-05-05T06:58:21.193815Z"}, {"uuid": "fc45d8ff-2c37-40ac-8ee2-3b0ab1ae2360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46337", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lofs5q3ewk2p", "content": "", "creation_timestamp": "2025-05-05T06:58:36.919579Z"}, {"uuid": "af737feb-3f45-4851-bb5c-e6556da4224d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46565", "type": "seen", "source": "https://bsky.app/profile/mynameisv.bsky.social/post/3lofscowf6k2y", "content": "", "creation_timestamp": "2025-05-05T07:01:24.584699Z"}, {"uuid": "f4aea10d-f9e1-4df0-bccb-ad8003681afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46412", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10", "content": "", "creation_timestamp": "2025-05-20T10:00:00.000000Z"}, {"uuid": "fe879566-99ac-48c7-bb81-45934126149c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3lq2q5bmsr32d", "content": "", "creation_timestamp": "2025-05-26T08:13:40.829405Z"}, {"uuid": "8df6bd48-3396-449f-8e64-bead1840fbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lptiut2hc22f", "content": "", "creation_timestamp": "2025-05-23T11:15:06.563494Z"}, {"uuid": "9e81a397-a3ca-4539-93ed-1f8b4f02c3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3logbltwwpjv2", "content": "", "creation_timestamp": "2025-05-05T11:35:24.726517Z"}, {"uuid": "927d6ff8-eca4-4c54-afa5-32e45679d124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46762", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3logbn33koen2", "content": "", "creation_timestamp": "2025-05-05T11:35:47.178804Z"}, {"uuid": "a9b6c034-bd46-42f8-ace7-fcd4680bbeed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/103", "content": "", "creation_timestamp": "2025-05-02T06:25:13.000000Z"}, {"uuid": "3e93ed30-9831-43d7-be5a-85afac6edacc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lognvrhzy62p", "content": "", "creation_timestamp": "2025-05-05T15:15:14.293489Z"}, {"uuid": "891e8a94-3899-4c4b-84e9-d263b1d5d061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://bsky.app/profile/mariusavram.bsky.social/post/3logph73t622u", "content": "", "creation_timestamp": "2025-05-05T15:42:52.764420Z"}, {"uuid": "4e35216a-c6c7-4157-a9ba-8218ed6a954c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qqqemo2l", "content": "", "creation_timestamp": "2025-05-05T20:16:41.198230Z"}, {"uuid": "275107c5-07f5-47de-b578-1a022526eab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qrlszb24", "content": "", "creation_timestamp": "2025-05-05T20:16:45.571101Z"}, {"uuid": "2550e258-b52d-45d1-bdea-317dfa00cf05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qrp64b22", "content": "", "creation_timestamp": "2025-05-05T20:16:46.108322Z"}, {"uuid": "5f6b477d-9bcb-4827-af48-fa1d67328347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46553", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qrzj5z22", "content": "", "creation_timestamp": "2025-05-05T20:16:47.746857Z"}, {"uuid": "d545b4b6-a86a-4a33-9157-a6f28815d315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46559", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qs4uir2p", "content": "", "creation_timestamp": "2025-05-05T20:16:48.287392Z"}, {"uuid": "b0df044b-976e-4ac8-85e8-64250be8c6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lohmh7gwxu2r", "content": "", "creation_timestamp": "2025-05-06T00:21:51.567953Z"}, {"uuid": "c18a3e8b-9c36-4478-a1f6-85abc00850e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lohmh7r5qv2t", "content": "", "creation_timestamp": "2025-05-06T00:21:52.235390Z"}, {"uuid": "abd753a9-3664-43c3-be71-a0f8dcfa077e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46730", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lohmha3iue2j", "content": "", "creation_timestamp": "2025-05-06T00:21:53.989790Z"}, {"uuid": "87ec97cd-6a56-43c3-b04a-485b4a1cfbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lohmhaiv4z2o", "content": "", "creation_timestamp": "2025-05-06T00:21:56.427666Z"}, {"uuid": "a81d3e0c-2f8a-4af9-ad4f-56f665d248d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lohmhasw7j2w", "content": "", "creation_timestamp": "2025-05-06T00:21:58.126518Z"}, {"uuid": "e345a2c8-8731-44d3-a7a7-fb4e5c91df2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lohsufhewa2g", "content": "", "creation_timestamp": "2025-05-06T02:16:36.823613Z"}, {"uuid": "0451cae5-259b-4703-9c04-b3edcf745092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lohzk2opsq2e", "content": "", "creation_timestamp": "2025-05-06T04:16:06.640179Z"}, {"uuid": "a67ff4b9-e601-46e9-8ad3-629a60ccc325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4692", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-01", "content": "", "creation_timestamp": "2025-05-20T10:00:00.000000Z"}, {"uuid": "26f9fc3d-1dc4-4896-abd2-0b1002220f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lptkfi6phe2c", "content": "", "creation_timestamp": "2025-05-23T11:42:15.353806Z"}, {"uuid": "0d937610-f8c8-4985-b190-7911bb49260e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46777", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rmu2nxsc2", "content": "", "creation_timestamp": "2025-05-28T08:24:04.608490Z"}, {"uuid": "1bd28e52-1d45-481c-9fc0-395acd7af9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46154", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpk5yt7fmy2", "content": "", "creation_timestamp": "2025-06-03T14:52:59.678247Z"}, {"uuid": "2b05c607-d509-4dad-8239-4e8f20c50645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46041", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr752khs342p", "content": "", "creation_timestamp": "2025-06-09T19:40:37.706584Z"}, {"uuid": "33343ead-126d-4453-86b1-fcd3b3af7622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4664", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lptmbrxlwpt2", "content": "", "creation_timestamp": "2025-05-23T12:19:11.646286Z"}, {"uuid": "039be642-eb1f-43a0-8a94-67911d677296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46014", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lssohpwhjd25", "content": "", "creation_timestamp": "2025-06-30T07:37:59.909751Z"}, {"uuid": "ff2fbc53-4927-4e62-9191-217ae519e6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46788", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lthlulzkjx2v", "content": "", "creation_timestamp": "2025-07-08T15:17:25.453523Z"}, {"uuid": "16dcccdc-5228-4b89-86c8-69c8b2681909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqxva3a4h223", "content": "", "creation_timestamp": "2025-06-06T22:31:58.264430Z"}, {"uuid": "451c49f8-e22f-41bf-8fcb-a8148f03dd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46789", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lthluniih72w", "content": "", "creation_timestamp": "2025-07-08T15:17:27.052002Z"}, {"uuid": "541a57d2-1305-4aed-b940-ba14c22197bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/bot.reality.eth.link/post/3lqtawevyq356", "content": "", "creation_timestamp": "2025-06-05T02:21:07.309383Z"}, {"uuid": "fe75b3da-968e-4fb4-877c-28d05a96a058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114460953357243894", "content": "", "creation_timestamp": "2025-05-06T12:45:43.987452Z"}, {"uuid": "d20fb185-5d27-46ce-9009-ca8e91d78446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6zhgf2e", "content": "", "creation_timestamp": "2025-05-06T18:21:50.754668Z"}, {"uuid": "ff0c5eb2-8afd-468a-bfc4-39376fe29eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis7nmx22j", "content": "", "creation_timestamp": "2025-05-06T18:21:54.349047Z"}, {"uuid": "1c90f6cf-1146-454c-91f7-c3baef590f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46815", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojjmy3txj2e", "content": "", "creation_timestamp": "2025-05-06T18:36:43.326936Z"}, {"uuid": "50cb9c24-4df7-4e08-85d7-5f3aef1c6cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46820", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqi2tlzb2", "content": "", "creation_timestamp": "2025-05-06T19:19:58.941255Z"}, {"uuid": "047435a3-a066-4379-adc3-2d8b2a1b984e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46816", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqistvro2", "content": "", "creation_timestamp": "2025-05-06T19:19:59.520274Z"}, {"uuid": "25485316-13e2-4191-bd4d-018325b0c7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46815", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqm4qmeo2", "content": "", "creation_timestamp": "2025-05-06T19:20:01.819608Z"}, {"uuid": "2ccaf79b-fb96-4189-b308-9a0749f3efc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46736", "type": "seen", "source": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lojlqmyfrvo2", "content": "", "creation_timestamp": "2025-05-06T19:20:02.430560Z"}, {"uuid": "ce64d014-b040-487d-994f-13c803978349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46735", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqqlzloo2", "content": "", "creation_timestamp": "2025-05-06T19:20:03.057130Z"}, {"uuid": "c87d2406-38c7-4af5-917f-b01d0826e761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojwinqaxf2h", "content": "", "creation_timestamp": "2025-05-06T22:26:59.589325Z"}, {"uuid": "be9840f9-ebc3-4b7e-aafb-9fce2f09633a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojwinwwk52h", "content": "", "creation_timestamp": "2025-05-06T22:27:00.817454Z"}, {"uuid": "b83ff3da-6712-4eb0-9c0c-e290ad72cc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46572", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojwio5sql2w", "content": "", "creation_timestamp": "2025-05-06T22:27:02.060897Z"}, {"uuid": "18a393bd-f656-4a72-9ee8-e44da1425a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cyberresearch.bsky.social/post/3lptniiawc22u", "content": "", "creation_timestamp": "2025-05-23T12:37:37.273874Z"}, {"uuid": "63da329a-3760-48ca-ba48-009ef9088f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojwioba322h", "content": "", "creation_timestamp": "2025-05-06T22:27:02.721014Z"}, {"uuid": "c4020bb0-1c49-454c-b41d-d2d090288685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46573", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lok3r36xwif2", "content": "", "creation_timestamp": "2025-05-07T00:03:22.436743Z"}, {"uuid": "b917af11-0cb4-4599-a719-aa7e7ba376c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46572", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lok3r36avxf2", "content": "", "creation_timestamp": "2025-05-07T00:04:30.172163Z"}, {"uuid": "5f0e9974-7d9d-41c4-bb83-e8ba97b29744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokqkqqsdbd2", "content": "", "creation_timestamp": "2025-05-07T06:19:42.947213Z"}, {"uuid": "cb029a88-4ed4-40a9-83d7-ad43edd8e409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwrhp4gol2", "content": "", "creation_timestamp": "2025-05-07T08:13:53.977281Z"}, {"uuid": "4ffc401b-f85b-42f6-9f78-e67beb3555f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4641", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7uk3vmbk2m", "content": "", "creation_timestamp": "2025-05-28T09:15:45.666337Z"}, {"uuid": "abaf7e2b-0554-45d8-96db-412d6857b3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/bitnami.bsky.social/post/3ltjfsxap422n", "content": "", "creation_timestamp": "2025-07-09T08:34:28.148744Z"}, {"uuid": "353abe2f-ad15-4171-ba3a-59dcb73f3725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/bot.reality.eth.link/post/3lqtgafmrsd56", "content": "", "creation_timestamp": "2025-06-05T03:56:05.843883Z"}, {"uuid": "c2f67635-00f9-4dda-9c7b-54467a2acf76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46728", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lolfp7i4sn2t", "content": "", "creation_timestamp": "2025-05-07T12:31:43.441817Z"}, {"uuid": "c65bab8b-8fe8-4c3b-8fb4-1836b4333d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lolji6shzc2x", "content": "", "creation_timestamp": "2025-05-07T13:39:23.469739Z"}, {"uuid": "da62ca1e-af86-4c1f-abe7-bc51b1c9e915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46827", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467567755058452", "content": "", "creation_timestamp": "2025-05-07T16:47:51.757825Z"}, {"uuid": "5d5c25b1-48d3-4dea-81ed-06936522103d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46551", "type": "seen", "source": "https://bsky.app/profile/jrubyproject.bsky.social/post/3lolurlze3p2s", "content": "", "creation_timestamp": "2025-05-07T17:01:29.447809Z"}, {"uuid": "cae99b08-0567-45a5-9685-e715026fa357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46551", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkd57z32w", "content": "", "creation_timestamp": "2025-05-07T18:26:54.236859Z"}, {"uuid": "22934827-0ee3-4f15-8ce6-5928d53d249b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkeorqn2j", "content": "", "creation_timestamp": "2025-05-07T18:27:02.797481Z"}, {"uuid": "5f542cea-ad19-4b3b-a572-127b392c2172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lom4zqgaa6s2", "content": "", "creation_timestamp": "2025-05-07T19:32:29.312333Z"}, {"uuid": "d290925b-bb7c-4814-8530-86452608f40a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46827", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lomemeymib2x", "content": "", "creation_timestamp": "2025-05-07T21:44:54.235811Z"}, {"uuid": "beb6f8cb-79cf-43cd-a6a7-a58a3bd04c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxuwups2p", "content": "", "creation_timestamp": "2025-05-07T22:27:11.552504Z"}, {"uuid": "9b00afa2-4dd2-4f62-a9ee-e5164dbf0035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46824", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxvldu62o", "content": "", "creation_timestamp": "2025-05-07T22:27:15.131574Z"}, {"uuid": "8838fe70-1ec0-4728-b5b9-c9f1efd6b304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnonmhfo2h", "content": "", "creation_timestamp": "2025-05-08T00:27:16.352082Z"}, {"uuid": "47ee31bd-5fa5-46d4-9e17-6430e8e83822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnontey72p", "content": "", "creation_timestamp": "2025-05-08T00:27:17.594930Z"}, {"uuid": "889c2d7e-38e0-4ce8-a6da-38efb4a6a619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46265", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnooatll2h", "content": "", "creation_timestamp": "2025-05-08T00:27:19.832465Z"}, {"uuid": "c25913f8-7edf-437f-992a-1a4078657e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnoosfie2w", "content": "", "creation_timestamp": "2025-05-08T00:27:22.831425Z"}, {"uuid": "6022fdc9-68e1-4068-9186-500c0bbe8543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lompefh54ck2", "content": "", "creation_timestamp": "2025-05-08T00:57:27.974176Z"}, {"uuid": "62e89b11-de8e-4d56-b38b-c6cddadb631f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46265", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lompesadjb2x", "content": "", "creation_timestamp": "2025-05-08T00:57:30.504317Z"}, {"uuid": "c8ca61b2-ab43-4edf-85ce-cf07efa75090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3lomyzk5jnl2a", "content": "", "creation_timestamp": "2025-05-08T03:50:11.338699Z"}, {"uuid": "20670a42-590c-4a34-a7e3-1f8f67bed139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lomyzldm2224", "content": "", "creation_timestamp": "2025-05-08T03:50:12.262901Z"}, {"uuid": "a8c0d157-4575-4f6b-a894-734fbe4a5327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lomzqrnnrc2d", "content": "", "creation_timestamp": "2025-05-08T04:03:13.597443Z"}, {"uuid": "09286453-6815-440e-a9ce-c74145a677af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lon7zro5e3x2", "content": "", "creation_timestamp": "2025-05-08T05:55:59.576608Z"}, {"uuid": "41ecdec7-0c5b-4ccd-b3ca-d7c09894fb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46561", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lqkqgl4r4k2r", "content": "", "creation_timestamp": "2025-06-01T17:01:30.675710Z"}, {"uuid": "943cd99d-18fe-4749-8e61-a294b3111ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq7ww667iy2e", "content": "", "creation_timestamp": "2025-05-28T09:58:16.306115Z"}, {"uuid": "8f06f5bc-da33-4e84-852c-0ac2ac50607e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46548", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpn2wq4soa2", "content": "", "creation_timestamp": "2025-06-03T15:45:49.313240Z"}, {"uuid": "ccefd420-a71d-474d-86c0-414528e5f1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "68874d38-bedf-4d2d-ba7c-8b16af985f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4671", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqpnmnywcd2r", "content": "", "creation_timestamp": "2025-06-03T15:54:29.396684Z"}, {"uuid": "fb4bafda-2026-4922-b276-2691c952c8f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqybvlqprw23", "content": "", "creation_timestamp": "2025-06-07T02:18:42.432004Z"}, {"uuid": "f4327e1e-de61-4bf2-a0b2-bd7ce7566fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46833", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojmbqu4y2", "content": "", "creation_timestamp": "2025-05-08T19:48:22.486024Z"}, {"uuid": "38cb4dce-97f1-4de0-b948-3feb0fbcdbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojmngd3y2", "content": "", "creation_timestamp": "2025-05-08T19:48:23.028016Z"}, {"uuid": "90332804-6686-40b2-9d4e-50683a393533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojp564pw2", "content": "", "creation_timestamp": "2025-05-08T19:48:24.219826Z"}, {"uuid": "8517b37f-e43d-4cda-a8af-2fb39c30a5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46712", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojsph26b2", "content": "", "creation_timestamp": "2025-05-08T19:48:27.688142Z"}, {"uuid": "7d94646b-8e82-428b-80bb-b3e4d3dd685a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46712", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq2o4yr2h", "content": "", "creation_timestamp": "2025-05-08T22:32:20.275162Z"}, {"uuid": "9573f325-2bbb-4cc5-9e9b-2bf28aebfd5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq2yhsg2p", "content": "", "creation_timestamp": "2025-05-08T22:32:22.077173Z"}, {"uuid": "59a3db0d-9083-43d2-b09e-1c59edfd708a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3qbky2h", "content": "", "creation_timestamp": "2025-05-08T22:32:26.613715Z"}, {"uuid": "6ea357a0-6c55-4e7c-aa67-2954a0f5839d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lptuzh7r3c2u", "content": "", "creation_timestamp": "2025-05-23T14:52:26.430223Z"}, {"uuid": "340d877b-0c25-45f1-8cfd-fc0b104f0880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3xjdn24", "content": "", "creation_timestamp": "2025-05-08T22:32:27.854384Z"}, {"uuid": "e9d7bf51-dd0d-4d5e-bc70-5451b340570b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lqelmw73tx2m", "content": "", "creation_timestamp": "2025-05-30T06:19:34.275607Z"}, {"uuid": "9e0830ef-aa95-4d15-a2d8-f2edfdf934ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46548", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/202", "content": "", "creation_timestamp": "2025-06-03T13:46:03.000000Z"}, {"uuid": "59c13bad-c376-464f-98b7-59227bd2c71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrifx5lsn22m", "content": "", "creation_timestamp": "2025-06-13T12:13:44.811732Z"}, {"uuid": "18357d9a-eba0-434f-8a4a-3b47e7705eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ls4prtzp772f", "content": "", "creation_timestamp": "2025-06-21T14:02:59.568986Z"}, {"uuid": "cbcce9e0-f0b7-4afc-8fee-7ed5079901bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46548", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqpoc222742r", "content": "", "creation_timestamp": "2025-06-03T16:06:26.738279Z"}, {"uuid": "33f50e6c-da61-4519-bd35-52640f3724ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46154", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqpohjrmsn2m", "content": "", "creation_timestamp": "2025-06-03T16:09:30.918928Z"}, {"uuid": "dd208ade-d77a-46d7-b521-5230f5a5fc68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ls4rmeyqjp2z", "content": "", "creation_timestamp": "2025-06-21T14:35:43.397928Z"}, {"uuid": "285596ca-b4b8-43d4-af49-0086777832ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpnjxoejj62b", "content": "", "creation_timestamp": "2025-05-21T02:18:32.939621Z"}, {"uuid": "6324f1a4-0154-4306-bd8c-79501f0e8930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3loqf7eucuv2e", "content": "", "creation_timestamp": "2025-05-09T12:06:10.246119Z"}, {"uuid": "c4f87720-58cb-40d0-8003-cc02cc2f8129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3loqfcrzs3n2r", "content": "", "creation_timestamp": "2025-05-09T12:08:05.823566Z"}, {"uuid": "5e14592b-cf62-493c-b1fc-d0f9463264a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loqgnhhxen2s", "content": "", "creation_timestamp": "2025-05-09T12:31:56.995131Z"}, {"uuid": "f73559ea-ecac-45e9-902c-5f9fcebc83ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3loqnxmuaor2x", "content": "", "creation_timestamp": "2025-05-09T14:42:53.968069Z"}, {"uuid": "9f28f379-2727-43b4-9564-995440f98f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3loqoh4dzhs2m", "content": "", "creation_timestamp": "2025-05-09T14:51:33.691899Z"}, {"uuid": "b3fae7cc-277b-4533-ad1a-4c4434da0a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3loqomcaumf2x", "content": "", "creation_timestamp": "2025-05-09T14:54:27.464117Z"}, {"uuid": "ff23524d-0d51-46cc-a4c4-b5ac7963c3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3loqopq2hhy2x", "content": "", "creation_timestamp": "2025-05-09T14:56:22.388526Z"}, {"uuid": "f64c1005-d42b-4cb3-ab92-5bd8667ec059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46392", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loqrrmzlva2p", "content": "", "creation_timestamp": "2025-05-09T15:51:08.285810Z"}, {"uuid": "d30e5ab0-6856-4fa8-93b5-dfde2ed8806f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rrszcz2o", "content": "", "creation_timestamp": "2025-05-09T18:32:17.468477Z"}, {"uuid": "d154785f-5808-4970-a0f5-9ce24bef205f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46189", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rs63r42r", "content": "", "creation_timestamp": "2025-05-09T18:32:19.072257Z"}, {"uuid": "e9b6b2a6-96a8-4a03-8625-5e146ac488ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rsepgq24", "content": "", "creation_timestamp": "2025-05-09T18:32:20.223226Z"}, {"uuid": "87fbfc95-a70d-4246-b0e4-d46ac5014b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rsp67j2e", "content": "", "creation_timestamp": "2025-05-09T18:32:21.999132Z"}, {"uuid": "f9106680-0095-4c4c-9350-151d52908cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rssigl2h", "content": "", "creation_timestamp": "2025-05-09T18:32:22.530369Z"}, {"uuid": "c9938320-35de-454e-a363-31cdeeac9817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rtmsuu2r", "content": "", "creation_timestamp": "2025-05-09T18:32:26.604505Z"}, {"uuid": "4c33a0cb-6a14-4252-acf3-4dd09b9ea08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3lor4dmpcsd2k", "content": "", "creation_timestamp": "2025-05-09T19:00:08.715061Z"}, {"uuid": "44e43986-aead-484a-92a5-8c5ce67d5406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46392", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/114", "content": "", "creation_timestamp": "2025-05-09T13:37:24.000000Z"}, {"uuid": "104b4a04-7b63-4120-a2a6-26f66691dfaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3lor4rjtm6l2k", "content": "", "creation_timestamp": "2025-05-09T19:07:55.401205Z"}, {"uuid": "60b0e761-c107-4139-b9b9-28ced884bc25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46265", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lori5qaqn225", "content": "", "creation_timestamp": "2025-05-09T22:31:36.159341Z"}, {"uuid": "4230cdc4-fa5a-4560-a886-447b9b4a867b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46415", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s", "content": "", "creation_timestamp": "2025-06-24T16:04:16.457947Z"}, {"uuid": "3de525da-bf06-4a29-91c9-44378f23927a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3losfhlo37t25", "content": "", "creation_timestamp": "2025-05-10T07:16:05.703357Z"}, {"uuid": "2f1a50fb-88f1-4a2d-89d4-6dc4c46cd4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46801", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpnmudjbzk24", "content": "", "creation_timestamp": "2025-05-21T03:10:23.204902Z"}, {"uuid": "0308713c-1779-4f58-a7da-581753d94b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46416", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s", "content": "", "creation_timestamp": "2025-06-24T16:04:16.571467Z"}, {"uuid": "bc4a4f8a-8a9a-4dc6-83a4-f84b83633cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lph6rczyxa2t", "content": "", "creation_timestamp": "2025-05-18T13:42:10.074587Z"}, {"uuid": "66e2f6d6-eef4-4c68-b5ef-485992c6859f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lph7oxl5d42p", "content": "", "creation_timestamp": "2025-05-18T13:58:45.119356Z"}, {"uuid": "f52fdabc-3177-4068-b60f-70e12081a4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lph7p4p3n372", "content": "", "creation_timestamp": "2025-05-18T13:58:55.916193Z"}, {"uuid": "23245de0-5750-4423-adc1-65ce397474ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46807", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrioz6rmmk2j", "content": "", "creation_timestamp": "2025-06-13T14:55:56.902718Z"}, {"uuid": "5ab73764-7899-4558-a804-c0384ca88114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46806", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrioz6rmmk2j", "content": "", "creation_timestamp": "2025-06-13T14:55:57.009961Z"}, {"uuid": "29e177d5-d4fb-4e95-9b3b-774504095760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lr7thm2jbg2b", "content": "", "creation_timestamp": "2025-06-10T02:21:38.129449Z"}, {"uuid": "59851835-361e-47ba-be89-ca55584750fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46415", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27", "content": "", "creation_timestamp": "2025-06-24T16:39:35.451706Z"}, {"uuid": "9cbd6e2f-ddd1-4654-bda6-e6cf761be11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46416", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27", "content": "", "creation_timestamp": "2025-06-24T16:39:35.561690Z"}, {"uuid": "ebf43075-44c6-483f-b8bb-0080a74dd884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3lthuofsd222w", "content": "", "creation_timestamp": "2025-07-08T17:55:04.586077Z"}, {"uuid": "32e28f0f-3f59-478f-9b44-2faad0751e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lpobn43cvg26", "content": "", "creation_timestamp": "2025-05-21T09:22:08.741093Z"}, {"uuid": "cad87dd0-ddbf-4bd9-ace6-9ff52269896e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46406", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114828809599813642", "content": "", "creation_timestamp": "2025-07-10T11:56:24.855602Z"}, {"uuid": "f8455d4d-450b-4036-b6b4-3bfbf0f4103e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "14677855-e457-4667-bfc4-9da869008137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4636", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeub4zagpt2", "content": "", "creation_timestamp": "2025-05-30T08:55:06.926570Z"}, {"uuid": "a771d384-93c0-42ee-a611-12dd14d1a20d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4635", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeubbgk35m2", "content": "", "creation_timestamp": "2025-05-30T08:55:07.780558Z"}, {"uuid": "c6903e95-c489-499d-881b-f1d6e9f6a164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4634", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeubcentnm2", "content": "", "creation_timestamp": "2025-05-30T08:55:08.336966Z"}, {"uuid": "32c0f9d9-9812-40b5-99fe-ddaa1de3543a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4633", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeubekd5oe2", "content": "", "creation_timestamp": "2025-05-30T08:55:08.922234Z"}, {"uuid": "b2a106c7-dd2a-407d-b285-a3abe2e8a89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loy7dudim62w", "content": "", "creation_timestamp": "2025-05-12T14:42:36.981067Z"}, {"uuid": "e9b6cc95-9229-4191-a826-1bc7470b1216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46738", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114495799464811096", "content": "", "creation_timestamp": "2025-05-12T16:27:33.111343Z"}, {"uuid": "e83241f7-05ae-4157-b14b-2a1dca31f0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114495799464811096", "content": "", "creation_timestamp": "2025-05-12T16:27:33.221364Z"}, {"uuid": "d901e885-e6df-4f92-bf5a-daf70e6ef4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46739", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.161084Z"}, {"uuid": "a545a68e-1764-4aeb-a0b6-94299ed92042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.279884Z"}, {"uuid": "6d51416b-3899-4b6b-855c-f585cd37782f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.374563Z"}, {"uuid": "fc40488c-65e3-42f5-8632-024399a00e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.473783Z"}, {"uuid": "06cc8bb5-ce9e-4c28-8c74-689efb122b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46743", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.566073Z"}, {"uuid": "e522e9e6-ab6f-464a-9bbf-5dbd0039941c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.657830Z"}, {"uuid": "caf5b33c-7eb4-4e77-a750-19c61e468e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.750276Z"}, {"uuid": "a67b6ebd-3631-41fb-a958-0b28778f08f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.839465Z"}, {"uuid": "fe66c6ca-a95d-4c39-a015-b2fc3c369942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46747", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:41.929439Z"}, {"uuid": "67ff7fa9-a30d-4301-b9e8-606471f9c1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46748", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:42.020744Z"}, {"uuid": "d9936180-d958-4fd0-8de6-89df5640cfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46749", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:42.109735Z"}, {"uuid": "1d8297eb-3226-4643-a129-ec8fa038c6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46750", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496055573801981", "content": "", "creation_timestamp": "2025-05-12T17:32:42.200329Z"}, {"uuid": "71991609-e54c-4a52-b173-df044fb79edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2dswgg2p", "content": "", "creation_timestamp": "2025-05-12T18:47:49.504970Z"}, {"uuid": "d36db141-013e-446c-94f8-18c8f66e8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2e4vby2j", "content": "", "creation_timestamp": "2025-05-12T18:47:51.285619Z"}, {"uuid": "aa73bf3b-3f3b-4827-817f-d09a3bd8808d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2eac4m22", "content": "", "creation_timestamp": "2025-05-12T18:47:51.889848Z"}, {"uuid": "15ecca8b-47d5-428b-a3e1-90761ebb1bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46743", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2eh2ii2e", "content": "", "creation_timestamp": "2025-05-12T18:47:53.105315Z"}, {"uuid": "bcdbe183-fd8c-4684-9fa1-6783c3d8fe9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2ekdtw2o", "content": "", "creation_timestamp": "2025-05-12T18:47:53.690672Z"}, {"uuid": "0cc90c24-e8a7-4867-be9f-aff225933434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2enost24", "content": "", "creation_timestamp": "2025-05-12T18:47:54.300501Z"}, {"uuid": "49827de4-6813-42fc-adcb-24103d8705ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2eqwxt2w", "content": "", "creation_timestamp": "2025-05-12T18:47:54.873760Z"}, {"uuid": "5d52250d-9e38-4743-a0a5-76d344d5847e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2eufzx2p", "content": "", "creation_timestamp": "2025-05-12T18:47:55.480180Z"}, {"uuid": "2e2119fa-8076-4c09-87f6-cea37a295f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2exnkh2p", "content": "", "creation_timestamp": "2025-05-12T18:47:56.075111Z"}, {"uuid": "747b740b-af17-43e9-b640-54669bea5a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2f2wwx2h", "content": "", "creation_timestamp": "2025-05-12T18:47:56.709134Z"}, {"uuid": "92a2203a-6e03-4720-8c65-a11cf7c361f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2fbniu22", "content": "", "creation_timestamp": "2025-05-12T18:47:57.918050Z"}, {"uuid": "3bf4019d-52a8-4f48-8979-80e280607df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2ff4i32w", "content": "", "creation_timestamp": "2025-05-12T18:47:58.525170Z"}, {"uuid": "98ac08bb-840e-41da-91d1-cef7063a543d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2figlh2h", "content": "", "creation_timestamp": "2025-05-12T18:47:59.061222Z"}, {"uuid": "de217905-09da-4573-833e-1066cc1cc845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2flysg2t", "content": "", "creation_timestamp": "2025-05-12T18:47:59.653338Z"}, {"uuid": "44f045ba-4cb7-4e26-885b-e5dd724ab897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46610", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozb4rzhm42h", "content": "", "creation_timestamp": "2025-05-13T00:47:07.709299Z"}, {"uuid": "e09c4427-35d0-46dd-847f-315592b4b1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazwfdb2e", "content": "", "creation_timestamp": "2025-05-13T06:47:26.899568Z"}, {"uuid": "0ed795a9-44fb-40b8-a4a9-c706672f5a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lra5woqfwv2r", "content": "", "creation_timestamp": "2025-06-10T05:29:01.424381Z"}, {"uuid": "f9d91eb2-477d-43de-a2eb-d871000c9c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lra6uevy2a2a", "content": "", "creation_timestamp": "2025-06-10T05:45:37.837487Z"}, {"uuid": "a7a752dd-2683-4b19-8149-3c977f9678e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/jfreeg.bsky.social/post/3lphz6zqd5u2r", "content": "", "creation_timestamp": "2025-05-18T21:35:08.594634Z"}, {"uuid": "74735541-23ad-49c3-ac7a-775f4c9c39eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4648", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cwfrxr6j2", "content": "", "creation_timestamp": "2025-05-13T10:52:23.381985Z"}, {"uuid": "9a22d9f7-de3d-47e9-96a4-ab8ae147dbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2cxiypl52t", "content": "", "creation_timestamp": "2025-05-13T10:52:41.929068Z"}, {"uuid": "d519d223-5962-4385-94f0-51520afd0070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2cxjcyum2e", "content": "", "creation_timestamp": "2025-05-13T10:52:43.692163Z"}, {"uuid": "cf69bff4-8534-43cf-9651-75ec678d98e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2cxjghk72r", "content": "", "creation_timestamp": "2025-05-13T10:52:44.237830Z"}, {"uuid": "a9a5f334-5216-415d-9fa1-b68203ca9af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46785", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lp2eyagdaf2f", "content": "", "creation_timestamp": "2025-05-13T11:28:47.975712Z"}, {"uuid": "a1b70512-ba07-4776-ae07-ad3431f820a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4649", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2ijzilmbh2", "content": "", "creation_timestamp": "2025-05-13T12:35:41.449657Z"}, {"uuid": "0cf3dea0-780b-4b38-984c-6fb51d9cc6b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/thezero.org/post/3lp2j5kmfyk2c", "content": "", "creation_timestamp": "2025-05-13T12:43:21.837071Z"}, {"uuid": "7f27f12a-77eb-49c1-ad2b-a760cd68efab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4649", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2q422dfx2e", "content": "", "creation_timestamp": "2025-05-13T14:47:47.154588Z"}, {"uuid": "2b2f6eb2-cbef-46e7-b80c-752eb7a793eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46721", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wstuioc2o", "content": "", "creation_timestamp": "2025-05-13T16:48:01.067952Z"}, {"uuid": "351da123-cc93-420a-94df-2b5aa71435e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46721", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vsdeta7r2", "content": "", "creation_timestamp": "2025-05-13T16:50:09.545035Z"}, {"uuid": "8fffe967-491e-4f17-9d46-da013f71edd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4658", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114501563358261613", "content": "", "creation_timestamp": "2025-05-13T16:53:23.214837Z"}, {"uuid": "692a92ca-4ab0-4aed-ae2e-def1b8511551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114501808160728674", "content": "", "creation_timestamp": "2025-05-13T17:55:38.588195Z"}, {"uuid": "63e3406a-5fcd-49d2-ac41-4e87aa696fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp33axfghk32", "content": "", "creation_timestamp": "2025-05-13T18:15:25.985843Z"}, {"uuid": "3e188824-7cc4-4b13-ae51-e919d6879bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eae3hts2h", "content": "", "creation_timestamp": "2025-05-13T20:48:07.388852Z"}, {"uuid": "d783669a-43d8-4f1c-a85b-9d38a66532e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp3pehuyxa2o", "content": "", "creation_timestamp": "2025-05-14T00:07:17.663979Z"}, {"uuid": "da6eab15-4ac3-4742-acc5-7f36f290e9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46618", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-287/", "content": "", "creation_timestamp": "2025-05-13T03:00:00.000000Z"}, {"uuid": "ea4e415a-66a1-4d9f-8811-728567ad23cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lpubmc54732w", "content": "", "creation_timestamp": "2025-05-23T18:37:39.108755Z"}, {"uuid": "ed8f49f4-c6b1-4184-bb08-f704e11ea7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46334", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/13", "content": "", "creation_timestamp": "2025-07-08T15:11:31.000000Z"}, {"uuid": "214972ff-ab9e-4a5b-a662-34fd8bee2c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46176", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114558688604824160", "content": "", "creation_timestamp": "2025-05-23T19:01:05.032479Z"}, {"uuid": "163e6012-8a23-47e2-9a23-01668b93b9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46835", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/13", "content": "", "creation_timestamp": "2025-07-08T15:11:31.000000Z"}, {"uuid": "e167f99d-245d-451e-af9a-d0a258e4161a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lpig5gxo3s2j", "content": "", "creation_timestamp": "2025-05-19T01:26:53.471400Z"}, {"uuid": "411e95b7-31cd-49a2-85af-790bb293e53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46822", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-46822.yaml", "content": "", "creation_timestamp": "2025-06-13T08:22:21.000000Z"}, {"uuid": "ae134f8a-40f6-4076-858c-568a09313676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lpigdou7gk2d", "content": "", "creation_timestamp": "2025-05-19T01:30:25.289059Z"}, {"uuid": "18cad2a2-3b8b-44e7-9157-da0244217aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46101", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lseymkycvw2k", "content": "", "creation_timestamp": "2025-06-24T21:02:24.115909Z"}, {"uuid": "bdbf7603-84cb-4a72-8570-b3ee285d6180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/", "content": "", "creation_timestamp": "2025-06-10T22:10:53.000000Z"}, {"uuid": "a6e7ea75-6814-45d8-807d-5690e0b63b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46334", "type": "seen", "source": "https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/", "content": "", "creation_timestamp": "2025-07-08T15:02:11.000000Z"}, {"uuid": "9cd08429-2fb7-43dd-8dc4-abe7211f5908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46335", "type": "seen", "source": "https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/", "content": "", "creation_timestamp": "2025-07-08T15:02:11.000000Z"}, {"uuid": "8a027ed4-caca-4182-b245-a178056b55dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4603", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lramjiyfxy32", "content": "", "creation_timestamp": "2025-06-10T09:50:14.095632Z"}, {"uuid": "5e2156b7-6040-4cad-8285-96ba0d3954ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46835", "type": "seen", "source": "https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/", "content": "", "creation_timestamp": "2025-07-08T15:02:11.000000Z"}, {"uuid": "9121265e-933e-477c-bc1a-a6829a91c382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lp4kj4pqqs24", "content": "", "creation_timestamp": "2025-05-14T08:13:04.428384Z"}, {"uuid": "04e7cd82-d0d4-4ba2-8c63-ab92d1b19da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46807", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/248", "content": "", "creation_timestamp": "2025-06-13T12:32:14.000000Z"}, {"uuid": "8b513064-7827-4bcd-a07d-b419c3c5dfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46806", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/248", "content": "", "creation_timestamp": "2025-06-13T12:32:14.000000Z"}, {"uuid": "5e425b0e-9904-419b-811a-388822218657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujoxojec2u", "content": "", "creation_timestamp": "2025-05-23T21:02:30.293007Z"}, {"uuid": "42d03536-7d22-4edc-92c4-5e86494f160c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpula7td5g2j", "content": "", "creation_timestamp": "2025-05-23T21:29:51.434278Z"}, {"uuid": "7397a35d-859a-41fc-a89c-ac3e5a3e9788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46804", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3i3tpz7jz2", "content": "", "creation_timestamp": "2025-05-26T15:23:19.646965Z"}, {"uuid": "792af496-e649-43df-bfc1-1ce5fba6c041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46805", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3i4f56phe2", "content": "", "creation_timestamp": "2025-05-26T15:25:08.524963Z"}, {"uuid": "26d9b0f6-86c1-4d93-9a8a-1bbac44ce2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-46802", "type": "seen", "source": "https://security.opensuse.org/2025/05/12/screen-security-issues.html#3b-tty-hijacking-while-attaching-to-a-multi-user-session-cve-2025-46802", "content": "", "creation_timestamp": "2025-05-12T17:00:00.000000Z"}, {"uuid": "3e5b9a6d-3a8d-4c7e-8364-a2c5e12855f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-46802", "type": "seen", "source": "https://news.ycombinator.com/item?id=43971716", "content": "", "creation_timestamp": "2025-05-13T11:28:49.000000Z"}, {"uuid": "174a6421-1a8e-48ba-b5f5-fe8d6bdec52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-46803", "type": "seen", "source": "https://security.opensuse.org/2025/05/12/screen-security-issues.html#3b-tty-hijacking-while-attaching-to-a-multi-user-session-cve-2025-46802", "content": "", "creation_timestamp": "2025-05-12T17:00:00.000000Z"}, {"uuid": "ad24056b-46bc-4d88-ab10-fd870f721ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp5mgttbhb42", "content": "", "creation_timestamp": "2025-05-14T18:22:50.646315Z"}, {"uuid": "8de5ebc9-309f-49cb-b683-75153260c329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lp5mncfasd2n", "content": "", "creation_timestamp": "2025-05-14T18:23:50.163495Z"}, {"uuid": "b3a7878a-29a6-42fb-8201-233a1815f073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lp5mwt6dnf26", "content": "", "creation_timestamp": "2025-05-14T18:29:10.380862Z"}, {"uuid": "587663d6-f77c-4667-9cfb-e970231f08f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lp5n5oghh52v", "content": "", "creation_timestamp": "2025-05-14T18:33:00.599173Z"}, {"uuid": "a70a356d-03b7-44f6-98a3-57053aeaee09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp5nksh33m42", "content": "", "creation_timestamp": "2025-05-14T18:41:35.985873Z"}, {"uuid": "49311b8d-1823-4095-94e1-74b1fe3e9542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp5nl2wimhz2", "content": "", "creation_timestamp": "2025-05-14T18:41:37.805840Z"}, {"uuid": "3875b099-24aa-4b4c-915e-41afa51fcebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5oizyvnz2w", "content": "", "creation_timestamp": "2025-05-14T18:57:17.883989Z"}, {"uuid": "1c003fe5-8cab-4c42-bb5c-b544296e995d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4637", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5oj27p6w2h", "content": "", "creation_timestamp": "2025-05-14T18:57:18.995536Z"}, {"uuid": "919fe9c2-04b2-4549-9938-befc2e2721f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5okqoy5m2l", "content": "", "creation_timestamp": "2025-05-14T18:58:13.189452Z"}, {"uuid": "145249ad-7524-4cae-80e9-c7e63ef249c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5okqsbsw2h", "content": "", "creation_timestamp": "2025-05-14T18:58:13.848626Z"}, {"uuid": "f73e2c00-7590-46f9-94e6-7f7c73b78c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4639", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5okr4bfj2w", "content": "", "creation_timestamp": "2025-05-14T18:58:15.550609Z"}, {"uuid": "e1c14565-d166-42b4-8e63-ba8a57e6e853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4638", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5okr7ne42l", "content": "", "creation_timestamp": "2025-05-14T18:58:16.149867Z"}, {"uuid": "71930287-d6a9-4c97-8ee9-311fbe8e9c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp5og5lkq3z2", "content": "", "creation_timestamp": "2025-05-14T18:58:58.835970Z"}, {"uuid": "8abf14a6-73f2-4c3d-8fbb-2c86d582f4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lp5oo333432k", "content": "", "creation_timestamp": "2025-05-14T19:00:06.343308Z"}, {"uuid": "db8f0b2b-c224-44ae-9ca5-7be76fd3c6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://thehackernews.com/2025/05/samsung-patches-cve-2025-4632-used-to.html", "content": "", "creation_timestamp": "2025-05-14T15:57:00.000000Z"}, {"uuid": "21b7d9c4-b2ba-4585-b9e9-02ca0b961ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114508119980023538", "content": "", "creation_timestamp": "2025-05-14T20:40:49.254219Z"}, {"uuid": "931ff940-4769-4d77-9d82-e94de27eec94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp5uudyycgr2", "content": "", "creation_timestamp": "2025-05-14T20:54:02.147342Z"}, {"uuid": "5d281fb6-8f85-42fd-9434-1ccb83894a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114508750783243761", "content": "", "creation_timestamp": "2025-05-14T23:21:14.886644Z"}, {"uuid": "9503bc6b-9c02-4544-9c56-9c4ba10e15eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lp6clybmhh2d", "content": "", "creation_timestamp": "2025-05-15T00:56:49.102534Z"}, {"uuid": "e7c1e624-147b-4c20-913e-8bb2617ac025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6jdxbyne24", "content": "", "creation_timestamp": "2025-05-15T02:57:36.285524Z"}, {"uuid": "8abec09d-5093-4433-bd24-824fb8f19d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lp6xd2efej2w", "content": "", "creation_timestamp": "2025-05-15T07:07:38.761948Z"}, {"uuid": "8dfa6b37-e254-45a3-bbc8-b012c26aa606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4664", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp6z5nq7ohl2", "content": "", "creation_timestamp": "2025-05-15T07:40:47.863568Z"}, {"uuid": "0762d0b5-b545-498e-84df-699bfa914953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lp72c7afvs2g", "content": "", "creation_timestamp": "2025-05-15T08:00:50.846941Z"}, {"uuid": "ae8d412d-df5e-4354-b770-9d0921f6c3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4632", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lp72wvkgvc2k", "content": "", "creation_timestamp": "2025-05-15T08:12:24.831319Z"}, {"uuid": "fe62d3ca-9a93-48da-89fc-dcd68b62e50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3lp7a3dc6dc2j", "content": "", "creation_timestamp": "2025-05-15T09:44:25.942645Z"}, {"uuid": "e8bf7f91-e9ab-4f99-9f66-b6e8604ad9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://gist.github.com/EbonJaeger/4959b52b5b6898ca4e109d36bb8b6d36", "content": "", "creation_timestamp": "2025-05-23T22:39:43.000000Z"}, {"uuid": "9149bf1f-b3eb-4e58-9638-3a7e8228fd53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpixre3lyso2", "content": "", "creation_timestamp": "2025-05-19T06:42:30.229634Z"}, {"uuid": "040e8d39-0df5-4b76-bf7d-4ce27d3d4c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lq3iwhmofk2f", "content": "", "creation_timestamp": "2025-05-26T15:37:19.260179Z"}, {"uuid": "e06b340e-a99f-4d6a-8106-5376422f77ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46783", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrpz7lhxj22c", "content": "", "creation_timestamp": "2025-06-16T12:47:07.729877Z"}, {"uuid": "6416e975-dc87-477e-bcb3-fd4cac7a7b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46412", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lpoxtdwhvk26", "content": "", "creation_timestamp": "2025-05-21T15:59:20.238309Z"}, {"uuid": "677e1009-79cb-4300-b3a8-dedbc350cfe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46412", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lpoxtdwsnc26", "content": "", "creation_timestamp": "2025-05-21T15:59:20.861579Z"}, {"uuid": "21666ab2-4fc1-4117-ab47-c862431ba6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://thehackernews.com/2025/05/new-chrome-vulnerability-enables-cross.html", "content": "", "creation_timestamp": "2025-05-15T04:15:00.000000Z"}, {"uuid": "b1c848cd-3c67-4aa1-bd4e-d9f1145ae6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lp7r6xmfmb27", "content": "", "creation_timestamp": "2025-05-15T14:50:38.172762Z"}, {"uuid": "4b71665d-fe95-4101-aed4-83b0c84e8cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvh7uxy2o", "content": "", "creation_timestamp": "2025-05-15T15:03:13.826143Z"}, {"uuid": "18103228-852b-482b-b0e2-8a9459c62ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4697", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhdgis2t", "content": "", "creation_timestamp": "2025-05-15T15:03:15.744829Z"}, {"uuid": "ef21fb1f-0fbc-4a89-ba53-1be03be72ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46052", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhklyk2t", "content": "", "creation_timestamp": "2025-05-15T15:03:16.930322Z"}, {"uuid": "5d8748b9-7ff2-4936-beec-5cc1ab402c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhrhhy2o", "content": "", "creation_timestamp": "2025-05-15T15:03:18.191708Z"}, {"uuid": "197c0257-73a3-4733-8772-908e8a0023e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4695", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhya4d2w", "content": "", "creation_timestamp": "2025-05-15T15:03:19.712362Z"}, {"uuid": "2ecfde69-d3bc-4c8f-982c-1a94cda416c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4698", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvi3l4m22", "content": "", "creation_timestamp": "2025-05-15T15:03:20.292428Z"}, {"uuid": "81a6cac8-4469-4325-8a60-8b3a7164c797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lp7vgjzu2m2h", "content": "", "creation_timestamp": "2025-05-15T16:06:26.633098Z"}, {"uuid": "a803c08a-18f3-4150-8873-5d30b7709215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpa2xgagtr2t", "content": "", "creation_timestamp": "2025-05-15T17:45:22.003267Z"}, {"uuid": "c1edf406-0efb-4c9f-a8cc-91dbd866bbe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4016555", "content": "", "creation_timestamp": "2025-05-15T18:36:25.248321Z"}, {"uuid": "58a6da55-9a8e-4eed-8a4c-c2645b3d570a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpa6mjxqas2c", "content": "", "creation_timestamp": "2025-05-15T18:50:52.248183Z"}, {"uuid": "a144bf0c-08e3-4794-ad49-4fca44e311f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46802", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3ouh25n4w2", "content": "", "creation_timestamp": "2025-05-26T17:23:43.052293Z"}, {"uuid": "dbb99447-ef32-4a11-8acf-ee28738c7e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46803", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3oui6jbmp2", "content": "", "creation_timestamp": "2025-05-26T17:23:43.668117Z"}, {"uuid": "0517997d-e28e-4603-a5eb-5f60407b2c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq3prjem7k2j", "content": "", "creation_timestamp": "2025-05-26T17:39:45.145098Z"}, {"uuid": "ef29d8b9-7059-4c17-bba5-b3b9b174fbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46334", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "ae1a5f32-2833-4248-a74f-288cae887792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/mrtechking.bsky.social/post/3lpablr4qzt2s", "content": "", "creation_timestamp": "2025-05-15T19:44:07.797536Z"}, {"uuid": "8a777ec9-7cb2-42af-a50f-bf18c9ffe630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lpabxwpgvr2o", "content": "", "creation_timestamp": "2025-05-15T19:50:55.179159Z"}, {"uuid": "607f82c5-fa4e-49f7-828d-8a4c0dbd9805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lpaby2mjrc2v", "content": "", "creation_timestamp": "2025-05-15T19:50:59.405976Z"}, {"uuid": "112a446b-8439-4f60-acbc-8254a370ec76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpackx62i222", "content": "", "creation_timestamp": "2025-05-15T20:01:35.301411Z"}, {"uuid": "8f0862d9-b627-453e-b16e-41dcb4fcd08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpackx62i222", "content": "", "creation_timestamp": "2025-05-15T20:01:35.391116Z"}, {"uuid": "2185db9e-f6dd-44b6-a391-1a4549d5b2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpacv7mbms22", "content": "", "creation_timestamp": "2025-05-15T20:07:21.349274Z"}, {"uuid": "9da3a301-c4fe-4279-90af-661e9b790e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpad65fwr222", "content": "", "creation_timestamp": "2025-05-15T20:12:19.127842Z"}, {"uuid": "5ddd57a8-ceb0-42e7-b37e-53301e3c5272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/empist.bsky.social/post/3lpaeylxqxc2f", "content": "", "creation_timestamp": "2025-05-15T20:45:01.617182Z"}, {"uuid": "195bf5e8-47b1-4835-9e50-4c0d8982da31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtc2hh2r", "content": "", "creation_timestamp": "2025-05-15T21:02:26.667202Z"}, {"uuid": "c2b81a27-16fb-49c2-9dfd-40f47e0b1113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxu3rvj2c", "content": "", "creation_timestamp": "2025-05-15T21:02:32.933881Z"}, {"uuid": "304db22b-1719-4489-a07a-027cfa04a244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lpag2e2az32n", "content": "", "creation_timestamp": "2025-05-15T21:03:53.148837Z"}, {"uuid": "89063d1f-d333-4ba1-9628-8a8e0dd029ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lpagkmi5ci2b", "content": "", "creation_timestamp": "2025-05-15T21:12:57.527797Z"}, {"uuid": "3325a456-09c4-4ada-98dc-226a827f6e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://www.darkreading.com/endpoint-security/attackers-target-samsung-magicinfo-server-bug", "content": "", "creation_timestamp": "2025-05-15T17:10:38.000000Z"}, {"uuid": "65ca9e84-38c2-4fb4-afad-211860e180aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpaxn43u5b2f", "content": "", "creation_timestamp": "2025-05-16T02:18:34.284778Z"}, {"uuid": "89f2eaee-7fc6-4477-9fb1-8059e1ee8507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpb3g5p4i22m", "content": "", "creation_timestamp": "2025-05-16T03:26:18.973773Z"}, {"uuid": "97ff64c3-e7c5-41b7-aefe-0900165888b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lpb5awbjgv2s", "content": "", "creation_timestamp": "2025-05-16T03:59:07.925218Z"}, {"uuid": "48b7fa71-76a9-406a-97bb-35bfe8b403b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq3pxioqxn2r", "content": "", "creation_timestamp": "2025-05-26T17:43:06.251878Z"}, {"uuid": "3f8f461a-f008-405c-8794-816f4cb34072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46835", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "c579f9fa-086d-47c1-a4ad-751882efa440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5howx5hbd2s", "content": "", "creation_timestamp": "2025-11-12T22:24:21.525676Z"}, {"uuid": "aa6bee36-01b3-4fb5-a744-fdd2022e0f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lu5xmddvp32f", "content": "", "creation_timestamp": "2025-07-17T12:46:07.091322Z"}, {"uuid": "55b192f6-dcb5-41b3-a8b5-c0577d854fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://bsky.app/profile/netspi.bsky.social/post/3lu5zbfolcs2a", "content": "", "creation_timestamp": "2025-07-17T13:15:51.807993Z"}, {"uuid": "ccbe62e3-597a-4135-a225-70fa95aea930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4657", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lu6swtibf62j", "content": "", "creation_timestamp": "2025-07-17T20:55:10.426756Z"}, {"uuid": "0a8bfa17-9410-45ac-8d2d-fae8baa9bc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e22c8dce-bb63b273fc6425d5", "content": "", "creation_timestamp": "2025-07-17T21:27:25.208790Z"}, {"uuid": "d6de5ee6-7ae2-4686-a966-ecd3188865d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lua3ipykc626", "content": "", "creation_timestamp": "2025-07-18T09:01:00.365491Z"}, {"uuid": "b9062ad2-20a6-48cc-b51e-ea2d2a4ca001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46148", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115265426624032158", "content": "", "creation_timestamp": "2025-09-25T14:33:51.993067Z"}, {"uuid": "2a62f4bf-b838-41c2-88dd-47c6f930c5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46149", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115265426624032158", "content": "", "creation_timestamp": "2025-09-25T14:33:52.109258Z"}, {"uuid": "c8cec182-7f53-496a-aa4d-fe1b631e70d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46150", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115265426624032158", "content": "", "creation_timestamp": "2025-09-25T14:33:52.200127Z"}, {"uuid": "f23a7898-812f-432e-81e7-ff2d48871525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46152", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115265426624032158", "content": "", "creation_timestamp": "2025-09-25T14:33:52.286056Z"}, {"uuid": "f8e9748e-b810-46f6-a6f7-e9be164c5c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46153", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115265426624032158", "content": "", "creation_timestamp": "2025-09-25T14:33:52.374942Z"}, {"uuid": "15ade195-cb8b-4470-85a3-e08431466608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4657", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3luanlgptrq2k", "content": "", "creation_timestamp": "2025-07-18T14:24:38.732719Z"}, {"uuid": "0d519411-6f1c-4850-8a17-d0de6e167ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luap2skbxz2j", "content": "", "creation_timestamp": "2025-07-18T14:51:08.164537Z"}, {"uuid": "f38d19ef-a7cc-49c0-9cdb-2620b08bfcad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4657", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luarr5yius2e", "content": "", "creation_timestamp": "2025-07-18T15:39:29.232488Z"}, {"uuid": "73efb3d4-ea10-406e-8896-3ec20e0ff40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46102", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lubdsqqmkp2q", "content": "", "creation_timestamp": "2025-07-18T21:02:26.674570Z"}, {"uuid": "40e6e215-46dc-4077-9bd2-6bbe6d51410a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lucv56h6uc2h", "content": "", "creation_timestamp": "2025-07-19T11:45:10.542079Z"}, {"uuid": "707ac735-919c-4c18-b9f7-b99091cb4ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46385", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lufvvimar62o", "content": "", "creation_timestamp": "2025-07-20T16:36:44.796869Z"}, {"uuid": "7ea58416-3338-45f1-9825-ef74ce19312f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lufw6haxnv2j", "content": "", "creation_timestamp": "2025-07-20T16:41:45.321325Z"}, {"uuid": "190db4f1-6f5a-4ea9-b606-d52e8a8bd8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46120", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114891742919452985", "content": "", "creation_timestamp": "2025-07-21T14:41:11.049478Z"}, {"uuid": "46ce0d22-5353-418a-9dd2-4073473ef0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luiglow3nk2y", "content": "", "creation_timestamp": "2025-07-21T16:40:51.656108Z"}, {"uuid": "29b5eba5-e814-4478-9f78-0fe6d65210eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luivaeqvrs2y", "content": "", "creation_timestamp": "2025-07-21T21:02:58.680068Z"}, {"uuid": "e2ec4367-8292-4532-8735-9f6e382ab829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46117", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lujchlonao2i", "content": "", "creation_timestamp": "2025-07-22T00:59:36.303307Z"}, {"uuid": "ec0b2e7f-506b-493c-84c5-128c37fd10c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lujcqkkz2x2h", "content": "", "creation_timestamp": "2025-07-22T01:04:36.958354Z"}, {"uuid": "3fb74724-738a-4c24-aa30-4f6cc5a0e49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46116", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:41.505317Z"}, {"uuid": "6b7d8a35-8371-4856-abf3-0d65d1fe4eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46117", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:41.632657Z"}, {"uuid": "7f1fd9a4-b24c-4762-a071-ddeff7c15739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46118", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:41.738938Z"}, {"uuid": "4f3e0b07-f66a-4abc-9472-58d9127dc463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46119", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:41.844042Z"}, {"uuid": "03f4a93c-2248-44bd-9243-348c5534c178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46120", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:41.950567Z"}, {"uuid": "8f89d9ef-a2f8-4a75-943c-e9d16570d457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46121", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:42.060800Z"}, {"uuid": "743cc89a-bf9a-4fec-ad9d-c89ea730938f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46122", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:42.174832Z"}, {"uuid": "0498b7e2-990f-4d7f-988f-9a138fd4137d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46123", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222", "content": "", "creation_timestamp": "2025-07-22T07:21:42.278540Z"}, {"uuid": "14ddd355-f869-4604-b297-8054fcc8c123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46267", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lukfmj5wea2g", "content": "", "creation_timestamp": "2025-07-22T11:28:42.469232Z"}, {"uuid": "6fee1c40-c1f7-4732-a1da-b3a6a73bc682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46267", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lukrzkcnav2h", "content": "", "creation_timestamp": "2025-07-22T15:10:44.585574Z"}, {"uuid": "a2eb259a-63dc-4d3b-b329-0cb588f09b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46354", "type": "seen", "source": "https://infosec.place/objects/ed30bda6-7762-4848-9050-7a5606b2a0ec", "content": "", "creation_timestamp": "2025-07-22T15:30:11.302111Z"}, {"uuid": "ba7edad2-9a51-45c0-a61a-cae38a0ae5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lukyyebsro2i", "content": "", "creation_timestamp": "2025-07-22T17:15:20.790829Z"}, {"uuid": "af092c31-1fc8-4bd8-9986-d0b25bdf04b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4657", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-07-22T03:54:24.000000Z"}, {"uuid": "cc3f1f6c-8ec4-4285-a9ae-f34e8505e51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46354", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lumq4uylav2x", "content": "", "creation_timestamp": "2025-07-23T09:42:09.337475Z"}, {"uuid": "244d1611-e78c-42d4-8741-a7063cf60431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46397", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lumv5scmjc23", "content": "", "creation_timestamp": "2025-07-23T11:12:10.482527Z"}, {"uuid": "71019435-10e8-47aa-91b4-42905bd88de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46171", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114903514963654205", "content": "", "creation_timestamp": "2025-07-23T16:34:58.297211Z"}, {"uuid": "a3b2fc62-db75-4321-8066-dafe9a20abf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46686", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114903980298033862", "content": "", "creation_timestamp": "2025-07-23T18:33:18.650092Z"}, {"uuid": "65dfd70f-7bea-48e2-8c4a-b379a5ac94e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46171", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luno66kqyw27", "content": "", "creation_timestamp": "2025-07-23T18:39:44.335584Z"}, {"uuid": "4f40d296-d0f6-4a54-9244-b9bd32396a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lunwoinpsi2j", "content": "", "creation_timestamp": "2025-07-23T21:12:01.606924Z"}, {"uuid": "9c376fa5-2556-40f4-8823-2605006e7524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av25-748", "content": "", "creation_timestamp": "2025-11-12T20:17:22.000000Z"}, {"uuid": "1b6d2b93-605d-42fe-8a83-1070ba1aa3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupif2fj7m22", "content": "", "creation_timestamp": "2025-07-24T12:01:35.802105Z"}, {"uuid": "12c73a06-a71d-479b-9619-21030f5c4059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46410", "type": "seen", "source": "https://infosec.place/objects/97b9e656-6cef-4aec-a5e4-a211d1609d88", "content": "", "creation_timestamp": "2025-07-24T15:30:05.574438Z"}, {"uuid": "8e697e63-e2ad-478f-879b-5991cd78ed2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4653", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "a7cde099-e13a-4418-89c2-b03beeb459b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "8fe773b6-6bc1-443a-8a6c-96b19b94a690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46059", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv4li5q6s22s", "content": "", "creation_timestamp": "2025-07-29T17:01:34.053148Z"}, {"uuid": "b2847924-014b-4633-b108-15a759f70fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46059", "type": "seen", "source": "https://bsky.app/profile/jviide.iki.fi/post/3lv5c3cwye22p", "content": "", "creation_timestamp": "2025-07-29T23:45:59.525081Z"}, {"uuid": "79ce7ae3-d726-4c4c-a0be-4ecb6bb34545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv5freuxxj26", "content": "", "creation_timestamp": "2025-07-30T00:52:00.596768Z"}, {"uuid": "651c2971-05d4-4e42-838a-c114c8d67336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5k35eanpv2k", "content": "", "creation_timestamp": "2025-11-13T21:08:01.049677Z"}, {"uuid": "768b6745-0ad0-42fe-90e9-936af76ad69c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46608", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115539806747571043", "content": "", "creation_timestamp": "2025-11-13T01:32:21.282534Z"}, {"uuid": "39061f06-5017-4c8d-98cc-f40d8424a231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46608", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m5hzh4r6vv25", "content": "", "creation_timestamp": "2025-11-13T01:32:22.896993Z"}, {"uuid": "e72b0b47-7b5f-48e7-80cc-7732303fa595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv74k53guw2l", "content": "", "creation_timestamp": "2025-07-30T17:12:13.279708Z"}, {"uuid": "7faea3cf-9038-442b-a4ad-010d03966336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46811", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lva5hwo32427", "content": "", "creation_timestamp": "2025-07-31T03:01:33.724451Z"}, {"uuid": "dc1b5f5f-36bd-4047-9fce-56fc8a7a6fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46359", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvarl7ddfa2e", "content": "", "creation_timestamp": "2025-07-31T09:01:18.199770Z"}, {"uuid": "fae9845d-f8d0-4ae9-baa3-30a8e9546f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46430", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f9353e587520d52eac66af671140c46f", "content": "", "creation_timestamp": "2025-11-10T18:02:23.000000Z"}, {"uuid": "0481be47-9b88-46fc-96e5-d821eb9246e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-46706", "type": "seen", "source": "https://circl.lu/pub/tr-96/", "content": "", "creation_timestamp": "2025-10-16T09:05:24.176000Z"}, {"uuid": "f28e13fd-f45e-45be-9787-53e89b8e95c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4615", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3m5fanpe7o52p", "content": "", "creation_timestamp": "2025-11-11T23:03:21.783296Z"}, {"uuid": "e4bc27f4-ef39-4612-b425-244a76bbe566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46413", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m5k3mvwytc2r", "content": "", "creation_timestamp": "2025-11-13T21:16:44.150221Z"}, {"uuid": "4db0775d-d93e-4bd0-8b36-40cc5cfba84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5k3pgbcey2n", "content": "", "creation_timestamp": "2025-11-13T21:18:07.459886Z"}, {"uuid": "5f855e3d-a90d-49f2-abe5-d90066c95da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5k3x3u5ty2w", "content": "", "creation_timestamp": "2025-11-13T21:22:24.666755Z"}, {"uuid": "8970b08c-cae3-416d-9173-c50fa7558b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5k4a2d64p2j", "content": "", "creation_timestamp": "2025-11-13T21:27:24.942089Z"}, {"uuid": "73e65bd9-5d9a-408e-955d-4b53a6b039e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5k4iyryef26", "content": "", "creation_timestamp": "2025-11-13T21:32:25.444849Z"}, {"uuid": "64029853-b4fb-4ee5-9faf-e6757fa642b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvaz3gzncq2p", "content": "", "creation_timestamp": "2025-07-31T11:15:38.579471Z"}, {"uuid": "9d743cee-c163-47d9-a94a-bd800c2efcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lvbdo7fo4e25", "content": "", "creation_timestamp": "2025-07-31T14:25:05.774483Z"}, {"uuid": "ee1ad10f-950d-4522-9e72-40ceead9d5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lvbfpt4xxc22", "content": "", "creation_timestamp": "2025-07-31T15:01:49.522799Z"}, {"uuid": "b359f9a5-938c-4add-9b09-f40a9080d38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/ransomfeed.rfeed.it/post/3lvd6l4sm2j22", "content": "", "creation_timestamp": "2025-08-01T07:59:13.492296Z"}, {"uuid": "7d5ce476-d19c-452b-831a-f6ab9bdb01ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46554", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly734qb6ee2k", "content": "", "creation_timestamp": "2025-09-06T21:02:30.637105Z"}, {"uuid": "0eac8749-7ecc-42f4-b91b-1801935e472d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46018", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvdwqll3li2l", "content": "", "creation_timestamp": "2025-08-01T15:11:46.190971Z"}, {"uuid": "c6568b1e-cb62-45a7-bf42-a05b0e9a6a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvf4dnf4nt22", "content": "", "creation_timestamp": "2025-08-02T02:24:34.725822Z"}, {"uuid": "4e6ced19-9ef7-4cc2-9ae3-d22d9e4f21c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46835", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvgk2rb3322p", "content": "", "creation_timestamp": "2025-08-02T16:02:52.538093Z"}, {"uuid": "af8b0718-0673-4693-b338-da41aa1069a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46569", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvgncwlzts2p", "content": "", "creation_timestamp": "2025-08-02T17:01:05.937418Z"}, {"uuid": "c82f9bdb-99d5-437e-a8be-9b3ffdfd7d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46569", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvhmyo5sn72t", "content": "", "creation_timestamp": "2025-08-03T02:27:59.440325Z"}, {"uuid": "9f4b5a4f-e64f-4c81-a36b-6a8c4cdb2e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvjl5ad52k2z", "content": "", "creation_timestamp": "2025-08-03T21:00:04.531369Z"}, {"uuid": "a89b4f7f-3c07-4dc7-a8a0-86eac3ad99e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m5i4tu3s2f2d", "content": "", "creation_timestamp": "2025-11-13T02:33:10.126806Z"}, {"uuid": "0bb1ea2a-c2d5-4b3a-a68e-7ee5f51159de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5cfgwmzxq26", "content": "", "creation_timestamp": "2025-11-10T19:51:01.906166Z"}, {"uuid": "b2c726a7-06d5-4a32-8345-f68b29119a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4660", "type": "seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3lvm2wpjtblf2", "content": "", "creation_timestamp": "2025-08-04T20:48:21.843700Z"}, {"uuid": "90556960-cfac-41f6-b15a-699e524825e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46206", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvm6iai6xo2p", "content": "", "creation_timestamp": "2025-08-04T21:51:33.983485Z"}, {"uuid": "c3dc1572-9cfa-4100-a8b1-fa97a59425e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4604", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvmft3joqm2k", "content": "", "creation_timestamp": "2025-08-05T00:02:53.867619Z"}, {"uuid": "a25f751d-5b26-4765-b976-226eaaa063c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvo7ydeekg2p", "content": "", "creation_timestamp": "2025-08-05T17:23:46.915364Z"}, {"uuid": "57db5f14-4af5-4722-a16e-5de9b3410507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4606", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvom74ilgy2f", "content": "", "creation_timestamp": "2025-08-05T21:02:24.500657Z"}, {"uuid": "4a933305-4562-4f68-84b6-6fe88c2b6f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46404", "type": "seen", "source": "https://infosec.place/objects/ce82122a-fee0-45e8-9a02-f04313bf290c", "content": "", "creation_timestamp": "2025-11-05T15:30:05.093291Z"}, {"uuid": "a846029d-a080-49f0-8e59-5822be0e7963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:19.000000Z"}, {"uuid": "7c82fe7d-5dfd-4ae3-8472-009ec3653e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46784", "type": "seen", "source": "https://infosec.place/objects/d0b8f756-49b8-4cec-87b7-9ea8a6a05655", "content": "", "creation_timestamp": "2025-11-05T15:30:10.732428Z"}, {"uuid": "46f37eae-ba57-4ce6-9634-8fbd30311bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46789", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "d52efbbc-1a75-4cfa-b9d5-7a100d8b474e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46705", "type": "seen", "source": "https://infosec.place/objects/2a26625b-1736-4168-a72c-13f2fccbb4c3", "content": "", "creation_timestamp": "2025-11-05T15:30:16.365855Z"}, {"uuid": "4829acb0-749d-46cd-b1df-38ba62c5b6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46581", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115373273536030404", "content": "", "creation_timestamp": "2025-10-14T15:40:47.902051Z"}, {"uuid": "990e74bd-ffe5-4d57-ac91-367f23d771ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46386", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvqdnphyte2c", "content": "", "creation_timestamp": "2025-08-06T13:34:45.004817Z"}, {"uuid": "3125684a-dbcb-4507-98b8-a2345cee12f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvqeijxd2m2p", "content": "", "creation_timestamp": "2025-08-06T13:49:45.093248Z"}, {"uuid": "abbf1e6c-a8bd-4e8d-bb57-cf9a61a6f4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46206", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oap7e52w", "content": "", "creation_timestamp": "2025-08-06T21:02:30.319765Z"}, {"uuid": "eae23a66-89a4-45e3-9a03-74ab078013a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46414", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lvt4ekj5qa2q", "content": "", "creation_timestamp": "2025-08-07T16:02:20.888437Z"}, {"uuid": "9326f669-10b3-4c64-9784-8999a45ea1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46414", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-07", "content": "", "creation_timestamp": "2025-08-07T10:00:00.000000Z"}, {"uuid": "854e6151-e3a9-4a88-b0b8-f0431f735938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4653", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvtn53eagd25", "content": "", "creation_timestamp": "2025-08-07T21:02:25.364705Z"}, {"uuid": "e1a3736a-8385-44fb-80d3-12543926aeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46093", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvtw2oybcs2h", "content": "", "creation_timestamp": "2025-08-07T23:42:07.598916Z"}, {"uuid": "2f78d322-d25c-425c-84a8-0b03824d013d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46094", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvtw2oybcs2h", "content": "", "creation_timestamp": "2025-08-07T23:42:07.720455Z"}, {"uuid": "0e1acaef-2f03-472f-8f13-a778aea82139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "e8a03cc1-e3bc-450c-938e-06b49a7a3068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvw2u4dcxs2k", "content": "", "creation_timestamp": "2025-08-08T20:13:14.409043Z"}, {"uuid": "a944cac6-ac71-458e-a8de-e15cbfa3febe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvwrnmqzjr2k", "content": "", "creation_timestamp": "2025-08-09T03:01:12.874216Z"}, {"uuid": "cf7bb459-faaf-4caa-940e-a2e094fbf7ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4655", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvxazuya6l2p", "content": "", "creation_timestamp": "2025-08-09T07:36:30.248991Z"}, {"uuid": "69194187-1bec-4a2b-8004-febbcf26bd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46404", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vlfsv4iz2s", "content": "", "creation_timestamp": "2025-11-05T17:33:10.346628Z"}, {"uuid": "634d61c3-7ef8-4e49-bc98-6cb5158a219f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "fc8f5312-0442-44c6-bb08-be31c797083b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vlr5wwkp2n", "content": "", "creation_timestamp": "2025-11-05T17:39:30.818511Z"}, {"uuid": "51b58a69-b30d-4ea7-81d2-c5e2f3c2d2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m5ijpfkjkw2o", "content": "", "creation_timestamp": "2025-11-13T06:23:19.304391Z"}, {"uuid": "574c0394-6d3f-44f2-90ed-d0a0bb4d9cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46705", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vm7kgnh72x", "content": "", "creation_timestamp": "2025-11-05T17:47:33.764681Z"}, {"uuid": "dec80341-6f95-4c23-b149-91be427e7cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46430", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115545714486658384", "content": "", "creation_timestamp": "2025-11-14T02:34:45.192481Z"}, {"uuid": "dc799b3f-7829-47a4-b64f-8cf35cccffe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46364", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4vmf7dgqpb2", "content": "", "creation_timestamp": "2025-11-05T17:51:37.837132Z"}, {"uuid": "0c1aac77-0fbc-4441-9179-d2a4649100b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46424", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4vmfd5zjnu2", "content": "", "creation_timestamp": "2025-11-05T17:51:38.489592Z"}, {"uuid": "4aeb2848-8e68-4239-916c-99bfb72021da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46366", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4vmfnvnx3b2", "content": "", "creation_timestamp": "2025-11-05T17:51:59.200284Z"}, {"uuid": "79f7e4c7-8894-4f8e-9ce4-68cb6515f882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://gist.github.com/Darkcrai86/cbec23f0cf62b0e92fc5e3defa383f28", "content": "", "creation_timestamp": "2025-11-13T07:52:09.000000Z"}, {"uuid": "66fee923-2520-4645-97d3-f2b51b7178b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46225", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "77db48fb-9d5c-4a1b-97a2-bcb46ace27d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46229", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "e840673f-ddf8-4ec3-b5f6-60ddecebcd36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46226", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "71257164-82e8-466e-9607-be1b2e3b7b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46233", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "278a6fe7-5a2f-4419-8d83-35c6613bb862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46232", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "107c042a-57d3-4403-8573-b48bdd2c8aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46241", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "07ea8507-1c04-4018-bfe0-8f83f4e5fa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46245", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "ad22f2f6-c8d3-453e-a232-dfa8203fd817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46247", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "ca025c8b-7e12-4ddb-96bd-9183f5280ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46249", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "839f6ea1-8f4f-450e-931b-ea76bf4b67f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46253", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "ffe57ffd-f62e-41bb-a4bf-3f83ef2a382d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46251", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "8077f0b4-eb60-45cb-bb95-79c32a850dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vmrhbc6h2u", "content": "", "creation_timestamp": "2025-11-05T17:57:34.283041Z"}, {"uuid": "4595edfe-1bbe-437f-b969-1189c8e8120b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46422", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4gco6s5vb26", "content": "", "creation_timestamp": "2025-10-30T15:46:51.272406Z"}, {"uuid": "b9ce3757-de7c-43fb-98f5-dbf6356f741e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m5s2lnqgs22q", "content": "", "creation_timestamp": "2025-11-17T01:19:28.787591Z"}, {"uuid": "da1f15fd-6095-4082-a0e9-00e438f48ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4voi7q7su2q", "content": "", "creation_timestamp": "2025-11-05T18:28:12.199647Z"}, {"uuid": "f6f6c3c4-bed8-4177-92e6-ffd788e816e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4688", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qb2c6p32g", "content": "", "creation_timestamp": "2025-09-17T21:02:47.783715Z"}, {"uuid": "d87a129e-4e61-4e42-96ef-d784aaa1f72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46364", "type": "seen", "source": "https://gist.github.com/Darkcrai86/005562fba89eeb8d6d1aaafababf7a16", "content": "", "creation_timestamp": "2025-11-05T18:28:14.000000Z"}, {"uuid": "28d6bb91-0c9b-4acd-900c-eebb94e35d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:18.000000Z"}, {"uuid": "d09af682-99ee-4681-850b-01452e994ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vor65k472w", "content": "", "creation_timestamp": "2025-11-05T18:33:13.146849Z"}, {"uuid": "a054b984-5180-46c2-a080-78399b6849f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vp24kxhl2s", "content": "", "creation_timestamp": "2025-11-05T18:38:12.630124Z"}, {"uuid": "acceb4fd-e0ac-4ca8-8f35-4ed0dbc39a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4gegdzoef2n", "content": "", "creation_timestamp": "2025-10-30T16:18:15.897276Z"}, {"uuid": "38e4017d-c060-4423-a26f-1ff1ff754b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46408", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qb27mqq2d", "content": "", "creation_timestamp": "2025-09-17T21:02:47.235288Z"}, {"uuid": "56b05ffa-e592-4a05-ac07-97b1b85e8d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46784", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a0ababdf7660441383b9cdfb018407f2", "content": "", "creation_timestamp": "2025-11-21T11:08:48.000000Z"}, {"uuid": "c9fae49d-c225-4318-8c1b-f6e33455a575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46705", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a0ababdf7660441383b9cdfb018407f2", "content": "", "creation_timestamp": "2025-11-21T11:08:48.000000Z"}, {"uuid": "19b7e380-04bd-4327-8088-19e778ca49da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46404", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a0ababdf7660441383b9cdfb018407f2", "content": "", "creation_timestamp": "2025-11-21T11:08:48.000000Z"}, {"uuid": "a0b2d7e6-4850-4fc0-8e5e-71bf5860925e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lw56a6jq7226", "content": "", "creation_timestamp": "2025-08-11T16:02:24.490834Z"}, {"uuid": "ec655acb-675f-4d3b-8908-63f0df78d550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46225", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "6783f145-dfb6-4d0e-aec5-0471827b1da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46229", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "9e326637-3097-4203-a03f-28866be402de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46226", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "3067e167-275a-4722-8f67-00a8432e9960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46233", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "54201304-d993-47b3-9c87-6b4d5b7d175e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46232", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "7483b182-e716-4a0f-b09d-d90f6ccdefb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46241", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "0bc90160-6db6-45e8-b554-02ea5a30d36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46245", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "89467d79-51f8-4f0d-b887-7ab369bf384a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46247", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:35.000000Z"}, {"uuid": "bebfa86c-9577-4469-b492-f9f11c34e7d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46249", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:36.000000Z"}, {"uuid": "75899825-4350-46ef-8dd9-d7362dfadaf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46253", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:36.000000Z"}, {"uuid": "9187097b-55f8-4cd0-9a9e-b36325b54dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46251", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:36.000000Z"}, {"uuid": "1d27e5c8-ebd7-4bc9-a2eb-8d910a62ab08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "a2f0e76f-c7cf-4e88-9f9b-5504cefc7a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lw6fzoxpz227", "content": "", "creation_timestamp": "2025-08-12T03:54:31.441480Z"}, {"uuid": "a3f9b1b7-312b-487f-804c-25c63eb12b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4609", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lw6ge26zhn2p", "content": "", "creation_timestamp": "2025-08-12T04:00:18.145050Z"}, {"uuid": "422208c9-a4de-47c6-87ee-3d4c6d8f7bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3m5lclqayvk2s", "content": "", "creation_timestamp": "2025-11-14T08:54:01.976556Z"}, {"uuid": "9f416445-8bbc-42ce-a4c8-984f8bd29c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lz3rlxsabc2e", "content": "", "creation_timestamp": "2025-09-18T06:59:12.194635Z"}, {"uuid": "7de9e6a8-030d-438f-a749-115539dc984f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46711", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lzgpzwyvw72o", "content": "", "creation_timestamp": "2025-09-22T15:30:29.508672Z"}, {"uuid": "a058cf3b-5fbd-42ed-b1db-494cce8fc004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "96a8f223-2c3e-4d2f-932c-198605ad4cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4665", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4ccgbrqfi23", "content": "", "creation_timestamp": "2025-10-29T01:31:47.734640Z"}, {"uuid": "6c925ff3-c68f-438d-bd8c-eb30f4baacd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46269", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-224-01", "content": "", "creation_timestamp": "2025-08-12T10:00:00.000000Z"}, {"uuid": "7616ae5e-1029-4a86-b06e-7975bd3c7c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46413", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zxb6rxi3i2", "content": "", "creation_timestamp": "2025-11-07T11:17:23.137837Z"}, {"uuid": "75f03d96-bdfc-4839-8e4a-c8b4c18f6547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4ccxhx6zg24", "content": "", "creation_timestamp": "2025-10-29T01:41:24.026326Z"}, {"uuid": "67749adc-f26c-41bb-bd79-1876a6b067ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46364", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4wqa4vzqr25", "content": "", "creation_timestamp": "2025-11-06T04:32:08.564482Z"}, {"uuid": "a4c4ef76-6324-4284-a432-3e78b38d0b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46183", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3x7lksgel22", "content": "", "creation_timestamp": "2025-10-24T15:41:46.002725Z"}, {"uuid": "337ecaff-d9d9-4479-8c5e-4a38f5e4ec02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3x7tadnes23", "content": "", "creation_timestamp": "2025-10-24T15:46:06.371210Z"}, {"uuid": "05234b92-c2fd-4acd-980e-75a769bcfbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3xao5so5g2u", "content": "", "creation_timestamp": "2025-10-24T16:01:06.847743Z"}, {"uuid": "db6c420e-cb40-407d-aee3-ada69673120b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46582", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m462n2kjhy2o", "content": "", "creation_timestamp": "2025-10-27T09:01:46.111941Z"}, {"uuid": "8a1914b0-900a-402a-8639-a6eca5c84547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4645", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3m5dlw3ivic2h", "content": "", "creation_timestamp": "2025-11-11T07:19:33.362014Z"}, {"uuid": "b23d51ea-de38-4b97-b196-e0fb08285825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46413", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115508801984011899", "content": "", "creation_timestamp": "2025-11-07T14:07:24.984697Z"}, {"uuid": "65f823da-6b72-485b-ad50-8e8feae7fed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4645", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5dmj7iym762", "content": "", "creation_timestamp": "2025-11-11T07:30:26.706123Z"}, {"uuid": "ec47c981-5a42-4ab3-b4a6-328ced6cb21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4665", "type": "seen", "source": "https://gist.github.com/Darkcrai86/13321375b7dfc751393d0e68451dde25", "content": "", "creation_timestamp": "2025-10-29T07:58:12.000000Z"}, {"uuid": "13ad8bdd-330f-48b7-8a04-ac06b0eca535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "56cc8baf-6172-4de1-9382-26da22747dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5dv33euzc2k", "content": "", "creation_timestamp": "2025-11-11T10:03:23.630591Z"}, {"uuid": "8d5b8879-b508-4dbf-9953-9be6bd65af21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "ef0643f0-9b61-4a65-be2a-a25dc0eaae54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwlyv3s6rs2w", "content": "", "creation_timestamp": "2025-08-17T13:36:37.359507Z"}, {"uuid": "2ed52e97-c412-49b9-8fb4-800542689b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwmrsb5frd2c", "content": "", "creation_timestamp": "2025-08-17T21:02:29.105287Z"}, {"uuid": "84f14c23-d09c-47e5-b502-b91d0efcc1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m52hdklq6a2n", "content": "", "creation_timestamp": "2025-11-07T16:03:38.041291Z"}, {"uuid": "0aea0057-5987-4851-ac74-7fe1509c00d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwp6jf5lxs2k", "content": "", "creation_timestamp": "2025-08-18T19:55:27.065643Z"}, {"uuid": "47ea1fbe-8001-4a06-b6b6-ba0956bd17b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "c4f7fedb-2b88-4c4c-8010-a1514881bbe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46582", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m46axfwzac2o", "content": "", "creation_timestamp": "2025-10-27T10:54:55.492754Z"}, {"uuid": "26152f72-2da4-4b56-aefb-54ebd7c7bd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m46bstu6hd2f", "content": "", "creation_timestamp": "2025-10-27T11:10:16.302653Z"}, {"uuid": "4306a700-0540-48d3-9892-5a9ac045eaf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lwquhu6dis2c", "content": "", "creation_timestamp": "2025-08-19T12:00:53.769804Z"}, {"uuid": "b8c69eb1-34a0-4417-9666-ac390df919f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4690", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115055684227363955", "content": "", "creation_timestamp": "2025-08-19T13:33:36.930717Z"}, {"uuid": "f638941d-976b-41fd-a66f-8ca6cd90dcb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "03cf2101-5708-4668-a975-2bc7121f016e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46705", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m5lngkk7f22i", "content": "", "creation_timestamp": "2025-11-14T12:08:01.744117Z"}, {"uuid": "4ca77278-fb13-48e7-ba80-d9307545cc39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46582", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115446447915141841", "content": "", "creation_timestamp": "2025-10-27T13:50:00.000455Z"}, {"uuid": "a0c20afc-f7a6-4668-98c0-ada4fe8f539f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46583", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115446447915141841", "content": "", "creation_timestamp": "2025-10-27T13:50:00.105272Z"}, {"uuid": "61d6116d-9c2c-4e2b-a3c7-6dfb8b718454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46789", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:53.000000Z"}, {"uuid": "e9f85558-ad4b-41f7-b177-ff5bdc54a9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:53.000000Z"}, {"uuid": "179da212-31da-4a1c-8f47-0506367617ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2kfwxpcec24", "content": "", "creation_timestamp": "2025-10-06T20:05:45.282155Z"}, {"uuid": "a73394ee-56e9-4e33-93f8-0b314a3e01a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lz4zi6auds27", "content": "", "creation_timestamp": "2025-09-18T18:52:57.136865Z"}, {"uuid": "5ba8cc8b-45e5-473e-a5d8-7fcf60aeba35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46419", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-02", "content": "", "creation_timestamp": "2025-09-18T10:00:00.000000Z"}, {"uuid": "b7ba5a2f-0441-471f-bd89-d03bc5ce92a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6a482800-57bbc8edd5d9803c", "content": "", "creation_timestamp": "2025-11-19T07:38:11.908493Z"}, {"uuid": "dde15447-f9a0-45e2-a664-6a05f822a974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwzd2j5tkd27", "content": "", "creation_timestamp": "2025-08-22T20:43:10.144775Z"}, {"uuid": "ab249fe9-cbc4-4853-9421-b4764a56810d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4632.yaml", "content": "", "creation_timestamp": "2025-08-22T20:40:04.000000Z"}, {"uuid": "e47fdf27-0dd9-45b1-a49b-6e5a5af91f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46418", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-01", "content": "", "creation_timestamp": "2025-09-18T10:00:00.000000Z"}, {"uuid": "63a31fd9-5bcc-4d31-9f94-a32b11fd0363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lwzhytp65e2y", "content": "", "creation_timestamp": "2025-08-22T22:11:43.045863Z"}, {"uuid": "d9b5af56-6007-43ae-8edf-ea570a4ad084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulrn2f726", "content": "", "creation_timestamp": "2025-08-23T21:02:31.148315Z"}, {"uuid": "36601492-e8e7-4b2b-91f1-63f3f414b555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw3cblh2j", "content": "", "creation_timestamp": "2025-10-12T21:02:37.395804Z"}, {"uuid": "139ec178-f33e-485c-aa94-7b989d3d3b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m5m62obm642g", "content": "", "creation_timestamp": "2025-11-14T17:05:31.366865Z"}, {"uuid": "26821d1d-eab5-42f1-9652-b3c4203f55cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m5m637kfb42f", "content": "", "creation_timestamp": "2025-11-14T17:05:48.877905Z"}, {"uuid": "2f4204ab-48ed-4359-b044-f55a0f5add0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4609", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3m2h3524jpu2c", "content": "", "creation_timestamp": "2025-10-05T12:14:16.547201Z"}, {"uuid": "42e31617-e3d6-4eee-9b37-0326eab27374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46818", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw3evor2v", "content": "", "creation_timestamp": "2025-10-12T21:02:37.966434Z"}, {"uuid": "a4c9f96e-bf71-4566-b056-e4d5d77929c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46819", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw3hgzw2a", "content": "", "creation_timestamp": "2025-10-12T21:02:38.552823Z"}, {"uuid": "4d061f1b-b51f-41f7-a86e-6ed8aad5e020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "37034b5c-3497-43dc-8a80-03509ce7fec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115543214779444986", "content": "", "creation_timestamp": "2025-11-13T15:59:03.088652Z"}, {"uuid": "dcc87192-6541-4303-a07e-b9735a1caccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46364", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m532fqt33s2k", "content": "", "creation_timestamp": "2025-11-07T21:44:54.268949Z"}, {"uuid": "958a1095-9689-44ea-9a1e-240f18965882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m5jjvd6if72i", "content": "", "creation_timestamp": "2025-11-13T15:59:18.023213Z"}, {"uuid": "23f058b6-6ebf-4060-a9a4-943c5b2ca7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m6k52buje62k", "content": "", "creation_timestamp": "2025-11-26T15:07:17.100441Z"}, {"uuid": "555c3075-0ae1-4f29-90e6-a1357251fe6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m6k52bujnd22", "content": "", "creation_timestamp": "2025-11-26T15:07:17.678111Z"}, {"uuid": "765601aa-8acf-4066-8ae4-b144cbdb1ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115537818777461067", "content": "", "creation_timestamp": "2025-11-12T17:06:46.117752Z"}, {"uuid": "58d65b6c-75b4-4d14-80b6-7682ba22db99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3m6k52raathr2", "content": "", "creation_timestamp": "2025-11-26T15:07:57.654431Z"}, {"uuid": "d8884bc3-35e4-4cf2-894e-ece0ad5455ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46175", "type": "seen", "source": "https://gist.github.com/Han-tj/74d2ed84ede1909da55090fed410d288", "content": "", "creation_timestamp": "2025-11-24T07:38:11.000000Z"}, {"uuid": "4f407e2b-6c87-448e-82e2-81f266f45441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4688", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lywxjui6772o", "content": "", "creation_timestamp": "2025-09-16T09:02:05.121654Z"}, {"uuid": "fb155884-955b-4b85-b0de-17e60ff16bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46174", "type": "seen", "source": "https://gist.github.com/Han-tj/29543ce0dae8cbb3bcbedca3390844a9", "content": "", "creation_timestamp": "2025-11-24T07:35:32.000000Z"}, {"uuid": "c76c01ca-76d2-4756-8ef6-b67517283607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2okdt4ljzv2", "content": "", "creation_timestamp": "2025-10-08T11:35:21.430265Z"}, {"uuid": "2421dfd7-1ef7-49ee-935c-2a8822a39a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "7d944af8-f41a-4e57-93bf-94394cb2a2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "3350ef8c-b625-4a1b-9840-8bca6689c46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3m5hdpkarcc2j", "content": "", "creation_timestamp": "2025-11-12T19:03:22.091914Z"}, {"uuid": "96c60725-8443-4c2d-bf83-00337c39939e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4657", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-09-09T11:53:45.000000Z"}, {"uuid": "d57df620-5c20-468c-bd32-7b513f199996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3lx7zx5ky4k27", "content": "", "creation_timestamp": "2025-08-25T12:48:53.898660Z"}, {"uuid": "fa90c678-bb2c-4a88-8ecf-38f2f28cd6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46407", "type": "seen", "source": "https://infosec.place/objects/d3347c61-8094-4ca8-9ae3-5b30d808cbc6", "content": "", "creation_timestamp": "2025-08-25T17:00:05.602665Z"}, {"uuid": "0fd78217-99f0-48df-bf83-6ad425c40258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4688", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyx32upekl2x", "content": "", "creation_timestamp": "2025-09-16T10:05:16.083722Z"}, {"uuid": "bc335499-ce6c-47f9-acd6-15ac395e58a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46152", "type": "seen", "source": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", "content": "", "creation_timestamp": "2025-09-24T05:17:18.000000Z"}, {"uuid": "4eed4bfa-3a9d-47e4-87b1-7169cc0cec9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46153", "type": "seen", "source": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", "content": "", "creation_timestamp": "2025-09-24T05:17:18.000000Z"}, {"uuid": "79babdb6-d208-4645-b6b7-7de20e66712f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46150", "type": "seen", "source": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", "content": "", "creation_timestamp": "2025-09-24T05:17:18.000000Z"}, {"uuid": "38134549-9f92-4a4d-8f61-2c5e0dc26fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46148", "type": "seen", "source": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", "content": "", "creation_timestamp": "2025-09-24T05:17:18.000000Z"}, {"uuid": "53491f6e-d0c3-4823-96a1-dfe82a286a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46149", "type": "seen", "source": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", "content": "", "creation_timestamp": "2025-09-24T05:17:18.000000Z"}, {"uuid": "efc7cdf9-a00b-41bf-96a3-6e936384e7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxbaf4e4hc2z", "content": "", "creation_timestamp": "2025-08-26T00:16:42.352251Z"}, {"uuid": "a67b7a96-52c1-4857-9e7d-efbb6ac3188e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46411", "type": "seen", "source": "https://infosec.place/objects/93210e9c-35d6-4c2d-901f-858537f7c48a", "content": "", "creation_timestamp": "2025-08-26T06:00:44.761251Z"}, {"uuid": "3cbb6c72-476a-429a-8b0f-4ce09576d566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "5172a917-61f0-4d10-8d94-be626ccf57f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4615", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115339452257265838", "content": "", "creation_timestamp": "2025-10-08T16:19:33.475290Z"}, {"uuid": "35198412-5867-46e1-b5b0-c7f265d51f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46554", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-46554.yaml", "content": "", "creation_timestamp": "2025-08-28T13:39:35.000000Z"}, {"uuid": "e6800e7b-ce20-45a4-8a02-3b81cd0fef54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46554", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhub4zwq27", "content": "", "creation_timestamp": "2025-08-30T21:02:30.545183Z"}, {"uuid": "c491a765-9e8e-45c9-bb7e-6922ca9b4da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lyn7o5to5m2q", "content": "", "creation_timestamp": "2025-09-12T12:01:01.643779Z"}, {"uuid": "fd4d2216-63fd-4a47-b5f8-afc6f5536233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lz76ipzwfe2m", "content": "", "creation_timestamp": "2025-09-19T15:28:00.470064Z"}, {"uuid": "6db6a28d-8df9-4699-8989-c4c3c629dcc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46428", "type": "seen", "source": "https://infosec.exchange/users/BugBountyShorts/statuses/115538680301921527", "content": "", "creation_timestamp": "2025-11-12T20:45:51.853398Z"}, {"uuid": "55291ef5-1b0f-4a61-acb0-2f31ffd3ab53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46427", "type": "seen", "source": "https://infosec.exchange/users/BugBountyShorts/statuses/115538680301812641", "content": "", "creation_timestamp": "2025-11-12T20:45:52.118808Z"}, {"uuid": "fd45e99a-d724-45e1-91a0-b958a8845fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://sploitus.com/exploit?id=734892A4-DC9F-532A-B69F-88E0A8F04F5B&utm_source=rss&utm_medium=rss", "content": "", "creation_timestamp": "2025-10-07T02:56:08.000000Z"}, {"uuid": "f5b9926d-81af-43fe-acf7-db427b9aaae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4rfslhefs2w", "content": "", "creation_timestamp": "2025-11-04T01:42:17.221648Z"}, {"uuid": "d7a4bc7e-3f23-4c65-a9b5-e66bbbf10c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4653", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_itsm_auth_rce_cve_2025_4653.rb", "content": "", "creation_timestamp": "2025-08-07T06:46:55.000000Z"}, {"uuid": "54f5ff60-6f42-4cbf-adda-9e749f6968a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46598", "type": "seen", "source": "https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3m42igc6k2b2t", "content": "", "creation_timestamp": "2025-10-25T22:57:52.649174Z"}, {"uuid": "76efe8e6-5d7a-4882-863c-e7055e7f8b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46556", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4rkprvmcrb2", "content": "", "creation_timestamp": "2025-11-04T03:10:41.131227Z"}, {"uuid": "91b58562-b35c-4620-b864-7f570fd3ad2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxu5z5sa4d27", "content": "", "creation_timestamp": "2025-09-02T12:54:48.787153Z"}, {"uuid": "a8b7e050-67de-41d0-8c1a-0238b0142f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46597", "type": "seen", "source": "https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3m42igc6k2b2t", "content": "", "creation_timestamp": "2025-10-25T22:57:52.520345Z"}, {"uuid": "56c441f3-d97a-443d-ac97-75ccf1c89d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4614", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3m2pdfeclcf2b", "content": "", "creation_timestamp": "2025-10-08T19:03:23.443592Z"}, {"uuid": "4bede595-c022-49a7-aad8-da08124224b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4615", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3m2pdffgsgf2k", "content": "", "creation_timestamp": "2025-10-08T19:03:24.861320Z"}, {"uuid": "88f1ea7a-bc5f-4d4b-98f0-206cacb8c0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5ho43wbzf2s", "content": "", "creation_timestamp": "2025-11-12T22:09:20.637206Z"}, {"uuid": "7006764d-82a2-4523-8e1a-e8f1b0c3063b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4665", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4yihqx3pk2g", "content": "", "creation_timestamp": "2025-11-06T21:18:33.549218Z"}, {"uuid": "25fb2277-e7be-4af5-9578-21518e94d771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5honyqiml2j", "content": "", "creation_timestamp": "2025-11-12T22:19:21.352096Z"}, {"uuid": "489d8a51-c86d-41bd-acf5-06b2c966dba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46427", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hoptvrv3q2", "content": "", "creation_timestamp": "2025-11-12T22:20:51.692157Z"}, {"uuid": "d3ff6be3-1c11-47af-a8b7-2a78f5d6303d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46428", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hopyono6s2", "content": "", "creation_timestamp": "2025-11-12T22:20:52.552646Z"}, {"uuid": "ed710c82-b051-4fd7-b9f1-9be4db9d09fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46047", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly226rxcnh2e", "content": "", "creation_timestamp": "2025-09-04T21:02:31.870375Z"}, {"uuid": "8380705b-759c-41d1-a17d-aa707acb1111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdiyrp4czk2n", "content": "", "creation_timestamp": "2026-01-28T19:24:12.351061Z"}, {"uuid": "ecdd3c61-6c42-467e-9226-71476214425b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46316", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdizqczaeh2t", "content": "", "creation_timestamp": "2026-01-28T19:41:19.939957Z"}, {"uuid": "520ef44a-1178-44cf-a64a-895b11373f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7bfjxbplh2s", "content": "", "creation_timestamp": "2025-12-05T21:10:26.512797Z"}, {"uuid": "aea5b395-59ba-4ca6-a053-851ebba20a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46306", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115974459281646662", "content": "", "creation_timestamp": "2026-01-28T19:50:11.203590Z"}, {"uuid": "439ca4a8-f645-4596-8f3e-122188e7b447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46298", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-057/", "content": "", "creation_timestamp": "2026-02-03T05:00:00.000000Z"}, {"uuid": "c753986d-d8d7-4e59-be42-671ddc597830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46691", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj62tzqbe2h", "content": "", "creation_timestamp": "2026-01-28T20:58:48.599146Z"}, {"uuid": "710765a1-23ec-443d-a0ea-b14f2dc2ef88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4686", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpapugze2o", "content": "", "creation_timestamp": "2026-01-30T16:16:58.687750Z"}, {"uuid": "ff3f1bcf-7f7b-4d2e-9afd-73fa733c8177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4686", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpkhhcr42g", "content": "", "creation_timestamp": "2026-01-30T16:22:25.448214Z"}, {"uuid": "ac0e8510-6c81-4469-bada-f77c445866cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46290", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqh4ptha52x", "content": "", "creation_timestamp": "2026-02-13T11:54:44.711655Z"}, {"uuid": "3d74078b-a049-4a16-b914-97bf184c6510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46811", "type": "seen", "source": "https://gist.github.com/szachovy/8bbd9d6dbf6ec89b584bf11d02503a02", "content": "", "creation_timestamp": "2026-02-13T12:04:34.000000Z"}, {"uuid": "5a43c4cd-4939-4bd9-8369-539368664d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46818", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f2a11dc7f6c9f8f65097f7127de5193e", "content": "", "creation_timestamp": "2025-12-11T08:29:13.000000Z"}, {"uuid": "389c5b02-abc9-4304-a793-f0bdb28fdab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46266", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3m7pj4amjyc22", "content": "", "creation_timestamp": "2025-12-11T11:51:38.040588Z"}, {"uuid": "82b41f8d-df69-4d0e-9f7a-7a0e1813cae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46266", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f5d94e3fb88afc762097285ed22b931e", "content": "", "creation_timestamp": "2025-12-11T12:21:14.000000Z"}, {"uuid": "5f8b978b-4b93-4387-9784-22002677df71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7po4f6qhw2u", "content": "", "creation_timestamp": "2025-12-11T13:21:11.380633Z"}, {"uuid": "a868d430-4f4e-4355-8a83-e488fade96e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46724", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3me2x7obf6t25", "content": "", "creation_timestamp": "2026-02-04T22:44:09.260113Z"}, {"uuid": "4a4cd252-808e-42fb-824e-55759d24f0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46651", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me33otzdyx2h", "content": "", "creation_timestamp": "2026-02-05T00:04:13.679675Z"}, {"uuid": "c9606190-1696-4116-b321-d656dbb75e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4686", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdta5xe4s22v", "content": "", "creation_timestamp": "2026-02-01T21:02:57.443455Z"}, {"uuid": "e95411d4-8d07-4956-a847-facd1123af1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7tbbjydkl2e", "content": "", "creation_timestamp": "2025-12-12T23:42:06.106485Z"}, {"uuid": "387230d7-7d76-40c5-a6ae-c238a239d21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46285", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7tbkjj2jn22", "content": "", "creation_timestamp": "2025-12-12T23:47:06.631480Z"}, {"uuid": "1b6fa67a-eab5-42ec-b4fb-5b9d2cfe88a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46289", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7tbthxxcl2o", "content": "", "creation_timestamp": "2025-12-12T23:52:07.021979Z"}, {"uuid": "8c6f7c5d-b0cc-4194-9cfa-b2dbb1e2c62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46287", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7tc4gg2pc2e", "content": "", "creation_timestamp": "2025-12-12T23:57:06.903406Z"}, {"uuid": "50b4f601-2af5-46c2-9488-597397bb2002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46691", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115977004919406391", "content": "", "creation_timestamp": "2026-01-29T06:37:37.421600Z"}, {"uuid": "151ccf11-2dcb-4466-8ef3-c6ce771e466c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46295", "type": "seen", "source": "https://gist.github.com/Darkcrai86/4d0ee494aa46f657fb49f43665866dcc", "content": "", "creation_timestamp": "2025-12-16T19:06:54.000000Z"}, {"uuid": "cc9575be-9d78-494e-a709-27e78f250502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-46295", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115732574318179837", "content": "", "creation_timestamp": "2025-12-17T02:35:41.301713Z"}, {"uuid": "830af9a6-3f01-4d27-9184-60ceed827997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46283", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7l6j65m622", "content": "", "creation_timestamp": "2025-12-17T21:11:17.504356Z"}, {"uuid": "e8d124ba-2969-4e08-9f37-9cb5b2a08bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46282", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7lb7cmn622", "content": "", "creation_timestamp": "2025-12-17T21:12:47.613523Z"}, {"uuid": "62470d3d-fc19-4889-8ce2-a561c502b753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7lr7yc3j22", "content": "", "creation_timestamp": "2025-12-17T21:21:45.474303Z"}, {"uuid": "00632d12-dd93-45e1-8777-403c88d3988d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7lv2wl4k2c", "content": "", "creation_timestamp": "2025-12-17T21:23:54.519580Z"}, {"uuid": "07f2c854-d005-4281-8a15-613f523ee9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46278", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7lz7bstj2u", "content": "", "creation_timestamp": "2025-12-17T21:26:12.919144Z"}, {"uuid": "9933e0fe-2672-43d9-baba-dd2852370e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46292", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7n4ckp6p2u", "content": "", "creation_timestamp": "2025-12-17T21:45:50.976936Z"}, {"uuid": "2dc6ac08-ac23-4b75-b7ce-a20fafa3166c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7nx5w5vo2y", "content": "", "creation_timestamp": "2025-12-17T22:00:52.198399Z"}, {"uuid": "44a8fcd8-54ba-4f92-afcc-42cdf0e5f51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma7oj2sdde2e", "content": "", "creation_timestamp": "2025-12-17T22:10:52.863396Z"}, {"uuid": "06eae7ee-9677-46f1-9903-67417201d07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46295", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3maab4s3pvk23", "content": "", "creation_timestamp": "2025-12-18T03:44:02.160432Z"}, {"uuid": "011ce983-7626-47fb-ba0e-4418d32fb00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46295", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mac7bx4hqc2o", "content": "", "creation_timestamp": "2025-12-18T22:16:27.079977Z"}, {"uuid": "6788acd1-76d4-4a9c-8d67-e6e3330166e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4615", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3maesep5jzh2h", "content": "", "creation_timestamp": "2025-12-19T23:03:20.341732Z"}, {"uuid": "264d000e-2388-4ab3-8819-728c78793fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46295", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3maicaoj5dc2i", "content": "", "creation_timestamp": "2025-12-21T08:25:31.930020Z"}, {"uuid": "8221baac-96cc-400f-9780-ad09eda18b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46295", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mapbqqo3sc2z", "content": "", "creation_timestamp": "2025-12-24T03:05:07.893222Z"}, {"uuid": "9969b88a-7b60-445a-866b-9b35d8b69c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46295", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mavmfdobxb2r", "content": "", "creation_timestamp": "2025-12-26T15:31:34.789439Z"}, {"uuid": "47a9e0e2-3b26-408a-b911-460686846de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46320", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4o5meaj2z", "content": "", "creation_timestamp": "2026-02-24T21:34:50.268788Z"}, {"uuid": "c272933a-dd30-4804-b6aa-2ad985b9fa38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4638", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mb2d7cflx22d", "content": "", "creation_timestamp": "2025-12-28T12:30:30.593400Z"}, {"uuid": "4dba45fb-a902-4fe2-8920-1b4236c02ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46108", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdh3gxhxa2h", "content": "", "creation_timestamp": "2026-03-05T18:39:48.581722Z"}, {"uuid": "1f2adc07-9ca0-4797-b70f-7e1579c3f534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46415", "type": "seen", "source": "https://gist.github.com/ToRyVand/97f09514202eb6a3c61c0ffe4bddc65b", "content": "", "creation_timestamp": "2026-02-19T12:32:39.000000Z"}, {"uuid": "698d4a47-50c7-4a56-8473-c11d2cac71a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46416", "type": "seen", "source": "https://gist.github.com/ToRyVand/97f09514202eb6a3c61c0ffe4bddc65b", "content": "", "creation_timestamp": "2026-02-19T12:32:39.000000Z"}, {"uuid": "0d34eea3-e759-4ce7-bfe6-e8b9b4a97f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4652", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4652.yaml", "content": "", "creation_timestamp": "2026-02-11T17:16:15.000000Z"}, {"uuid": "344b3117-09ec-44af-8c98-44985e862664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46564", "type": "seen", "source": "https://gist.github.com/MagnaCapax/15579d7add88dacf2ba0c5bb47be443b", "content": "", "creation_timestamp": "2026-02-11T08:11:05.000000Z"}, {"uuid": "e3a8fff9-5717-4332-8468-756dca5f24bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46255", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowyq7z6x27", "content": "", "creation_timestamp": "2026-01-05T17:17:56.452970Z"}, {"uuid": "72de204c-c64b-41d5-a073-0d695b428522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46255", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbox3fd6bu2u", "content": "", "creation_timestamp": "2026-01-05T17:19:25.705434Z"}, {"uuid": "2303324b-2c2d-4f8e-9609-360fad54f402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4676", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtz2cpkvn2u", "content": "", "creation_timestamp": "2026-01-07T17:37:55.597685Z"}, {"uuid": "d6a77d6a-aa8d-4d05-8a9c-4ffdd2747098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4676", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtz33d2kd2u", "content": "", "creation_timestamp": "2026-01-07T17:38:21.452250Z"}, {"uuid": "552114f6-db10-4d3c-81d0-9c25f8f48997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4676", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbugis25jb22", "content": "", "creation_timestamp": "2026-01-07T21:38:39.681462Z"}, {"uuid": "f47ca9c0-15dc-4c8b-b876-b84eff8c6e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4675", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-011", "content": "", "creation_timestamp": "2026-01-08T19:06:02.000000Z"}, {"uuid": "b9560ac2-92ca-45b6-b4d6-9430f116388d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4676", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-011", "content": "", "creation_timestamp": "2026-01-08T19:06:02.000000Z"}, {"uuid": "8c9a8a88-5d6f-40a2-8b4b-dc7b53634301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5l7wmpv2g", "content": "", "creation_timestamp": "2026-01-09T18:42:16.235737Z"}, {"uuid": "306dea24-9dbe-447e-bc54-e1bd27f0ad31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46298", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115867382141444693", "content": "", "creation_timestamp": "2026-01-09T21:59:03.639560Z"}, {"uuid": "e37264c1-5543-45c5-be04-a39c0c744097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1684", "content": "", "creation_timestamp": "2025-11-13T04:00:00.000000Z"}, {"uuid": "71d5d866-d081-4241-a7f5-1f1cb2c1bb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46066", "type": "seen", "source": "https://gist.github.com/ZeroBreach-GmbH/4e325d09d08e16efb506076da2184f42", "content": "", "creation_timestamp": "2026-01-11T17:13:13.000000Z"}, {"uuid": "8d8a1691-ab0e-4562-8630-9dcbecc7f7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46067", "type": "seen", "source": "https://gist.github.com/ZeroBreach-GmbH/98204cff0065e611cf9e9acc3be59e03", "content": "", "creation_timestamp": "2026-01-11T17:15:23.000000Z"}, {"uuid": "3a83527e-41d4-4708-a76d-430cb5096c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46068", "type": "seen", "source": "https://gist.github.com/ZeroBreach-GmbH/00ea6cce1299e1d999b5d1faac4248f1", "content": "", "creation_timestamp": "2026-01-11T17:19:43.000000Z"}, {"uuid": "fcf2c8f6-12fc-4c7a-9c73-e917706bf761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46070", "type": "seen", "source": "https://gist.github.com/ZeroBreach-GmbH/776dd7e927d9b2f8ef10807abe124f8e", "content": "", "creation_timestamp": "2026-01-11T17:21:32.000000Z"}, {"uuid": "9e8420bd-7dcb-480f-a96a-452001bae59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46068", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcalomm2wo2b", "content": "", "creation_timestamp": "2026-01-12T17:43:21.241011Z"}, {"uuid": "9132bab2-32f7-4395-84c6-0efde087765c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46070", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcaloumymg2b", "content": "", "creation_timestamp": "2026-01-12T17:43:29.849644Z"}, {"uuid": "2ecbdbf6-c017-469e-86bc-65b022610e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46070", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcalq2kaji2t", "content": "", "creation_timestamp": "2026-01-12T17:44:09.634964Z"}, {"uuid": "5d0221a7-986c-4d84-8b2c-4cb8a3f5aa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46066", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcalqawjbf2p", "content": "", "creation_timestamp": "2026-01-12T17:44:16.061289Z"}, {"uuid": "15aac2bc-31e6-4017-8bff-84a03ed9bd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcalqbq25x27", "content": "", "creation_timestamp": "2026-01-12T17:44:17.401726Z"}, {"uuid": "e6446624-7cd9-4ddb-bed2-73907afd0b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcalqon76l2e", "content": "", "creation_timestamp": "2026-01-12T17:44:30.564133Z"}, {"uuid": "45c3cb03-217d-4547-9ae6-521b62ebe536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46066", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcammqg2bf2u", "content": "", "creation_timestamp": "2026-01-12T18:00:12.257498Z"}, {"uuid": "a13e435b-9c19-4f5a-adb7-891084463c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46349", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcawtldqxw2h", "content": "", "creation_timestamp": "2026-01-12T21:02:59.261932Z"}, {"uuid": "02938929-8737-4680-aad5-39f1225a696a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46685", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2vf4bak2m", "content": "", "creation_timestamp": "2026-01-13T17:20:53.976736Z"}, {"uuid": "49e74573-7b18-460e-811f-6db883119e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46685", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2wze6l422", "content": "", "creation_timestamp": "2026-01-13T17:21:49.214956Z"}, {"uuid": "16b0a723-6628-4106-a8df-62723bdedc2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcd45dqjln2y", "content": "", "creation_timestamp": "2026-01-13T17:43:14.203721Z"}, {"uuid": "1c1bba6f-167a-413c-97eb-e60fe69d6330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcd4fd3tep2x", "content": "", "creation_timestamp": "2026-01-13T17:47:42.164227Z"}, {"uuid": "a224b359-100c-4aab-8496-5ab7427e5023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46550", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcdhcmrhtv2t", "content": "", "creation_timestamp": "2026-01-13T21:03:04.656890Z"}, {"uuid": "b5c44902-4963-4edd-9bea-748447529189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46549", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-46549.yaml", "content": "", "creation_timestamp": "2026-01-11T21:44:47.000000Z"}, {"uuid": "644f47b7-7b73-4072-9c2d-1e2893290a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46549", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcfxrjunli23", "content": "", "creation_timestamp": "2026-01-14T21:03:06.134517Z"}, {"uuid": "7cd19810-87fd-4d8e-a61c-48a112dfd8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mchkmu5bzc2g", "content": "", "creation_timestamp": "2026-01-15T12:13:13.340128Z"}, {"uuid": "b57f3919-493b-4819-9118-3e1fb52c0e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46397", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mcm5uxypsg2d", "content": "", "creation_timestamp": "2026-01-17T08:08:18.670983Z"}, {"uuid": "bed951b4-5004-4122-86b1-083d6cf35505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "9e6e93c3-59ff-4d4a-aa7f-22310791e375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46394", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e4891722-9b8e-49c2-9c39-b0bb61b24532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f9fccc65-e722-4e2e-a3f3-8d44309eaf6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-083-03", "content": "", "creation_timestamp": "2026-03-24T11:00:00.000000Z"}, {"uuid": "7f20f98c-adb0-4192-8f87-25eb7fbdc0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46818", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-083-03", "content": "", "creation_timestamp": "2026-03-24T11:00:00.000000Z"}, {"uuid": "6468b527-181a-4afb-a4e4-8c94a7e91cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46819", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-083-03", "content": "", "creation_timestamp": "2026-03-24T11:00:00.000000Z"}, {"uuid": "2b04e89f-19a0-485b-b1ef-a1e66a53ad49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46270", "type": "seen", "source": "https://infosec.place/objects/ae4f32d6-c695-46c5-a4c4-270bb8d7cfee", "content": "", "creation_timestamp": "2026-01-20T15:30:28.239757Z"}, {"uuid": "2652fca3-63aa-4a7f-b838-c4bc12677547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46397", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mcwtrai2dx2d", "content": "", "creation_timestamp": "2026-01-21T14:06:33.412615Z"}, {"uuid": "a59d5a28-386a-40a0-84aa-c14444d60be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46803", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c74ad4e9-43df-4294-a337-22d34debbe64", "content": "", "creation_timestamp": "2025-05-14T13:48:57.849042Z"}, {"uuid": "69a3b779-fd2f-4fb9-929e-1d39de3c56ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46802", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c74ad4e9-43df-4294-a337-22d34debbe64", "content": "", "creation_timestamp": "2025-05-14T13:48:57.849042Z"}, {"uuid": "2421110c-503a-4760-b76b-28a34d0169f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46805", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c74ad4e9-43df-4294-a337-22d34debbe64", "content": "", "creation_timestamp": "2025-05-14T13:48:57.849042Z"}, {"uuid": "db52a69f-bc63-4ac4-bb29-ff9b7f20cb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46804", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c74ad4e9-43df-4294-a337-22d34debbe64", "content": "", "creation_timestamp": "2025-05-14T13:48:57.849042Z"}, {"uuid": "e85fc249-4cb4-4f7e-9963-39799441732d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46706", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f", "content": "", "creation_timestamp": "2025-10-15T15:31:29.212143Z"}, {"uuid": "76c60571-267b-4f71-aa8a-5517cac92d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3loif4ux2g", "content": "", "creation_timestamp": "2026-01-23T11:25:09.389349Z"}, {"uuid": "7b2d9f2a-52e8-4e5b-8454-ab9037047f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46565", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-46565.yaml", "content": "", "creation_timestamp": "2026-03-26T01:31:37.000000Z"}, {"uuid": "be78b9ec-3719-4579-ae41-63fac9c29067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46285", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83", "content": "", "creation_timestamp": "2025-12-16T06:48:31.589489Z"}, {"uuid": "f8a3a34e-9d6c-4bde-978a-570a30e968d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46287", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83", "content": "", "creation_timestamp": "2025-12-16T06:48:31.589489Z"}, {"uuid": "42b4c556-2ce6-4ac0-a7da-59e62b161b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46276", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83", "content": "", "creation_timestamp": "2025-12-16T06:48:31.589489Z"}, {"uuid": "787ceb8b-a7a4-452b-9b66-00daea798e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46277", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83", "content": "", "creation_timestamp": "2025-12-16T06:48:31.589489Z"}, {"uuid": "a201ac96-087d-4f05-b552-39e1d1f867fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46292", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83", "content": "", "creation_timestamp": "2025-12-16T06:48:31.589489Z"}, {"uuid": "6bc0144c-c0e9-4638-97d6-5e8f9ebee117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46288", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83", "content": "", "creation_timestamp": "2025-12-16T06:48:31.589489Z"}, {"uuid": "ba1498b3-8810-4eca-8105-1ae71a75ec9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46279", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83", "content": "", "creation_timestamp": "2025-12-16T06:48:31.589489Z"}, {"uuid": "8fbe4ea0-221e-4fa9-beb7-4ffc156f37c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46818", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "7700a74e-540b-44e2-b510-ccd873ba26e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46819", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "606795f3-4f10-4903-a5a1-7fc95610d177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "5413ca69-3c28-47f1-90e3-3f1b7e43ab64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "0b36074a-e549-4e1d-872b-9c2879a95f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1550", "content": "", "creation_timestamp": "2025-05-15T04:00:00.000000Z"}, {"uuid": "d9d964f7-d8d6-49fa-9d00-05890ce2a95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1551", "content": "", "creation_timestamp": "2025-05-16T04:00:00.000000Z"}, {"uuid": "a9775319-a051-43c8-abcd-15415483f514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46597", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqd7rymcj2h", "content": "", "creation_timestamp": "2026-03-23T15:00:27.747485Z"}, {"uuid": "fd037114-03ac-47e6-b408-b55e9894f9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19c7bf81-024f-40ee-8fb8-6d02010e2383", "content": "", "creation_timestamp": "2026-02-02T12:26:00.337293Z"}, {"uuid": "a937af73-be9a-47fa-982c-3163edd59f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4677", "type": "seen", "source": "Telegram/0Jzl9Q6YMruvhDow6TT000AAv9kgikcEb_uH5cbueyHp7zA", "content": "", "creation_timestamp": "2026-01-07T19:08:58.000000Z"}, {"uuid": "9a8ac570-dc6a-4f80-b19b-96572d10aefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4677", "type": "seen", "source": "Telegram/ClQlCkUK_g-41DnO-lFV9vjntTb0h6MDzDnf9KQOdYwqtyI", "content": "", "creation_timestamp": "2026-01-07T19:09:06.000000Z"}, {"uuid": "589dc4ca-fa03-4653-835c-4d25bb88b33c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46494", "type": "seen", "source": "Telegram/ZkjvQF7rSldYgsLGCpUWPUjAegNj67QsktTjs09B2PtPPs8", "content": "", "creation_timestamp": "2026-01-07T14:05:15.000000Z"}, {"uuid": "d3d03992-24b5-44ae-b77c-e08a20692835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46434", "type": "seen", "source": "Telegram/ZkjvQF7rSldYgsLGCpUWPUjAegNj67QsktTjs09B2PtPPs8", "content": "", "creation_timestamp": "2026-01-07T14:05:15.000000Z"}, {"uuid": "7bb0aa63-3c6f-4498-859c-86bebb66c209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46255", "type": "seen", "source": "Telegram/QHE3ZGhFyl2T5Z4zPcVefx-4WihQCgoreYtJ2GbiYf5-7cY", "content": "", "creation_timestamp": "2026-01-05T18:05:12.000000Z"}, {"uuid": "5aee97bc-d88b-4058-93db-b1c149a2e7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4676", "type": "seen", "source": "Telegram/z4Hdig2Y-CzYhBdtVlGTwJ9KW9i_SWl3bFYnRlWuZ8V2CdM", "content": "", "creation_timestamp": "2026-01-07T18:06:41.000000Z"}, {"uuid": "1fe7a764-5528-4785-8585-ea38d67fc384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4675", "type": "seen", "source": "Telegram/z4Hdig2Y-CzYhBdtVlGTwJ9KW9i_SWl3bFYnRlWuZ8V2CdM", "content": "", "creation_timestamp": "2026-01-07T18:06:41.000000Z"}, {"uuid": "cb3a84d6-9da9-4f0a-93fc-b9944852046a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4676", "type": "seen", "source": "Telegram/BnTAIC0iodkqMq4D8miTs1BNlTWY2vPbrNPo5ViH8Dm-XRI", "content": "", "creation_timestamp": "2026-01-07T18:07:02.000000Z"}, {"uuid": "7aa21f5f-5ea0-4441-b493-51ad8b66e33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46696", "type": "seen", "source": "Telegram/TCex7aZekT09DvEY9wX636dHaOk7Nos7qsus59ia7rYD0xo", "content": "", "creation_timestamp": "2026-01-06T16:03:36.000000Z"}, {"uuid": "6754e910-59f2-465d-9b4f-0829571f04f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46256", "type": "seen", "source": "Telegram/ZkjvQF7rSldYgsLGCpUWPUjAegNj67QsktTjs09B2PtPPs8", "content": "", "creation_timestamp": "2026-01-07T14:05:15.000000Z"}, {"uuid": "3d202818-8516-46c0-84d8-b58899bf47eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46523", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46523\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devignstudiosltd COVID-19 (Coronavirus) Update Your Customers allows Stored XSS. This issue affects COVID-19 (Coronavirus) Update Your Customers: from n/a through 1.5.1.\n\ud83d\udccf Published: 2025-04-24T16:09:26.412Z\n\ud83d\udccf Modified: 2025-04-24T16:09:26.412Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/covid-19-alert/vulnerability/wordpress-covid-19-coronavirus-update-your-customers-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:41.000000Z"}, {"uuid": "3397cb18-135d-49a5-ba81-8d0156a9515f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46473", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13287", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46473\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in djjmz Social Counter allows Object Injection. This issue affects Social Counter: from n/a through 2.0.5.\n\ud83d\udccf Published: 2025-04-24T16:09:27.002Z\n\ud83d\udccf Modified: 2025-04-24T16:09:27.002Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/social-counter/vulnerability/wordpress-social-counter-2-0-5-php-object-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:40.000000Z"}, {"uuid": "2bb86f3e-85db-408f-898c-1c490b83a7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46498", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46498\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in nghialuu Zalo Official Live Chat allows Cross Site Request Forgery. This issue affects Zalo Official Live Chat: from n/a through 1.0.0.\n\ud83d\udccf Published: 2025-04-24T16:09:27.592Z\n\ud83d\udccf Modified: 2025-04-24T16:09:27.592Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/zalo-official-live-chat/vulnerability/wordpress-zalo-official-live-chat-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:39.000000Z"}, {"uuid": "974fe07f-9638-4bf2-b1cc-851427732872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46519\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Missing Authorization vulnerability in Michael Revellin-Clerc Media Library Downloader allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Library Downloader: from n/a through 1.3.1.\n\ud83d\udccf Published: 2025-04-24T16:09:23.610Z\n\ud83d\udccf Modified: 2025-04-24T16:09:23.610Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/media-library-downloader/vulnerability/wordpress-media-library-downloader-1-3-1-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:49.000000Z"}, {"uuid": "d68a536e-ab00-49b8-8233-d40a88ab8dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46531", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46531\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Server-Side Request Forgery (SSRF) vulnerability in Ankur Vishwakarma WP AVCL Automation Helper (formerly WPFlyLeads) allows Server Side Request Forgery. This issue affects WP AVCL Automation Helper (formerly WPFlyLeads): from n/a through 3.4.\n\ud83d\udccf Published: 2025-04-24T16:09:24.176Z\n\ud83d\udccf Modified: 2025-04-24T16:09:24.176Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/woozap/vulnerability/wordpress-wp-avcl-automation-helper-formerly-wpflyleads-3-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:48.000000Z"}, {"uuid": "a5bff2c3-1131-4f7f-8ebb-962fbe590a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46477", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46477\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Carlo La Pera WP Customize Login Page allows Stored XSS. This issue affects WP Customize Login Page: from n/a through 1.6.5.\n\ud83d\udccf Published: 2025-04-24T16:09:20.659Z\n\ud83d\udccf Modified: 2025-04-24T16:09:20.659Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-customize-login-page/vulnerability/wordpress-wp-customize-login-page-1-6-5-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:54.000000Z"}, {"uuid": "cd04a7bd-f14f-40f5-8aef-6b4fbc8b1440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46485", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13297", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46485\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Missing Authorization vulnerability in Carlo La Pera WP Customize Login Page allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP Customize Login Page: from n/a through 1.6.5.\n\ud83d\udccf Published: 2025-04-24T16:09:21.243Z\n\ud83d\udccf Modified: 2025-04-24T16:09:21.243Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-customize-login-page/vulnerability/wordpress-wp-customize-login-page-1-6-5-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:53.000000Z"}, {"uuid": "83efd930-805f-490c-a8d5-32794bf8cd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46489", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46489\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Missing Authorization vulnerability in vinodvaswani9 Bulk Assign Linked Products For WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Bulk Assign Linked Products For WooCommerce: from n/a through 2.1.\n\ud83d\udccf Published: 2025-04-24T16:09:21.826Z\n\ud83d\udccf Modified: 2025-04-24T16:09:21.826Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wc-bulk-assign-linked-products/vulnerability/wordpress-bulk-assign-linked-products-for-woocommerce-2-1-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:52.000000Z"}, {"uuid": "b8c0927c-9788-445d-ab58-e53f1d0439c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46503", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13295", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46503\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Server-Side Request Forgery (SSRF) vulnerability in josheli Simple Google Photos Grid allows Server Side Request Forgery. This issue affects Simple Google Photos Grid: from n/a through 1.5.\n\ud83d\udccf Published: 2025-04-24T16:09:22.403Z\n\ud83d\udccf Modified: 2025-04-24T16:09:22.403Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/simple-google-photos-grid/vulnerability/wordpress-simple-google-photos-grid-1-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:51.000000Z"}, {"uuid": "286f79b0-fbed-4ffd-8243-a487638088f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "published-proof-of-concept", "source": "Telegram/Yg-3D6entKLOzziGCWnbdbCyve2q_UIAAWGhHhU8LUZNcEI", "content": "", "creation_timestamp": "2025-12-01T21:00:04.000000Z"}, {"uuid": "50cce996-a070-4786-a276-d0c38be8c5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "seen", "source": "Telegram/V_hoToMNJWitXda3AeStRLzASmqLUaxvEeMJmzsq6dWwPe4", "content": "", "creation_timestamp": "2025-06-10T04:31:28.000000Z"}, {"uuid": "192e3f51-88fe-4b44-b15a-402855ad8730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "published-proof-of-concept", "source": "Telegram/SuCuNuYYG7YH6LF-PMvjYx2GIDz9A5wanFKy4pWUO100XY8", "content": "", "creation_timestamp": "2025-06-10T04:31:27.000000Z"}, {"uuid": "a750a2fb-8506-4147-b531-32d97461952c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "published-proof-of-concept", "source": "Telegram/L9NvAnTGGF6o0vkyY3wXSpskvm72yWoKlMeoTLBXCFbPe3k", "content": "", "creation_timestamp": "2025-06-10T21:00:06.000000Z"}, {"uuid": "d4f79962-7002-4e6d-9101-4ddbb2fdf199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46584", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46584\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Vulnerability of improper authentication logic implementation in the file system module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-05-06T07:00:54.166Z\n\ud83d\udccf Modified: 2025-05-06T07:00:54.166Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/5/", "creation_timestamp": "2025-05-06T07:20:27.000000Z"}, {"uuid": "38a80d00-ccea-461b-b5f4-371c8a99f27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4613", "type": "published-proof-of-concept", "source": "Telegram/Tm6Qol0u5cfUT8rM5mRAIZu8ThMb_EKnlB7gUDiDo4ihIcE", "content": "", "creation_timestamp": "2025-06-12T10:53:51.000000Z"}, {"uuid": "9c83adef-334f-4a1d-83ec-b320f42bc83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46585", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15065", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46585\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Out-of-bounds array read/write vulnerability in the kernel module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-05-06T07:04:03.588Z\n\ud83d\udccf Modified: 2025-05-06T07:04:03.588Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/5/", "creation_timestamp": "2025-05-06T07:20:26.000000Z"}, {"uuid": "12a0e70a-25da-44f7-8cb8-83b2278dbcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46586", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46586\n\ud83d\udd25 CVSS Score: 5.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Permission control vulnerability in the contacts module\nImpact: Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2025-05-06T07:05:19.066Z\n\ud83d\udccf Modified: 2025-05-06T07:05:19.066Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/5/", "creation_timestamp": "2025-05-06T07:20:25.000000Z"}, {"uuid": "1b3c20b2-c358-43d5-ac11-23bb0d7e778e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4613", "type": "published-proof-of-concept", "source": "Telegram/DMiDZkfCIv8HF3l_obefxqZffqbFQToSdK7CcGeqM5WbioQ", "content": "", "creation_timestamp": "2025-06-12T10:31:18.000000Z"}, {"uuid": "bbb2d6aa-a3ab-4ca5-98ae-647048ff2e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46181", "type": "published-proof-of-concept", "source": "Telegram/AQLqSmkNlCoeSoxHPJ0-yTa0CWCJVZX8INrsTwBoRnwLO3c", "content": "", "creation_timestamp": "2025-06-14T15:00:09.000000Z"}, {"uuid": "70230449-b3fd-45cb-ba58-8fdce4052782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46109", "type": "seen", "source": "Telegram/T9EREMrZJ40Ll1HhU5KoHVoW6Lc4lkfgV3T7v7c_6jHizrY", "content": "", "creation_timestamp": "2025-06-18T16:32:08.000000Z"}, {"uuid": "e17188ef-5206-47ef-ad30-188f0c7915f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46524", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13324", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46524\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in stesvis WP Filter Post Category allows Stored XSS. This issue affects WP Filter Post Category: from n/a through 2.1.4.\n\ud83d\udccf Published: 2025-04-24T16:08:58.832Z\n\ud83d\udccf Modified: 2025-04-24T18:28:32.600Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-filter-post-categories/vulnerability/wordpress-wp-filter-post-category-plugin-2-1-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T19:06:57.000000Z"}, {"uuid": "757c9071-755d-4f8c-8ff6-9c3f3fe4b878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46801", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/37771", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-46801 \u2013 Pgpool-II Authentication Bypass PoC\nURL\uff1ahttps://github.com/xplitter/CVE-2025-46801\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-22T21:49:11.000000Z"}, {"uuid": "fba479bf-3154-4ce3-bb7f-c0f6109503b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46204", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38577", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC of CVE-2025-46204\nURL\uff1ahttps://github.com/spbavarva/CVE-2025-46204\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-29T19:36:32.000000Z"}, {"uuid": "aac9fa20-84f5-4d76-9463-6417cee93748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46783", "type": "seen", "source": "Telegram/o1ZT_zABdZN3OAzUP6RsYm0T2XzE-gKGKO27WNgsxHNfYZg", "content": "", "creation_timestamp": "2025-06-13T09:31:46.000000Z"}, {"uuid": "fe688a30-adbf-4ec8-b32a-e53cf4625470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46060", "type": "published-proof-of-concept", "source": "Telegram/LbSE4ui0deWaIbAIy_SI6HyoY8sH4t9aZhKhv-gkpgMW3iE", "content": "", "creation_timestamp": "2025-06-13T17:05:18.000000Z"}, {"uuid": "8978a87e-5716-4385-9845-cfdb734f7551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46491", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46491\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matthew Muro Multi-Column Taxonomy List allows Stored XSS. This issue affects Multi-Column Taxonomy List: from n/a through 1.5.\n\ud83d\udccf Published: 2025-04-24T16:09:11.340Z\n\ud83d\udccf Modified: 2025-04-24T20:02:14.801Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/multi-column-taxonomy-list/vulnerability/wordpress-multi-column-taxonomy-list-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:46.000000Z"}, {"uuid": "48a9eb5d-a68f-491d-b657-5ea068e18f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46483", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46483\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Moss Peadig\u2019s Google +1 Button allows DOM-Based XSS. This issue affects Peadig\u2019s Google +1 Button: from n/a through 0.1.2.\n\ud83d\udccf Published: 2025-04-24T16:09:10.780Z\n\ud83d\udccf Modified: 2025-04-24T20:02:26.022Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/google-1/vulnerability/wordpress-peadig-s-google-1-button-0-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:45.000000Z"}, {"uuid": "c52affc4-a398-448f-ac40-5a96c5b48449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46479", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46479\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevynCJohnson BBCode Deluxe allows DOM-Based XSS. This issue affects BBCode Deluxe: from n/a through 2020.08.01.2.\n\ud83d\udccf Published: 2025-04-24T16:09:10.182Z\n\ud83d\udccf Modified: 2025-04-24T20:02:35.725Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/bbcode-deluxe/vulnerability/wordpress-bbcode-deluxe-2020-08-01-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:40.000000Z"}, {"uuid": "afa397b6-89cf-4917-bcc8-80c0dd5a8f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46475", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13330", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46475\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in terrillthompson Able Player allows DOM-Based XSS. This issue affects Able Player: from n/a through 1.2.1.\n\ud83d\udccf Published: 2025-04-24T16:09:09.631Z\n\ud83d\udccf Modified: 2025-04-24T20:02:45.196Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ableplayer/vulnerability/wordpress-able-player-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:39.000000Z"}, {"uuid": "b2766578-04f8-4615-8483-c59078df1a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13363", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46271\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: UNI-NMS-Lite is vulnerable to a command injection attack that could \nallow an unauthenticated attacker to read or manipulate device data.\n\ud83d\udccf Published: 2025-04-24T22:53:51.447Z\n\ud83d\udccf Modified: 2025-04-24T22:53:51.447Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "creation_timestamp": "2025-04-24T23:09:18.000000Z"}, {"uuid": "4e206a32-2b70-4f47-ba10-057ed1800f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46513", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46513\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Codebangers All in One Time Clock Lite allows Cross Site Request Forgery. This issue affects All in One Time Clock Lite: from n/a through 1.3.324.\n\ud83d\udccf Published: 2025-04-24T16:09:14.256Z\n\ud83d\udccf Modified: 2025-04-24T20:01:33.888Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/aio-time-clock-lite/vulnerability/wordpress-all-in-one-time-clock-lite-1-3-324-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:54.000000Z"}, {"uuid": "b5d35a8a-9bf9-47ac-8d16-db4d5d481666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46509", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13338", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46509\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrey Mikhalchuk 360 View allows Stored XSS. This issue affects 360 View: from n/a through 1.1.0.\n\ud83d\udccf Published: 2025-04-24T16:09:13.671Z\n\ud83d\udccf Modified: 2025-04-24T20:01:41.349Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/360-view/vulnerability/wordpress-360-view-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:53.000000Z"}, {"uuid": "617e0710-a41b-4efc-96e9-47295d245121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46505\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in farinspace Peekaboo allows Stored XSS. This issue affects Peekaboo: from n/a through 1.1.\n\ud83d\udccf Published: 2025-04-24T16:09:13.086Z\n\ud83d\udccf Modified: 2025-04-24T20:01:49.404Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/peekaboo/vulnerability/wordpress-peekaboo-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:52.000000Z"}, {"uuid": "1075d164-9663-4af7-b17e-d3016320d89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46501", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46501\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in biancardi Mixcloud Embed allows Stored XSS. This issue affects Mixcloud Embed: from n/a through 2.2.0.\n\ud83d\udccf Published: 2025-04-24T16:09:12.520Z\n\ud83d\udccf Modified: 2025-04-24T20:01:58.071Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/mixcloud-embed/vulnerability/wordpress-mixcloud-embed-2-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:48.000000Z"}, {"uuid": "f3726820-01f7-4e91-8eb5-8e9a83fc1e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46496", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46496\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oniswap Mini twitter feed allows Stored XSS. This issue affects Mini twitter feed: from n/a through 3.0.\n\ud83d\udccf Published: 2025-04-24T16:09:11.948Z\n\ud83d\udccf Modified: 2025-04-24T20:02:07.391Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/mini-twitter-feed/vulnerability/wordpress-mini-twitter-feed-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T20:06:47.000000Z"}, {"uuid": "b4ff065a-8bf6-41e4-a47d-385c2579c3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13361", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46274\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: UNI-NMS-Lite uses hard-coded credentials that could allow an \nunauthenticated attacker to read, manipulate and create entries in the \nmanaged database.\n\ud83d\udccf Published: 2025-04-24T22:57:55.619Z\n\ud83d\udccf Modified: 2025-04-24T23:00:17.360Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "creation_timestamp": "2025-04-24T23:09:16.000000Z"}, {"uuid": "e93f679f-7a7a-4322-8099-2ef4989736c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13360", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46273\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: UNI-NMS-Lite uses hard-coded credentials that could allow an \nunauthenticated attacker to gain administrative privileges to all \nUNI-NMS managed devices.\n\ud83d\udccf Published: 2025-04-24T22:57:21.868Z\n\ud83d\udccf Modified: 2025-04-24T23:00:58.119Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "creation_timestamp": "2025-04-24T23:09:15.000000Z"}, {"uuid": "3882edb9-118b-402e-b107-3f15ab49397f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46289", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pezftrk2g", "content": "", "creation_timestamp": "2026-04-09T21:02:45.946164Z"}, {"uuid": "0f3e706d-9af9-4279-aaa3-981471848c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46726", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14979", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46726\n\ud83d\udd25 CVSS Score: 7.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Version 0.53.4 fixes the issue.\n\ud83d\udccf Published: 2025-05-05T19:21:19.597Z\n\ud83d\udccf Modified: 2025-05-05T20:07:01.257Z\n\ud83d\udd17 References:\n1. https://github.com/langroid/langroid/security/advisories/GHSA-pw95-88fg-3j6f\n2. https://github.com/langroid/langroid/commit/36e7e7db4dd1636de225c2c66c84052b1e9ac3c3\n3. https://github.com/langroid/langroid/blob/df6227e6c079ec22bb2768498423148d6685acff/langroid/agent/xml_tool_message.py#L51-L52", "creation_timestamp": "2025-05-05T20:20:04.000000Z"}, {"uuid": "bab46797-cf40-4d45-aff9-082e3782f2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46545", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46545\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T02:24:23.784Z\n\ud83d\udd17 References:\n1. https://sherparpa.com\n2. https://twitter.com/ArtyomBrylev\n3. https://deiteriy.com\n4. https://gist.github.com/ArtemBrylev/5a0c76285d5fa9daf4ec753034185de7", "creation_timestamp": "2025-04-25T03:06:47.000000Z"}, {"uuid": "ffadc602-c946-437f-ab56-cc5af9577f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13369", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46544\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In Sherpa Orchestrator 141851, a low-privileged user can elevate their privileges by creating new users and roles.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T02:29:34.996Z\n\ud83d\udd17 References:\n1. https://sherparpa.com\n2. https://twitter.com/ArtyomBrylev\n3. https://deiteriy.com\n4. https://gist.github.com/ArtemBrylev/a258f920a6556470951c9a483fcf194a", "creation_timestamp": "2025-04-25T03:06:46.000000Z"}, {"uuid": "f47aa6c3-679c-4cfd-81ae-ccc27e5dabfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46546", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46546\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll, /api/gui/processVersion/export/csv/, /api/gui/processVersion/export/xlsx/, /api/gui/processVersion/list/, /api/gui/robot/list/, /api/gui/task/export/csv/, /api/gui/task/export/xlsx/, and /api/gui/task/list/.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T02:38:27.087Z\n\ud83d\udd17 References:\n1. https://sherparpa.com\n2. https://twitter.com/ArtyomBrylev\n3. https://deiteriy.com\n4. https://gist.github.com/ArtemBrylev/59b4c0825a988f39a58b79e4e8d2f378", "creation_timestamp": "2025-04-25T03:06:45.000000Z"}, {"uuid": "e8a6e92a-c2bc-40b8-b6e9-91492eadc682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46157", "type": "published-proof-of-concept", "source": "Telegram/OXriKNc_hMVzarWKNRBlOTa_UbZYKpgPWErl0iHOZOWcP6Q", "content": "", "creation_timestamp": "2025-06-18T14:31:03.000000Z"}, {"uuid": "614c094e-4466-489b-9f66-36746612bb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46595", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46595\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a module that allows flags to be added to nodes, comments, users, and any other type of entity. It doesn't verify flag links before performing the flag action, or verify that the response returned was provided by the flag module. This can allow crafted HTML to result in Cross Site Scripting. This is mitigated by the fact that an attacker must have a role with permission to create links on the website, for example: create or edit comments or content with a filtered text format.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T03:05:31.211Z\n\ud83d\udd17 References:\n1. https://backdropcms.org/security/backdrop-sa-contrib-2025-011", "creation_timestamp": "2025-04-25T04:08:56.000000Z"}, {"uuid": "52642bc8-fa59-474b-ae4d-55e815d47c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46547", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46547\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T02:19:20.517Z\n\ud83d\udd17 References:\n1. https://sherparpa.com\n2. https://twitter.com/ArtyomBrylev\n3. https://deiteriy.com\n4. https://gist.github.com/ArtemBrylev/9af206c46d7505db03ad6fcd9fc46f7f", "creation_timestamp": "2025-04-25T03:06:48.000000Z"}, {"uuid": "734ea65c-0c86-4ccc-8bb3-3fbe23a83393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46599", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13376", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46599\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticated access to this port, exposing credentials.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T04:27:34.356Z\n\ud83d\udd17 References:\n1. https://github.com/f1veT/BUG/issues/2\n2. https://cloud.google.com/kubernetes-engine/docs/how-to/disable-kubelet-readonly-port\n3. https://github.com/k3s-io/k3s/issues/12164\n4. https://github.com/k3s-io/k3s/commit/097b63e588e3c844cdf9b967bcd0a69f4fc0aa0a\n5. https://github.com/k3s-io/k3s/compare/v1.32.3+k3s1...v1.32.4-rc1+k3s1", "creation_timestamp": "2025-04-25T05:08:56.000000Z"}, {"uuid": "a9676e2d-fcbf-417f-95df-ac4e6c03f43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13390", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46616\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T06:36:30.847Z\n\ud83d\udd17 References:\n1. https://www.quantum.com/en/service-support/security-bulletins/stornext-gui-multiple-security-vulnerabilities-stornext-gui-multiple-security-vulnerabilities/", "creation_timestamp": "2025-04-25T07:07:19.000000Z"}, {"uuid": "34ff9154-a786-4351-9e6a-c312cbd6e7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46535", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13395", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46535\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0.\n\ud83d\udccf Published: 2025-04-25T08:05:56.925Z\n\ud83d\udccf Modified: 2025-04-25T08:05:56.925Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ms-registration/vulnerability/wordpress-custom-login-and-registration-plugin-1-0-0-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-25T09:07:13.000000Z"}, {"uuid": "46afecdb-3902-4683-8f82-f673054ef36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13391", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46617\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T06:34:12.559Z\n\ud83d\udd17 References:\n1. https://www.quantum.com/en/service-support/security-bulletins/stornext-gui-multiple-security-vulnerabilities-stornext-gui-multiple-security-vulnerabilities/", "creation_timestamp": "2025-04-25T07:07:20.000000Z"}, {"uuid": "e6e4e1eb-b2bf-4e9b-abc8-7eb4555c06b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46814", "type": "seen", "source": "https://gist.github.com/calenwalshe/e60488e3998fd3d2e527c4af1317edbc", "content": "", "creation_timestamp": "2026-04-15T04:32:14.000000Z"}, {"uuid": "4b755e0b-fff2-4fe4-8532-899a83cdeaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/ctinow/235334", "content": "Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit\nhttps://ift.tt/cgDwhsi", "creation_timestamp": "2025-05-14T18:09:36.000000Z"}, {"uuid": "a7432168-e0e0-4c62-b453-4bc12f9148d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46234", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13412", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46234\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Habibur Rahman Razib Control Listings allows Reflected XSS. This issue affects Control Listings: from n/a through 1.0.4.1.\n\ud83d\udccf Published: 2025-04-24T16:08:29.212Z\n\ud83d\udccf Modified: 2025-04-25T13:57:49.296Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/control-listings/vulnerability/wordpress-control-listings-plugin-1-0-4-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-25T14:07:01.000000Z"}, {"uuid": "f48646d8-6504-42a2-8265-1dccce3b3fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjp4gct7zr2k", "content": "", "creation_timestamp": "2026-04-17T14:16:33.508174Z"}, {"uuid": "7326fd65-01e6-4b51-84f2-6a1849d94c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46605", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjp4kh7goo26", "content": "", "creation_timestamp": "2026-04-17T14:18:52.282544Z"}, {"uuid": "3b9b8c1e-2762-4a0c-b945-62d15299cf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46607", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjp4tsx3dh2t", "content": "", "creation_timestamp": "2026-04-17T14:24:07.639029Z"}, {"uuid": "84dbf568-091b-4a59-8d29-a4740c0769ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjp4owlcbn2r", "content": "", "creation_timestamp": "2026-04-17T14:21:22.567323Z"}, {"uuid": "f383a497-3fa9-4f04-8bd1-f8fc5af45891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13466", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46272\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection \nattack that could allow an unauthenticated attacker to execute OS \ncommands on the host system.\n\ud83d\udccf Published: 2025-04-24T22:56:13.381Z\n\ud83d\udccf Modified: 2025-04-25T15:59:56.581Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "creation_timestamp": "2025-04-25T16:07:28.000000Z"}, {"uuid": "9ab91322-616e-4dec-b15b-d8b5184ebc15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46392", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwqt6xo2w", "content": "", "creation_timestamp": "2026-04-22T12:50:20.575688Z"}, {"uuid": "012cd490-ac6f-4c94-a0b2-cdac8e341392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4606", "type": "published-proof-of-concept", "source": "Telegram/I2SzHYS-2X5tGNiLKp66oCYJvjCLqCM_5NMA3TgqWP_uEsY", "content": "", "creation_timestamp": "2025-08-03T03:00:05.000000Z"}, {"uuid": "3e59757f-544b-411c-890f-e805e2706965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46018", "type": "published-proof-of-concept", "source": "Telegram/Fo5WMlHUp_cq9tbJj4rX4mRtIde4Apfwtddxmu6B3bK6Qx8", "content": "", "creation_timestamp": "2025-08-01T15:00:05.000000Z"}, {"uuid": "c2b2c8fb-4f6b-44aa-b19d-2d73573de5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46687", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13634", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46687\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T19:38:23.826Z\n\ud83d\udd17 References:\n1. https://github.com/quickjs-ng/quickjs/issues/1018\n2. https://github.com/quickjs-ng/quickjs/pull/1020\n3. https://github.com/bellard/quickjs/commit/1eb05e44fad89daafa8ee3eb74b8520b4a37ec9a\n4. https://github.com/quickjs-ng/quickjs/commit/28fa43d3ddff2c1ba91b6e3a788b2d7ba82d1465\n5. https://github.com/bellard/quickjs/issues/399\n6. https://bellard.org/quickjs/Changelog", "creation_timestamp": "2025-04-27T20:09:41.000000Z"}, {"uuid": "26afc633-9e48-45de-ac4b-f2fc77b03bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46099", "type": "published-proof-of-concept", "source": "Telegram/_nzYKhchPqnjkmQtRnvSWn0Xnfot_hyx5mgumD7MVA9piB0", "content": "", "creation_timestamp": "2025-07-19T03:00:06.000000Z"}, {"uuid": "23b075ce-e960-4dfd-8d65-5f4529f24c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46333", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13550", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46333\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: z2d is a pure Zig 2D graphics library. In version 0.6.0, when writing from one surface to another using `z2d.compositor.StrideCompositor.run`, the source surface can be completely out-of-bounds on the x-axis (but not on the y-axis) by way of a negative offset. This results in an overflow of the value controlling the length of the stride. In non-safe optimization modes (consumers compiling with `ReleaseFast` or `ReleaseSmall`), this could potentially lead to invalid memory accesses or corruption. This issue is patched in version 0.6.1.\n\ud83d\udccf Published: 2025-04-25T20:20:22.202Z\n\ud83d\udccf Modified: 2025-04-25T21:42:11.412Z\n\ud83d\udd17 References:\n1. https://github.com/vancluever/z2d/security/advisories/GHSA-mm4c-p35v-7hx3\n2. https://github.com/vancluever/z2d/issues/104\n3. https://github.com/vancluever/z2d/issues/105", "creation_timestamp": "2025-04-25T22:07:29.000000Z"}, {"uuid": "0854c4ea-e995-4193-a0a3-293c2a2856e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46657", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13627", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46657\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T16:12:20.183Z\n\ud83d\udd17 References:\n1. https://github.com/nov-1337/CVE-2025-46657/blob/main/CVE-2025-46657.md", "creation_timestamp": "2025-04-27T17:10:14.000000Z"}, {"uuid": "805473d0-33aa-4dd9-a596-6b4493efb3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46731", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14983", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46731\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work. Users should update to the patched versions 4.14.13 or 5.6.15 to mitigate the issue.\n\ud83d\udccf Published: 2025-05-05T19:35:31.347Z\n\ud83d\udccf Modified: 2025-05-05T20:03:42.802Z\n\ud83d\udd17 References:\n1. https://github.com/craftcms/cms/security/advisories/GHSA-7c58-g782-9j38\n2. https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv\n3. https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production\n4. http://github.com/craftcms/cms/pull/17026", "creation_timestamp": "2025-05-05T20:20:11.000000Z"}, {"uuid": "926a8585-7df0-4bcc-9eed-0a08b79a636c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "Telegram/Hm3ugRWehkmXjIwoXMQ1e0xE3_k7SHty-pbu0PlPJz-XaJQ", "content": "", "creation_timestamp": "2025-11-15T15:00:10.000000Z"}, {"uuid": "cf49d6a4-d615-41d8-bbd9-7c22094bb123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46818", "type": "published-proof-of-concept", "source": "Telegram/cgjkjeFvaYTYY2Hy-tHxrmfy7h97b4Y-DZ7h_Fd2T5OlKEk", "content": "", "creation_timestamp": "2025-10-07T09:00:04.000000Z"}, {"uuid": "00e9c729-8b64-4053-8520-1ab2530c68cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46652", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13580", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46652\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not propagated to the extracted files.\n\ud83d\udccf Published: 2025-04-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-26T17:53:03.829Z\n\ud83d\udd17 References:\n1. https://github.com/EnisAksu/Argonis/blob/main/CVEs/IZArc/IZArc%20Mark-of-the-Web%20Bypass%20Vulnerability.md\n2. https://github.com/EnisAksu/Argonis/security/advisories/GHSA-637g-8v47-79mv\n3. https://www.izarc.org/news", "creation_timestamp": "2025-04-26T18:08:56.000000Z"}, {"uuid": "a239c086-b4dd-4599-befe-7048544c4a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46655", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13585", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46655\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain cases of different-origin file storage, such as AWS S3. NOTE: it can be considered a user error if AWS is employed for hosting untrusted JavaScript content, but the selected architecture within AWS does not have components that are able to insert Content-Security-Policy headers.\n\ud83d\udccf Published: 2025-04-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-26T20:38:04.712Z\n\ud83d\udd17 References:\n1. https://github.com/hackmdio/codimd/issues/1910\n2. https://github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md", "creation_timestamp": "2025-04-26T21:09:38.000000Z"}, {"uuid": "2d978a32-d057-4e8e-8592-93e1c8f69fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46674", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46674\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T00:49:46.138Z\n\ud83d\udd17 References:\n1. https://securitybynature.fr/post/hacking-cryptolib/\n2. https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2\n3. https://github.com/nasa/CryptoLib/pull/365", "creation_timestamp": "2025-04-27T01:08:29.000000Z"}, {"uuid": "f04397ed-3ed8-499f-b7d2-a8b34f7551fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46654", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13586", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46654\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaded .js file.\n\ud83d\udccf Published: 2025-04-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-26T20:36:57.216Z\n\ud83d\udd17 References:\n1. https://github.com/hackmdio/codimd/issues/1910\n2. https://github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md", "creation_timestamp": "2025-04-26T21:09:39.000000Z"}, {"uuid": "ac5f0a52-1ba5-4eaa-8cbd-5bb0cb8924c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46577", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13594", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46577\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information.\n\ud83d\udccf Published: 2025-04-27T01:21:27.266Z\n\ud83d\udccf Modified: 2025-04-27T01:39:39.095Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601469", "creation_timestamp": "2025-04-27T02:08:56.000000Z"}, {"uuid": "90f78bc8-4795-427b-af17-bd899d67da59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46653", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13587", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46653\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not \"cryptographically secure.\" (Also, there is a scenario in which only the last two characters of a hexoid string need to be guessed, but this is not often relevant.) NOTE: this does not imply that, in a typical use case, attackers will be able to exploit any hexoid behavior to upload and execute their own content.\n\ud83d\udccf Published: 2025-04-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-26T20:35:11.290Z\n\ud83d\udd17 References:\n1. https://github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md\n2. https://github.com/node-formidable/formidable/blob/d0fbec13edc8add54a1afb9ce1a8d3db803f8d47/CHANGELOG.md?plain=1#L10\n3. https://github.com/node-formidable/formidable/commit/022c2c5577dfe14d2947f10909d81b03b6070bf5", "creation_timestamp": "2025-04-26T21:09:40.000000Z"}, {"uuid": "10e912a5-1094-4d3c-8e8c-a0a668b02f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46675", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13593", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46675\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T00:42:52.544Z\n\ud83d\udd17 References:\n1. https://securitybynature.fr/post/hacking-cryptolib/\n2. https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2\n3. https://github.com/nasa/CryptoLib/pull/358\n4. https://github.com/nasa/CryptoLib/pull/359", "creation_timestamp": "2025-04-27T01:08:32.000000Z"}, {"uuid": "e35efaf1-79b4-4a05-881a-202c310b5a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46672", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46672\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T00:45:19.443Z\n\ud83d\udd17 References:\n1. https://github.com/nasa/CryptoLib/pull/360\n2. https://securitybynature.fr/post/hacking-cryptolib/\n3. https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2", "creation_timestamp": "2025-04-27T01:08:31.000000Z"}, {"uuid": "1decc217-99c5-4847-b0fd-1b6b25365698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46673", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13591", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46673\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T00:47:31.630Z\n\ud83d\udd17 References:\n1. https://securitybynature.fr/post/hacking-cryptolib/\n2. https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2\n3. https://github.com/nasa/CryptoLib/pull/286\n4. https://github.com/nasa/CryptoLib/pull/306\n5. https://github.com/nasa/CryptoLib/compare/v1.3.0...v1.3.1", "creation_timestamp": "2025-04-27T01:08:30.000000Z"}, {"uuid": "2807f6c7-c2b3-4e6e-a994-724f2096f961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46575", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13598", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46575\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.\n\ud83d\udccf Published: 2025-04-27T01:12:36.738Z\n\ud83d\udccf Modified: 2025-04-27T01:12:36.738Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392205", "creation_timestamp": "2025-04-27T02:08:59.000000Z"}, {"uuid": "ec5c09a4-6bbb-473e-b590-a5470c47f9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46576", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13597", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46576\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content.\n\ud83d\udccf Published: 2025-04-27T01:16:37.005Z\n\ud83d\udccf Modified: 2025-04-27T01:17:04.904Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601464", "creation_timestamp": "2025-04-27T02:08:58.000000Z"}, {"uuid": "e34e2089-31cf-4c19-8694-11f29a47985b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46188", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15766", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46188\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T15:59:11.167Z\n\ud83d\udd17 References:\n1. https://medium.com/@bijay.kumar1857/sql-injection-to-rce-exploitation-0a5048e592be\n2. https://github.com/x6vrn/mitre/blob/main/CVE-2025-46188.md", "creation_timestamp": "2025-05-09T16:25:04.000000Z"}, {"uuid": "4a181c04-62b0-4bc6-85df-62df612928b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46580", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13600", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46580\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business SQL.\n\ud83d\udccf Published: 2025-04-27T01:49:16.856Z\n\ud83d\udccf Modified: 2025-04-27T01:49:16.856Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4828497866583347285", "creation_timestamp": "2025-04-27T03:08:58.000000Z"}, {"uuid": "678c008f-4cef-4ce6-bd7e-6b5a7bac3a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46574", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13599", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46574\n\ud83d\udd25 CVSS Score: 4.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.\n\ud83d\udccf Published: 2025-04-27T01:07:29.152Z\n\ud83d\udccf Modified: 2025-04-27T01:07:30.168Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392200", "creation_timestamp": "2025-04-27T02:09:03.000000Z"}, {"uuid": "9bf80663-a8a2-4e49-8774-a6a274887309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46689", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13640", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46689\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T21:31:36.229Z\n\ud83d\udd17 References:\n1. https://github.com/ververica/ververica-platform-playground\n2. https://github.com/gozan10/cve/issues/17\n3. https://www.ververica.com/", "creation_timestamp": "2025-04-27T22:09:48.000000Z"}, {"uuid": "ac99693b-d554-4e8e-81a3-9f726b4cec46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46688", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13633", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46688\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T19:40:41.288Z\n\ud83d\udd17 References:\n1. https://github.com/quickjs-ng/quickjs/issues/1018\n2. https://github.com/quickjs-ng/quickjs/pull/1020\n3. https://github.com/bellard/quickjs/commit/1eb05e44fad89daafa8ee3eb74b8520b4a37ec9a\n4. https://github.com/quickjs-ng/quickjs/commit/28fa43d3ddff2c1ba91b6e3a788b2d7ba82d1465\n5. https://github.com/bellard/quickjs/issues/399\n6. https://bellard.org/quickjs/Changelog", "creation_timestamp": "2025-04-27T20:09:40.000000Z"}, {"uuid": "501c6a96-9f5c-4089-aa8d-29b0c5f0d8d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13682", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46661\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier.\n\ud83d\udccf Published: 2025-04-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T13:13:09.272Z\n\ud83d\udd17 References:\n1. https://code-white.com/public-vulnerability-list/\n2. https://www.ipwsystems.com/", "creation_timestamp": "2025-04-28T14:10:49.000000Z"}, {"uuid": "0b79c957-6686-4fb4-ac37-078f3c51a7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46690", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13639", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46690\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request.\n\ud83d\udccf Published: 2025-04-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-27T21:33:01.756Z\n\ud83d\udd17 References:\n1. https://github.com/ververica/ververica-platform-playground\n2. https://www.ververica.com\n3. https://github.com/gozan10/cve/issues/18", "creation_timestamp": "2025-04-27T22:09:47.000000Z"}, {"uuid": "b930fb28-1991-4fdb-a1f3-6446dad52ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15968", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46740\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An authenticated user without user administrative permissions could  change the administrator Account Name.\n\ud83d\udccf Published: 2025-05-12T16:09:22.036Z\n\ud83d\udccf Modified: 2025-05-12T16:09:22.036Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:47.000000Z"}, {"uuid": "861df7f7-cf92-41c1-ab42-d66a660ef7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15967", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46741\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.\n\ud83d\udccf Published: 2025-05-12T16:09:53.581Z\n\ud83d\udccf Modified: 2025-05-12T16:09:53.581Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:43.000000Z"}, {"uuid": "c92c5121-bfc3-4bc1-9807-3ba2860578c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15977", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46738\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L)\n\ud83d\udd39 Description: An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.\n\ud83d\udccf Published: 2025-05-12T16:07:02.820Z\n\ud83d\udccf Modified: 2025-05-12T17:57:51.802Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:19.000000Z"}, {"uuid": "fef29a96-151b-4c92-a6eb-b81432ab11ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15980", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46741\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.\n\ud83d\udccf Published: 2025-05-12T16:09:53.581Z\n\ud83d\udccf Modified: 2025-05-12T17:55:24.025Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:22.000000Z"}, {"uuid": "6bf1a7fd-87f4-454c-ab24-9c15281209be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46745\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An authenticated user without user-management permissions could view other users' account information.\n\ud83d\udccf Published: 2025-05-12T16:11:08.840Z\n\ud83d\udccf Modified: 2025-05-12T17:51:41.630Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:47.000000Z"}, {"uuid": "42880e69-f59b-43df-8547-89fbd34b70fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46326", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13752", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46326\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads logging configuration from a user-provided file. On Linux and macOS, the Connector verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Connector. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 4.4.1.\n\ud83d\udccf Published: 2025-04-28T22:33:01.627Z\n\ud83d\udccf Modified: 2025-04-28T22:33:01.627Z\n\ud83d\udd17 References:\n1. https://github.com/snowflakedb/snowflake-connector-net/security/advisories/GHSA-c82r-c9f7-f5mj\n2. https://github.com/snowflakedb/snowflake-connector-net/commit/393aad3cfa81045a05dd488944db45256e861bff\n3. https://github.com/snowflakedb/snowflake-connector-net/releases/tag/v4.4.1", "creation_timestamp": "2025-04-28T23:10:56.000000Z"}, {"uuid": "d31e798d-bfd7-4a5b-ac25-4b8383941126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16005", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46737\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources.\n\ud83d\udccf Published: 2025-05-12T16:06:23.559Z\n\ud83d\udccf Modified: 2025-05-12T17:58:52.199Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:37:56.000000Z"}, {"uuid": "13981390-4971-4136-8f8d-7e3192f83693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46343", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46343\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting (XSS) through the attachments view endpoint. n8n workflows can store and serve binary files, which are accessible to authenticated users. However, there is no restriction on the MIME type of uploaded files, and the MIME type could be controlled via a GET parameter. This allows the server to respond with any MIME type, potentially enabling malicious content to be interpreted and executed by the browser. An authenticated attacker with member-level permissions could exploit this by uploading a crafted HTML file containing malicious JavaScript. When another user visits the binary data endpoint with the MIME type set to text/html, the script executes in the context of the user\u2019s session. This script could send a request to change the user\u2019s email address in their account settings, effectively enabling account takeover. This issue has been patched in version 1.90.0.\n\ud83d\udccf Published: 2025-04-29T04:35:16.684Z\n\ud83d\udccf Modified: 2025-04-29T04:35:16.684Z\n\ud83d\udd17 References:\n1. https://github.com/n8n-io/n8n/security/advisories/GHSA-c8hm-hr8h-5xjw\n2. https://github.com/n8n-io/n8n/pull/14350\n3. https://github.com/n8n-io/n8n/pull/14685\n4. https://github.com/n8n-io/n8n/releases/tag/n8n%401.90.0", "creation_timestamp": "2025-04-29T05:11:28.000000Z"}, {"uuid": "b72b5532-492a-4bef-866f-b3f11388a6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46614", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13700", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46614\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File.\n\ud83d\udccf Published: 2025-04-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T15:56:23.048Z\n\ud83d\udd17 References:\n1. https://community.snowflake.com/s/article/Snowflake-Connector-for-ODBC-Security-Advisory-CVE-2025-46614", "creation_timestamp": "2025-04-28T16:11:14.000000Z"}, {"uuid": "922bfc43-bf31-45c5-b9cd-1038732270f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/10272", "content": "The $250,000 Bug\u200a\u2014\u200aMy Journey Unpacking CVE-2025-4609\n\nhttps://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21", "creation_timestamp": "2025-10-16T08:34:14.000000Z"}, {"uuid": "16dd79bd-fa22-48bc-b085-da191d305b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46327", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13751", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46327\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 1.13.3.\n\ud83d\udccf Published: 2025-04-28T22:33:05.249Z\n\ud83d\udccf Modified: 2025-04-28T22:33:05.249Z\n\ud83d\udd17 References:\n1. https://github.com/snowflakedb/gosnowflake/security/advisories/GHSA-6jgm-j7h2-2fqg\n2. https://github.com/snowflakedb/gosnowflake/commit/ba94a4800e23621eff558ef18ce4b96ec5489ff0", "creation_timestamp": "2025-04-28T23:10:55.000000Z"}, {"uuid": "264aec0f-5371-453b-978d-733c2bb9bf24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59801", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA lightweight backend used to reproduce and demonstrate CVE-2025-4664\nURL\uff1ahttps://github.com/mingijunggrape/CVE-2025-4664\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-15T10:11:55.000000Z"}, {"uuid": "d4681758-5db4-4ab6-a75a-cdeb82116869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4615", "type": "published-proof-of-concept", "source": "Telegram/rhvNMhDEQsDmbO42lBM1UZ6liv8Ut69COJccPHJCHHT9EeA", "content": "", "creation_timestamp": "2026-03-27T03:00:09.000000Z"}, {"uuid": "376fd71c-ce29-4067-af27-f9cf9f7cc3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46328", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13750", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46328\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 2.0.4.\n\ud83d\udccf Published: 2025-04-28T22:33:09.632Z\n\ud83d\udccf Modified: 2025-04-28T22:33:09.632Z\n\ud83d\udd17 References:\n1. https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-wmjq-jrm2-9wfr\n2. https://github.com/snowflakedb/snowflake-connector-nodejs/commit/e94c24112271e1f44c271634bf29a3188acc68d0", "creation_timestamp": "2025-04-28T23:10:54.000000Z"}, {"uuid": "0fc353dc-5c03-4e2f-9bb9-6ebc058f33a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46758", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13760", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46758\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-29T02:55:07.005Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-29T03:14:11.000000Z"}, {"uuid": "46f8880a-455e-4b30-a7b3-5bbaeade1fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46757", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46757\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-29T02:55:07.506Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-29T03:14:10.000000Z"}, {"uuid": "42248b1e-cacc-4468-842e-e73908669a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46756", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13758", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46756\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-29T02:55:08.092Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-29T03:14:09.000000Z"}, {"uuid": "176671fa-ae71-42f5-8ac2-00afaf1e06d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46285", "type": "seen", "source": "Telegram/66rNhckXw4zokWNIHPPThoaB__3WddU1uelwxQvM_wROfLk", "content": "", "creation_timestamp": "2026-04-02T22:21:28.000000Z"}, {"uuid": "360bd867-af67-4e95-abfa-4d390eb3dc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46329", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13786", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46329\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server-side by Snowflake. This issue has been patched in version 2.2.0.\n\ud83d\udccf Published: 2025-04-29T04:35:49.431Z\n\ud83d\udccf Modified: 2025-04-29T04:35:49.431Z\n\ud83d\udd17 References:\n1. https://github.com/snowflakedb/libsnowflakeclient/security/advisories/GHSA-jx4f-645p-wjpx\n2. https://github.com/snowflakedb/libsnowflakeclient/commit/3caa8a6a3ee95e0a66ead03b4bf6a2d1ca42ebfe", "creation_timestamp": "2025-04-29T05:11:27.000000Z"}, {"uuid": "de7d7da3-b787-4c12-abc4-ab6cb2e12deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46330", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46330\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.\n\ud83d\udccf Published: 2025-04-29T04:34:37.061Z\n\ud83d\udccf Modified: 2025-04-29T04:34:37.061Z\n\ud83d\udd17 References:\n1. https://github.com/snowflakedb/libsnowflakeclient/security/advisories/GHSA-ch37-53v3-m4cm\n2. https://github.com/snowflakedb/libsnowflakeclient/pull/882/commits/8120a057e041722e114ed2c5dbed3b5a649f72e2", "creation_timestamp": "2025-04-29T05:11:34.000000Z"}, {"uuid": "282dece6-6bc3-4dc7-9961-cd4d075b29b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46338", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13788", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46338\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the `/api/upload` endpoint allows an attacker to perform a reflected cross-site scripting (XSS) attack by submitting malicious payloads in the `libraryId` field. The unsanitized input is reflected in the server\u2019s error message, enabling arbitrary JavaScript execution in a victim's browser. This issue has been patched in version 2.21.0.\n\ud83d\udccf Published: 2025-04-29T04:34:44.713Z\n\ud83d\udccf Modified: 2025-04-29T04:34:44.713Z\n\ud83d\udd17 References:\n1. https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-47g3-c5hx-2q3w\n2. https://github.com/advplyr/audiobookshelf/commit/35870a01583b2947030f4e3d4ac769c3ff298386", "creation_timestamp": "2025-04-29T05:11:29.000000Z"}, {"uuid": "14d08264-1a94-4484-be27-48807f3ec671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4615", "type": "published-proof-of-concept", "source": "Telegram/rQGGJNosiE90GfC_4CPODN8OMH2HUk0rxa4z_Vhsu5hB7e0", "content": "", "creation_timestamp": "2026-04-01T03:17:49.000000Z"}, {"uuid": "5524ba41-abe9-4cc4-8af8-ccd2f3714b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46387", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58706", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-46387\nURL\uff1ahttps://github.com/plsy1/embybrute\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-07T13:00:56.000000Z"}, {"uuid": "c0424aeb-b5bd-42cb-b26b-d662e9b1344f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46350", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13884", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46350\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user\u2019s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4.\n\ud83d\udccf Published: 2025-04-29T17:11:18.291Z\n\ud83d\udccf Modified: 2025-04-29T18:00:34.649Z\n\ud83d\udd17 References:\n1. https://github.com/YesWiki/yeswiki/security/advisories/GHSA-cg4f-cq8h-3ch8\n2. https://github.com/YesWiki/yeswiki/commit/e2603176a4607b83659635a0c517550d4a171cb9", "creation_timestamp": "2025-04-29T18:12:21.000000Z"}, {"uuid": "0e050a66-30f7-4abe-b5b3-7d6261a60ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46349", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13883", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46349\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file upload form. This vulnerability allows any malicious unauthenticated user to create a link that can be clicked on by the victim to perform arbitrary actions. This issue has been patched in version 4.5.4.\n\ud83d\udccf Published: 2025-04-29T17:11:10.679Z\n\ud83d\udccf Modified: 2025-04-29T18:01:20.769Z\n\ud83d\udd17 References:\n1. https://github.com/YesWiki/yeswiki/security/advisories/GHSA-2f8p-qqx2-gwr2\n2. https://github.com/YesWiki/yeswiki/pull/1264/commits/6edde40eb7eeb5d60619ac4d1e0a0422d92e9524", "creation_timestamp": "2025-04-29T18:12:20.000000Z"}, {"uuid": "c808b0f5-592e-43ec-b730-7db34a456890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4606", "type": "seen", "source": "Telegram/ntpjkz6riBeoOwFfGZXRGOokh59Ld7pVjBzgz2k5cnwbhGY", "content": "", "creation_timestamp": "2025-08-13T15:57:50.000000Z"}, {"uuid": "ce217ff8-6e8b-41e0-ab9b-d53e3858a54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46347", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46347\n\ud83d\udd25 CVSS Score: 5.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:P)\n\ud83d\udd39 Description: YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki vulnerable to remote code execution. An arbitrary file write can be used to write a file with a PHP extension, which then can be browsed to in order to execute arbitrary code on the server, resulting in a full compromise of the server. This could potentially be performed unwittingly by a user. This issue has been patched in version 4.5.4.\n\ud83d\udccf Published: 2025-04-29T17:11:05.404Z\n\ud83d\udccf Modified: 2025-04-29T17:11:05.404Z\n\ud83d\udd17 References:\n1. https://github.com/YesWiki/yeswiki/security/advisories/GHSA-88xg-v53p-fpvf\n2. https://github.com/YesWiki/yeswiki/commit/8fe5275a78dc7e0f9c242baa3cbac6b5ac1cc066", "creation_timestamp": "2025-04-29T18:12:32.000000Z"}, {"uuid": "c2476240-f920-40f4-ba0a-8f71c1c098a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46344", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13926", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46344\n\ud83d\udd25 CVSS Score: 4.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke `.setExpirationTime` when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While the session cookie may expire or be cleared, the JWE remains valid. This issue has been patched in version 4.5.1.\n\ud83d\udccf Published: 2025-04-29T20:43:41.538Z\n\ud83d\udccf Modified: 2025-04-29T20:43:41.538Z\n\ud83d\udd17 References:\n1. https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-pjr6-jx7r-j4r6\n2. https://github.com/auth0/nextjs-auth0/commit/a4f061aed02ffa132feca8adfbd11704df17e1c3\n3. https://github.com/auth0/nextjs-auth0/releases/tag/v4.5.1", "creation_timestamp": "2025-04-29T21:13:27.000000Z"}, {"uuid": "c8a8d241-3d6a-4873-979d-6cf9d86f4aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46549\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user\u2019s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4.\n\ud83d\udccf Published: 2025-04-29T20:40:26.765Z\n\ud83d\udccf Modified: 2025-04-29T20:40:26.765Z\n\ud83d\udd17 References:\n1. https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r9gv-qffm-xw6f\n2. https://github.com/YesWiki/yeswiki/commit/107d43056adebaa0c731230f9fd010898e88f3f5", "creation_timestamp": "2025-04-29T21:13:31.000000Z"}, {"uuid": "a5494955-ee7e-4361-8c22-4a3e3f9cd5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46550", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46550\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` endpoint and `idformulaire` parameter are vulnerable to cross-site scripting. An attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user\u2019s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4.\n\ud83d\udccf Published: 2025-04-29T20:41:01.879Z\n\ud83d\udccf Modified: 2025-04-29T20:41:01.879Z\n\ud83d\udd17 References:\n1. https://github.com/YesWiki/yeswiki/security/advisories/GHSA-ggqx-43h2-55jp\n2. https://github.com/YesWiki/yeswiki/commit/4e9e51d80cd024ed2ac5c12c820817e6d8c2655a", "creation_timestamp": "2025-04-29T21:13:28.000000Z"}, {"uuid": "1def283f-e3e9-4c07-bdd0-fe05c42839b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46348", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46348\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the request to commence a site backup can be performed and downloaded without authentication. The archives are created with a predictable filename, so a malicious user could create and download an archive without being authenticated. This could result in a malicious attacker making numerous requests to create archives and fill up the file system, or by downloading the archive which contains sensitive site information. This issue has been patched in version 4.5.4.\n\ud83d\udccf Published: 2025-04-29T20:39:40.423Z\n\ud83d\udccf Modified: 2025-04-29T20:39:40.423Z\n\ud83d\udd17 References:\n1. https://github.com/YesWiki/yeswiki/security/advisories/GHSA-wc9g-6j9w-hr95\n2. https://github.com/YesWiki/yeswiki/commit/0d4efc880a727599fa4f6d7a64cc967afe475530", "creation_timestamp": "2025-04-29T21:13:32.000000Z"}, {"uuid": "4d007b30-4919-4acf-a481-5beb8acdacc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46778", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13979", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46778\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-30T02:55:07.528Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-30T04:12:35.000000Z"}, {"uuid": "760954f1-9b65-48c5-af08-db48cfecd494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46782", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13983", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46782\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-30T02:55:05.217Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-30T04:12:41.000000Z"}, {"uuid": "443a10a3-05fd-4ee7-bd35-6facb01794a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46001", "type": "seen", "source": "https://t.me/captainsmok3r_official/67", "content": "CVE-2025-46001\ndork: inurl:/assets/filemanager\nexposed path:  /filemanager/dialog.php\npanels block .php uploads, but still allow other extensions", "creation_timestamp": "2025-08-11T21:57:03.000000Z"}, {"uuid": "fddd1c26-c3e0-408c-adc9-f5542738b071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "published-proof-of-concept", "source": "Telegram/csg1wYiCImjFY1YnLahkZcywpeCvWGVCGBPO5HZyfvKzw6c", "content": "", "creation_timestamp": "2025-10-07T07:00:12.000000Z"}, {"uuid": "bf6baeee-f672-4ac9-9068-53164463cc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46819", "type": "published-proof-of-concept", "source": "Telegram/cgjkjeFvaYTYY2Hy-tHxrmfy7h97b4Y-DZ7h_Fd2T5OlKEk", "content": "", "creation_timestamp": "2025-10-07T09:00:04.000000Z"}, {"uuid": "9d8a4b6e-9c64-454a-8a54-0c1b8d5c0493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "published-proof-of-concept", "source": "Telegram/cgjkjeFvaYTYY2Hy-tHxrmfy7h97b4Y-DZ7h_Fd2T5OlKEk", "content": "", "creation_timestamp": "2025-10-07T09:00:04.000000Z"}, {"uuid": "ed1397c3-3688-4c13-94b0-ec528683502d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46251", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12817", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46251\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRestaurants Table Reservations and Take-Away allows Cross Site Request Forgery. This issue affects VikRestaurants Table Reservations and Take-Away: from n/a through 1.3.3.\n\ud83d\udccf Published: 2025-04-22T09:53:33.910Z\n\ud83d\udccf Modified: 2025-04-22T09:53:33.910Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/vikrestaurants/vulnerability/wordpress-vikrestaurants-table-reservations-and-take-away-plugin-1-3-3-csrf-to-stored-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:02:54.000000Z"}, {"uuid": "7a804280-4e20-421a-b58e-5560f1a97252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46511", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46511\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Server-Side Request Forgery (SSRF) vulnerability in Derek Springer BeerXML Shortcode allows Server Side Request Forgery. This issue affects BeerXML Shortcode: from n/a through 0.71.\n\ud83d\udccf Published: 2025-04-24T16:09:23.029Z\n\ud83d\udccf Modified: 2025-04-24T16:09:23.029Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/beerxml-shortcode/vulnerability/wordpress-beerxml-shortcode-0-71-server-side-request-forgery-ssrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:50.000000Z"}, {"uuid": "4fb54ab9-fa4f-4ebd-bc85-fa553e9823b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46619", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14108", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46619\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow.\n\ud83d\udccf Published: 2025-04-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T17:43:34.514Z\n\ud83d\udd17 References:\n1. https://forums.couchbase.com/tags/security\n2. https://docs.couchbase.com/server/current/release-notes/relnotes.html\n3. https://www.couchbase.com/alerts/", "creation_timestamp": "2025-04-30T18:14:14.000000Z"}, {"uuid": "8be00c4a-a57d-4c2d-b043-a35543e7e787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46552", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14112", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46552\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: KHC-INVITATION-AUTOMATION is a GitHub automation script that automatically invites followers of a bot account to join your organization. In some commits on version 1.2, a vulnerability was identified where user data, including email addresses and Discord usernames, were exposed in API responses without proper access controls. This allowed unauthorized users to access sensitive user information by directly calling specific endpoints. This issue has been patched in a later commit on version 1.2.\n\ud83d\udccf Published: 2025-04-29T22:13:37.746Z\n\ud83d\udccf Modified: 2025-04-30T17:40:07.561Z\n\ud83d\udd17 References:\n1. https://github.com/Krypto-Hashers-Community/KHC-INVITATION-AUTOMATION/security/advisories/GHSA-7mpf-6gg2-2fjp\n2. https://github.com/Krypto-Hashers-Community/KHC-INVITATION-AUTOMATION/commit/bc908a4ef538b24d4543ae95a413be6afa308bf5", "creation_timestamp": "2025-04-30T18:14:21.000000Z"}, {"uuid": "bf56d440-35d9-4bb5-8cc1-6fd0ca825b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46558", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46558\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting (XSS) through HTML. In particular, using Markdown syntax, it's possible for any user to embed Javascript code that will then be executed on the browser of any other user visiting either the document or the comment that contains it. In the instance that this code is executed by a user with admins or programming rights, this issue compromises the confidentiality, integrity and availability of the whole XWiki installation. This issue has been patched in version 8.9.\n\ud83d\udccf Published: 2025-04-30T18:27:30.953Z\n\ud83d\udccf Modified: 2025-04-30T19:01:32.321Z\n\ud83d\udd17 References:\n1. https://github.com/xwiki-contrib/syntax-markdown/security/advisories/GHSA-8g2j-rhfh-hq3r\n2. https://github.com/xwiki-contrib/syntax-markdown/commit/d136472d6e8a47981a0ede420a9096f88ffa5035\n3. https://jira.xwiki.org/browse/MARKDOWN-80", "creation_timestamp": "2025-04-30T19:13:38.000000Z"}, {"uuid": "45b563da-18c0-4f8e-93ef-44596d0c42f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46554", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46554\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.7.0, anyone can access the metadata of any attachment in the wiki using the wiki attachment REST endpoint. There is no filtering for the results depending on current user rights, meaning an unauthenticated user could exploit this even in a private wiki. This issue has been patched in versions 14.10.22, 15.10.12, 16.4.3, and 16.7.0.\n\ud83d\udccf Published: 2025-04-30T18:27:53.677Z\n\ud83d\udccf Modified: 2025-04-30T18:59:16.789Z\n\ud83d\udd17 References:\n1. https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r5cr-xm48-97xp\n2. https://github.com/xwiki/xwiki-platform/commit/37ecea84fdd053c33733c2ae9a0778bf98eae608\n3. https://github.com/xwiki/xwiki-platform/commit/a43e933ddeda17dad1772396e1757998260e9342\n4. https://github.com/xwiki/xwiki-platform/commit/c02ce7843a39851865b9d7b6132e32fdd21e3856\n5. https://jira.xwiki.org/browse/XWIKI-22424", "creation_timestamp": "2025-04-30T19:13:41.000000Z"}, {"uuid": "a4e38f2a-af8b-42bc-90af-f4bd1b55a775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46631", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14491", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46631\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T15:05:39.836Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/default.html\n2. https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46631-enable-telnet-unauthenticated-through-httpd", "creation_timestamp": "2025-05-02T15:16:55.000000Z"}, {"uuid": "c344e60e-9bc9-4c97-8f9b-fcf6a523896b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46630", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14490", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46630\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable 'ate' (a remote system management binary) by sending a /goform/ate web request.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T15:07:14.930Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/default.html\n2. https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46630-enable-ate-unauthenticated-through-httpd", "creation_timestamp": "2025-05-02T15:16:54.000000Z"}, {"uuid": "b9579553-c17e-4076-98e6-40dfefa9226a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46625", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14488", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46625\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the device by sending a crafted web request. This is persistent because the command injection is saved in the configuration of the device.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T13:06:24.956Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/default.html\n2. https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46625-command-injection-through-setlancfg-in-httpd", "creation_timestamp": "2025-05-02T14:15:54.000000Z"}, {"uuid": "5313675e-089b-495d-8ba7-1134dfdf7b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46568", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14487", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46568\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Prior to version 0.45.0, Stirling-PDF is vulnerable to SSRF-induced arbitrary file read. WeasyPrint redefines a set of HTML tags, including img, embed, object, and others. The references to several files inside, allow the attachment of content from any webpage or local file to a PDF. This allows the attacker to read any file on the server, including sensitive files and configuration files. All users utilizing this feature will be affected. This issue has been patched in version 0.45.0.\n\ud83d\udccf Published: 2025-05-01T17:20:46.488Z\n\ud83d\udccf Modified: 2025-05-02T13:33:46.987Z\n\ud83d\udd17 References:\n1. https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-998c-x8hx-737r", "creation_timestamp": "2025-05-02T14:15:53.000000Z"}, {"uuid": "1e5ad139-8330-4e8b-bdd7-fe8a8e47d165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46557", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46557\n\ud83d\udd25 CVSS Score: 8.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to before 16.10.0-rc-1, a user who can access pages located in the XWiki space (by default, anyone) can access the page XWiki.Authentication.Administration and (unless an authenticator is set in xwiki.cfg) switch to another installed authenticator. Note that, by default, there is only one authenticator available (Standard XWiki Authenticator). So, if no authenticator extension was installed, it's not really possible to do anything for an attacker. Also, in most cases, if an SSO authenticator is installed and utilized (like OIDC or LDAP for example), the worst an attacker can do is break authentication by switching back to the standard authenticator (that's because it's impossible to login to a user which does not have a stored password, and that's usually what SSO authenticator produce). This issue has been patched in versions 15.10.14, 16.4.6, and 16.10.0-rc-1.\n\ud83d\udccf Published: 2025-04-30T18:27:39.895Z\n\ud83d\udccf Modified: 2025-04-30T19:00:26.033Z\n\ud83d\udd17 References:\n1. https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f9c6-2f9p-82jj\n2. https://github.com/xwiki/xwiki-platform/commit/5efc31cea1501c9a5cb593566fea8b558ff32a2a\n3. https://jira.xwiki.org/browse/XWIKI-22604", "creation_timestamp": "2025-04-30T19:13:38.000000Z"}, {"uuid": "7c16741f-7375-4f71-95ac-f6bd96eb71c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46632", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14492", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46632\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between client and server.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T15:04:06.366Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/default.html\n2. https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46632-static-iv-use-in-httpd", "creation_timestamp": "2025-05-02T15:16:56.000000Z"}, {"uuid": "744c6c44-8594-4efa-a4d0-52d52da1a45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46634", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46634\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an unauthenticated attacker to authenticate to the web management portal by collecting credentials from observed/collected traffic. It implements encryption, but not until after the user has transmitted the hash of their password in cleartext. The hash can be replayed to authenticate.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T14:56:33.145Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/default.html\n2. https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46634-transmission-of-plaintext-credentials-in-httpd", "creation_timestamp": "2025-05-02T15:17:01.000000Z"}, {"uuid": "c767330e-e034-4bf6-b321-566cd74f0e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46633", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14496", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46633\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T14:59:18.138Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/default.html\n2. https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46633-transmission-of-plaintext-symmetric-key-in-httpd", "creation_timestamp": "2025-05-02T15:16:59.000000Z"}, {"uuid": "82ac130c-a742-4a09-8247-74e24947ca37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46589", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46589\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Vulnerability of unauthorized access in the app lock module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.\n\ud83d\udccf Published: 2025-05-06T07:17:29.134Z\n\ud83d\udccf Modified: 2025-05-06T13:56:39.446Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/5/", "creation_timestamp": "2025-05-06T14:21:34.000000Z"}, {"uuid": "98147450-7717-476b-9710-d42333624321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46646", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13579", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46646\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954.\n\ud83d\udccf Published: 2025-04-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-26T14:33:54.235Z\n\ud83d\udd17 References:\n1. https://bugs.ghostscript.com/show_bug.cgi?id=708311\n2. https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f", "creation_timestamp": "2025-04-26T15:08:05.000000Z"}, {"uuid": "1f4d6c1b-a5fc-4eba-9a81-33a930170fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46566", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14558", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46566\n\ud83d\udd25 CVSS Score: 6.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9.\n\ud83d\udccf Published: 2025-05-01T17:20:34.660Z\n\ud83d\udccf Modified: 2025-05-02T17:38:02.983Z\n\ud83d\udd17 References:\n1. https://github.com/dataease/dataease/security/advisories/GHSA-hxw4-vpfp-frgv", "creation_timestamp": "2025-05-02T18:19:55.000000Z"}, {"uuid": "c9dedb65-7d66-4392-9cfb-96c7c415df57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46644", "type": "published-proof-of-concept", "source": "Telegram/uD0qGdbiQ2WHuyBpvE_0LEOT_m0B0zzJl6Hg_UASLbk8qQc", "content": "", "creation_timestamp": "2026-01-09T17:05:10.000000Z"}, {"uuid": "bb66aba5-0a0a-4b8b-ab79-526cd0be037a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46645", "type": "published-proof-of-concept", "source": "Telegram/gIeROQChpfUKACGacrlMOrd91yuCBo48O9eluSl9WxyqbYI", "content": "", "creation_timestamp": "2026-01-09T18:06:42.000000Z"}, {"uuid": "bc34417f-ae64-4ee1-9d20-eacd630c5a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46759", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13761", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46759\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-29T02:55:06.473Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-29T03:14:12.000000Z"}, {"uuid": "c30c5ebc-f81d-4c74-b434-fa0a8a9dc763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46578", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13596", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46578\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.\n\ud83d\udccf Published: 2025-04-27T01:30:44.458Z\n\ud83d\udccf Modified: 2025-04-27T01:30:44.990Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392210", "creation_timestamp": "2025-04-27T02:08:57.000000Z"}, {"uuid": "27d24505-01e3-4b61-b639-010da2823972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46579", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46579\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.\n\ud83d\udccf Published: 2025-04-27T01:34:35.034Z\n\ud83d\udccf Modified: 2025-04-27T01:34:35.034Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601474", "creation_timestamp": "2025-04-27T02:08:56.000000Z"}, {"uuid": "dde05869-bb7b-4a01-b1a0-5db99d707b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46264", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13414", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46264\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Angelo Mandato PowerPress Podcasting allows Upload a Web Shell to a Web Server. This issue affects PowerPress Podcasting: from n/a through 11.12.5.\n\ud83d\udccf Published: 2025-04-24T16:08:30.311Z\n\ud83d\udccf Modified: 2025-04-25T13:57:34.553Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-11-12-7-arbitrary-file-upload-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-25T14:07:02.000000Z"}, {"uuid": "7a9cc52d-7920-4f59-a0a1-758105156ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46230", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13413", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46230\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GhozyLab Popup Builder allows PHP Local File Inclusion. This issue affects Popup Builder: from n/a through 1.1.35.\n\ud83d\udccf Published: 2025-04-24T16:08:29.765Z\n\ud83d\udccf Modified: 2025-04-25T13:57:41.871Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/easy-notify-lite/vulnerability/wordpress-popup-builder-1-1-35-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-25T14:07:02.000000Z"}, {"uuid": "498b13f4-eafd-41d9-a445-db0da851f0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46447", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13291", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46447\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFable Fable Extra allows DOM-Based XSS. This issue affects Fable Extra: from n/a through 1.0.6.\n\ud83d\udccf Published: 2025-04-24T16:09:24.737Z\n\ud83d\udccf Modified: 2025-04-24T16:09:24.737Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/fable-extra/vulnerability/wordpress-fable-extra-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:48.000000Z"}, {"uuid": "ffd5d41e-a892-4474-bfea-137426d3d292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46481", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13290", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46481\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in Michael Cannon Flickr Shortcode Importer allows Object Injection. This issue affects Flickr Shortcode Importer: from n/a through 2.2.3.\n\ud83d\udccf Published: 2025-04-24T16:09:25.310Z\n\ud83d\udccf Modified: 2025-04-24T16:09:25.310Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/flickr-shortcode-importer/vulnerability/wordpress-flickr-shortcode-importer-2-2-3-php-object-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:47.000000Z"}, {"uuid": "2be4a355-8b03-4d00-a82d-d941932a1c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46482", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13392", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46482\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz allows Stored XSS.This issue affects WP Quiz: from n/a through 2.0.10.\n\ud83d\udccf Published: 2025-04-25T07:52:09.343Z\n\ud83d\udccf Modified: 2025-04-25T07:52:09.343Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-quiz/vulnerability/wordpress-wp-quiz-plugin-2-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-25T08:07:32.000000Z"}, {"uuid": "baf448ba-f563-4265-9a4b-b1fca69f20ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46219", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46219\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-23T02:55:07.484Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-23T04:04:00.000000Z"}, {"uuid": "d46b9e0b-bb0a-4cf4-b1dd-e1d686d2eb1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46233", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12833", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46233\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv allows Stored XSS. This issue affects Sirv: from n/a through 7.5.3.\n\ud83d\udccf Published: 2025-04-22T09:53:23.959Z\n\ud83d\udccf Modified: 2025-04-22T09:53:23.959Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/sirv/vulnerability/wordpress-sirv-7-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:17.000000Z"}, {"uuid": "3fc0a6ae-351d-4ed1-a773-53b577c8060d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46250", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12818", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46250\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Stored XSS. This issue affects VForm: from n/a through 3.1.14.\n\ud83d\udccf Published: 2025-04-22T09:53:33.170Z\n\ud83d\udccf Modified: 2025-04-22T09:53:33.170Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/v-form/vulnerability/wordpress-vform-3-1-14-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:02:55.000000Z"}, {"uuid": "718697e6-f3f9-4ea5-b47f-35e17f640cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46243", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46243\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce allows Cross Site Request Forgery. This issue affects Recover abandoned cart for WooCommerce: from n/a through 2.2.\n\ud83d\udccf Published: 2025-04-22T09:53:29.407Z\n\ud83d\udccf Modified: 2025-04-22T09:53:29.407Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/recover-wc-abandoned-cart/vulnerability/wordpress-recover-abandoned-cart-for-woocommerce-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:04.000000Z"}, {"uuid": "75f463a5-2dae-4563-a245-f01ddecf7bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46236", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12831", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46236\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC HTML Forms allows Stored XSS. This issue affects HTML Forms: from n/a through 1.5.2.\n\ud83d\udccf Published: 2025-04-22T09:53:25.263Z\n\ud83d\udccf Modified: 2025-04-22T09:53:25.263Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/html-forms/vulnerability/wordpress-html-forms-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:12.000000Z"}, {"uuid": "598fdad8-79e6-448a-aca6-81a9c12e0033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46237", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12830", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46237\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Stored XSS. This issue affects Link Library: from n/a through 7.8.\n\ud83d\udccf Published: 2025-04-22T09:53:25.888Z\n\ud83d\udccf Modified: 2025-04-22T09:53:25.888Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/link-library/vulnerability/wordpress-link-library-7-8-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:11.000000Z"}, {"uuid": "d4d0c758-6c90-42b0-83ae-5fe41ee7ad7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46238", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12829", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46238\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rbaer List Last Changes allows Stored XSS. This issue affects List Last Changes: from n/a through 1.2.1.\n\ud83d\udccf Published: 2025-04-22T09:53:26.476Z\n\ud83d\udccf Modified: 2025-04-22T09:53:26.476Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/list-last-changes/vulnerability/wordpress-list-last-changes-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:10.000000Z"}, {"uuid": "eb106f2a-3339-42a0-ae4c-f91ff8a577cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46252", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12816", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46252\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kofimokome Message Filter for Contact Form 7 allows SQL Injection. This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3.2.\n\ud83d\udccf Published: 2025-04-22T09:53:34.550Z\n\ud83d\udccf Modified: 2025-04-22T09:53:34.550Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/cf7-message-filter/vulnerability/wordpress-message-filter-for-contact-form-7-plugin-1-6-3-2-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:02:53.000000Z"}, {"uuid": "eab2491f-ea1c-4d9d-871d-86ecbd7bd13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12815", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46253\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit allows Stored XSS. This issue affects GutenKit: from n/a through 2.2.2.\n\ud83d\udccf Published: 2025-04-22T09:53:35.152Z\n\ud83d\udccf Modified: 2025-04-22T09:53:35.152Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/gutenkit-blocks-addon/vulnerability/wordpress-gutenkit-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:02:52.000000Z"}, {"uuid": "964c6d68-62f0-4643-aafc-f8291a6ef9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46254", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12814", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46254\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through 45.10.0.\n\ud83d\udccf Published: 2025-04-22T09:53:35.769Z\n\ud83d\udccf Modified: 2025-04-22T09:53:35.769Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/visualcomposer/vulnerability/wordpress-visual-composer-website-builder-plugin-45-10-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:02:51.000000Z"}, {"uuid": "dd55d921-624c-46c0-aed0-dcb193864d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46244", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46244\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Linked Variations for Woocommerce: from n/a through 1.0.3.\n\ud83d\udccf Published: 2025-04-22T09:53:30.018Z\n\ud83d\udccf Modified: 2025-04-22T09:53:30.018Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/linked-variation/vulnerability/wordpress-advanced-linked-variations-for-woocommerce-1-0-3-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:03.000000Z"}, {"uuid": "3e3ab0a9-0cb3-4de6-9663-5b1fe7dade35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46245", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46245\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Ad Changer allows Cross Site Request Forgery. This issue affects CM Ad Changer: from n/a through 2.0.5.\n\ud83d\udccf Published: 2025-04-22T09:53:30.649Z\n\ud83d\udccf Modified: 2025-04-22T09:53:30.649Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/cm-ad-changer/vulnerability/wordpress-cm-ad-changer-2-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:02.000000Z"}, {"uuid": "ba69176f-8853-4871-9001-8be63afe547e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46246", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46246\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Answers allows Cross Site Request Forgery. This issue affects CM Answers: from n/a through 3.3.3.\n\ud83d\udccf Published: 2025-04-22T09:53:31.292Z\n\ud83d\udccf Modified: 2025-04-22T09:53:31.292Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/cm-answers/vulnerability/wordpress-cm-answers-3-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:01.000000Z"}, {"uuid": "a66e8ca5-4bbb-456b-9f5c-957834cbc5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46247", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12820", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46247\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Missing Authorization vulnerability in codepeople Appointment Booking Calendar allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Appointment Booking Calendar: from n/a through 1.3.92.\n\ud83d\udccf Published: 2025-04-22T09:53:31.891Z\n\ud83d\udccf Modified: 2025-04-22T09:53:31.891Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/appointment-booking-calendar/vulnerability/wordpress-appointment-booking-calendar-1-3-92-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:00.000000Z"}, {"uuid": "c2b678bf-67fd-4c1c-b574-2b196fff1a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46249", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12819", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46249\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor allows Cross Site Request Forgery. This issue affects Simple calendar for Elementor: from n/a through 1.6.4.\n\ud83d\udccf Published: 2025-04-22T09:53:32.446Z\n\ud83d\udccf Modified: 2025-04-22T09:53:32.446Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/simple-calendar-for-elementor/vulnerability/wordpress-simple-calendar-for-elementor-1-6-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:02:59.000000Z"}, {"uuid": "dda15458-5d1f-40e2-aa6c-ff61125d2408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46239", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12828", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46239\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Theme Switcha allows Stored XSS. This issue affects Theme Switcha: from n/a through 3.4.\n\ud83d\udccf Published: 2025-04-22T09:53:27.116Z\n\ud83d\udccf Modified: 2025-04-22T09:53:27.116Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/theme-switcha/vulnerability/wordpress-theme-switcha-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:09.000000Z"}, {"uuid": "9548f1a0-8286-4cbe-91f9-961cb44103c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46240", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12827", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46240\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Download Counter allows Stored XSS. This issue affects Simple Download Counter: from n/a through 2.2.\n\ud83d\udccf Published: 2025-04-22T09:53:27.711Z\n\ud83d\udccf Modified: 2025-04-22T09:53:27.711Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/simple-download-counter/vulnerability/wordpress-simple-download-counter-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:08.000000Z"}, {"uuid": "74766fef-d17d-4e48-90c8-b5f6ad990657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46241", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12826", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46241\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar allows SQL Injection. This issue affects Appointment Booking Calendar: from n/a through 1.3.92.\n\ud83d\udccf Published: 2025-04-22T09:53:28.272Z\n\ud83d\udccf Modified: 2025-04-22T09:53:28.272Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/appointment-booking-calendar/vulnerability/wordpress-appointment-booking-calendar-plugin-1-3-92-csrf-to-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:06.000000Z"}, {"uuid": "38df4caf-8594-4b7e-8efb-7c3e9627ea35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46242", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12825", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46242\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz allows SQL Injection. This issue affects Watu Quiz: from n/a through 3.4.3.\n\ud83d\udccf Published: 2025-04-22T09:53:28.836Z\n\ud83d\udccf Modified: 2025-04-22T09:53:28.836Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/watu/vulnerability/wordpress-watu-quiz-3-4-3-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:05.000000Z"}, {"uuid": "040c5e62-6b8c-4f07-85dd-17107f043a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46235", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12832", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46235\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks \u2013 Gutenberg based Page Builder allows Stored XSS. This issue affects SKT Blocks \u2013 Gutenberg based Page Builder: from n/a through 2.0.\n\ud83d\udccf Published: 2025-04-22T09:53:24.616Z\n\ud83d\udccf Modified: 2025-04-22T09:53:24.616Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/skt-blocks/vulnerability/wordpress-skt-blocks-gutenberg-based-page-builder-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T10:03:13.000000Z"}, {"uuid": "a392b2d9-a0a5-4b58-9fe6-621fc6539328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46565", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46565\n\ud83d\udd25 CVSS Score: 6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Vite is a frontend tooling framework for javascript. Prior to versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. Only files that are under project root and are denied by a file matching pattern can be bypassed. `server.fs.deny` can contain patterns matching against files (by default it includes .env, .env.*, *.{crt,pem} as such patterns). These patterns were able to bypass for files under `root` by using a combination of slash and dot (/.). This issue has been patched in versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14.\n\ud83d\udccf Published: 2025-05-01T17:20:29.773Z\n\ud83d\udccf Modified: 2025-05-02T17:38:55.291Z\n\ud83d\udd17 References:\n1. https://github.com/vitejs/vite/security/advisories/GHSA-859w-5945-r5v3\n2. https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb", "creation_timestamp": "2025-05-02T18:19:55.000000Z"}, {"uuid": "0245260c-b061-44a3-a1f9-8de8134a9f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13166", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46394\n\ud83d\udd25 CVSS Score: 3.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.\n\ud83d\udccf Published: 2025-04-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T23:02:55.812Z\n\ud83d\udd17 References:\n1. https://bugs.busybox.net/show_bug.cgi?id=16018\n2. https://www.busybox.net/downloads/\n3. https://www.busybox.net", "creation_timestamp": "2025-04-24T00:05:23.000000Z"}, {"uuid": "59980e08-583a-490b-8fda-b18adfc780e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46420", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46420\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.\n\ud83d\udccf Published: 2025-04-24T12:58:01.121Z\n\ud83d\udccf Modified: 2025-04-24T12:58:01.121Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-46420\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2361963", "creation_timestamp": "2025-04-24T13:05:59.000000Z"}, {"uuid": "5512eb87-3285-44a0-bef2-442113c2f2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13362", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46275\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could \nallow an attacker to create an administrator account without knowing any\n existing credentials.\n\ud83d\udccf Published: 2025-04-24T22:58:52.561Z\n\ud83d\udccf Modified: 2025-04-24T22:59:43.172Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06", "creation_timestamp": "2025-04-24T23:09:17.000000Z"}, {"uuid": "07da0621-28a7-419d-b42e-b47caaee16a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46224", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46224\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-23T02:55:04.885Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-23T04:04:08.000000Z"}, {"uuid": "0df3fd2a-7d48-4459-866b-4776ddd159aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46217", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13005", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46217\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-23T02:55:08.783Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-23T04:03:59.000000Z"}, {"uuid": "5f7ba618-1848-4e80-825a-3de1ab9decdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46216", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13004", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46216\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-23T02:55:09.261Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-23T04:03:58.000000Z"}, {"uuid": "b87c1138-3a1f-423b-85c2-890f30833535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46218", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13006", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46218\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-23T02:55:08.283Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-23T04:04:00.000000Z"}, {"uuid": "3786d401-9933-44b2-a1e7-3b62a79afd53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46613", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46613\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H)\n\ud83d\udd39 Description: OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable.\n\ud83d\udccf Published: 2025-04-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T05:42:40.696Z\n\ud83d\udd17 References:\n1. https://github.com/thiagoralves/OpenPLC_v3/issues/273", "creation_timestamp": "2025-04-25T06:10:50.000000Z"}, {"uuid": "3bc8a5a7-dca6-4aab-b5d3-933736715325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://www.acn.gov.it/portale/w/samsung-rilevato-sfruttamento-in-rete-della-cve-2025-4632-relativa-a-magicinfo", "content": "", "creation_timestamp": "2025-05-16T05:16:07.000000Z"}, {"uuid": "ac1a5bb0-ee56-4311-ab77-44c930887c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46421", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46421\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.\n\ud83d\udccf Published: 2025-04-24T13:01:24.589Z\n\ud83d\udccf Modified: 2025-04-24T13:01:24.589Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-46421\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2361962", "creation_timestamp": "2025-04-24T13:05:58.000000Z"}, {"uuid": "6bd660f2-75cc-4b0e-ac31-78a881a2d6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46507", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46507\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in ldrumm Unsafe Mimetypes allows Stored XSS. This issue affects Unsafe Mimetypes: from n/a through 0.1.4.\n\ud83d\udccf Published: 2025-04-24T16:09:25.870Z\n\ud83d\udccf Modified: 2025-04-24T16:09:25.870Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/unsafe-mimetypes/vulnerability/wordpress-unsafe-mimetypes-plugin-0-1-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T17:06:45.000000Z"}, {"uuid": "8734f486-bae4-4339-9980-0a8ac73b199c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46528", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46528\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar allows Stored XSS. This issue affects Availability Calendar: from n/a through 0.2.4.\n\ud83d\udccf Published: 2025-04-24T16:08:59.415Z\n\ud83d\udccf Modified: 2025-04-24T18:27:26.920Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/availability/vulnerability/wordpress-availability-calendar-0-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-24T19:06:58.000000Z"}, {"uuid": "f8fd459a-58f2-452e-b39b-1e3446e8f6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46569", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14399", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46569\n\ud83d\udd25 CVSS Score: 7.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a single data document reference is constructed from the requested path. This query is then used for policy evaluation. A HTTP request path can be crafted in a way that injects Rego code into the constructed query. The evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results. Furthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack. This issue has been patched in version 1.4.0. A workaround involves having network access to OPA\u2019s RESTful APIs being limited to `localhost` and/or trusted networks, unless necessary for production reasons.\n\ud83d\udccf Published: 2025-05-01T19:32:47.988Z\n\ud83d\udccf Modified: 2025-05-01T19:32:47.988Z\n\ud83d\udd17 References:\n1. https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7\n2. https://github.com/open-policy-agent/opa/commit/ad2063247a14711882f18c387a511fc8094aa79c", "creation_timestamp": "2025-05-01T20:16:05.000000Z"}, {"uuid": "c99e1461-b9a1-4db3-92ef-70485d066da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46417", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13169", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46417\n\ud83d\udd25 CVSS Score: 6.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.\n\ud83d\udccf Published: 2025-04-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T00:27:33.032Z\n\ud83d\udd17 References:\n1. https://github.com/advisories/GHSA-93mv-x874-956g\n2. https://github.com/mmaitre314/picklescan/pull/40", "creation_timestamp": "2025-04-24T01:04:58.000000Z"}, {"uuid": "65c8c0f0-6dfe-4d28-87fd-a12a439e389e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46378", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46378\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-04-24T02:55:06.768Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-04-24T04:06:07.000000Z"}, {"uuid": "89a87c67-44c1-4c8b-b1c9-a47591943907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46397", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13154", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46397\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Stack-overflow\u00a0in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezier_spline function.\n\ud83d\udccf Published: 2025-04-23T20:55:09.795Z\n\ud83d\udccf Modified: 2025-04-23T20:55:09.795Z\n\ud83d\udd17 References:\n1. https://sourceforge.net/p/mcj/tickets/192/", "creation_timestamp": "2025-04-23T21:05:02.000000Z"}, {"uuid": "6b5cf252-ef7e-4113-a5a9-a8b552905ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46398", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13153", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46398\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Stack-overflow\u00a0in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via read_objects function.\n\ud83d\udccf Published: 2025-04-23T20:55:13.458Z\n\ud83d\udccf Modified: 2025-04-23T20:55:13.458Z\n\ud83d\udd17 References:\n1. https://sourceforge.net/p/mcj/tickets/191/", "creation_timestamp": "2025-04-23T21:05:01.000000Z"}, {"uuid": "3cc15cd9-f8ee-42cf-b95b-6a864981e8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46399", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46399\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Segmentation fault in fig2dev in version 3.2.9a\u00a0allows an attacker to availability via local input manipulation via\u00a0genge_itp_spline function.\n\ud83d\udccf Published: 2025-04-23T20:55:15.407Z\n\ud83d\udccf Modified: 2025-04-23T20:55:15.407Z\n\ud83d\udd17 References:\n1. https://sourceforge.net/p/mcj/tickets/190/", "creation_timestamp": "2025-04-23T21:05:00.000000Z"}, {"uuid": "3dbe35f2-f877-4808-bdf0-90707572c5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46400", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46400\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via read_arcobject function.\n\ud83d\udccf Published: 2025-04-23T20:55:17.239Z\n\ud83d\udccf Modified: 2025-04-23T20:55:17.239Z\n\ud83d\udd17 References:\n1. https://sourceforge.net/p/mcj/tickets/187/", "creation_timestamp": "2025-04-23T21:04:59.000000Z"}, {"uuid": "cc62d76a-7647-4667-8087-5bce50bb9c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46332", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14526", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46332\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Flags SDK is an open-source feature flags toolkit for Next.js and SvelteKit. Impacted versions include flags from 3.2.0 and prior and @vercel/flags from 3.1.1 and prior as certain circumstances allows a bad actor with detailed knowledge of the vulnerability to list all flags returned by the flags discovery endpoint (.well-known/vercel/flags). This vulnerability allows for information disclosure, where a bad actor could gain access to a list of all feature flags exposed through the flags discovery endpoint, including the flag names, flag descriptions, available options and their labels (e.g. true, false), and default flag values. This issue has been patched in flags@4.0.0, users of flags and @vercel/flags should also migrate to flags@4.0.0.\n\ud83d\udccf Published: 2025-05-02T17:06:35.443Z\n\ud83d\udccf Modified: 2025-05-02T17:06:35.443Z\n\ud83d\udd17 References:\n1. https://github.com/vercel/flags/security/advisories/GHSA-892p-pqrr-hxqr\n2. https://github.com/vercel/flags/blob/main/packages/flags/guides/upgrade-to-v4.md\n3. https://vercel.com/changelog/information-disclosure-in-flags-sdk-cve-2025-46332", "creation_timestamp": "2025-05-02T17:16:25.000000Z"}, {"uuid": "5aee4429-9062-48a2-a2ca-349782a54a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14548", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46337\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\ud83d\udd39 Description: ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.\n\ud83d\udccf Published: 2025-05-01T17:20:10.658Z\n\ud83d\udccf Modified: 2025-05-02T17:57:58.870Z\n\ud83d\udd17 References:\n1. https://github.com/ADOdb/ADOdb/security/advisories/GHSA-8x27-jwjr-8545\n2. https://github.com/ADOdb/ADOdb/issues/1070\n3. https://github.com/ADOdb/ADOdb/commit/11107d6d6e5160b62e05dff8a3a2678cf0e3a426", "creation_timestamp": "2025-05-02T18:19:42.000000Z"}, {"uuid": "29564fc5-f9d2-474c-bde2-7fcbeaa4d468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46345", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46345\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue has been patched in versions 2.6.7, 2.7.0, and 3.0.0. It is recommended to upgrade to version 3.0.0 or greater.\n\ud83d\udccf Published: 2025-05-01T17:20:24.010Z\n\ud83d\udccf Modified: 2025-05-02T17:39:32.800Z\n\ud83d\udd17 References:\n1. https://github.com/auth0-extensions/auth0-account-link-extension/security/advisories/GHSA-j2jh-rqff-7vmg\n2. https://github.com/auth0-extensions/auth0-account-link-extension/pull/187", "creation_timestamp": "2025-05-02T18:19:52.000000Z"}, {"uuid": "780b9603-c3cd-406b-9e76-52b5f33f446a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46723", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14630", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46723\n\ud83d\udd25 CVSS Score: 7.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: OpenVM is a performant and modular zkVM framework built for customization and extensibility. In version 1.0.0, OpenVM is vulnerable to overflow through byte decomposition of pc in AUIPC chip. A typo results in the highest limb of pc being range checked to 8-bits instead of 6-bits. This results in the if statement never being triggered because the enumeration gives i=0,1,2, when instead the enumeration should give i=1,2,3, leaving pc_limbs[3] range checked to 8-bits instead of 6-bits. This leads to a vulnerability where the pc_limbs decomposition differs from the true pc, which means a malicious prover can make the destination register take a different value than the AUIPC instruction dictates, by making the decomposition overflow the BabyBear field. This issue has been patched in version 1.1.0.\n\ud83d\udccf Published: 2025-05-02T22:18:55.696Z\n\ud83d\udccf Modified: 2025-05-02T22:18:55.696Z\n\ud83d\udd17 References:\n1. https://github.com/openvm-org/openvm/security/advisories/GHSA-jf2r-x3j4-23m7\n2. https://github.com/openvm-org/openvm/commit/68da4b50c033da5603517064aa0a08e1bbf70a01\n3. https://cantina.xyz/code/c486d600-bed0-4fc6-aed1-de759fd29fa2/findings/21\n4. https://github.com/openvm-org/openvm/blob/0f94c8a3dfa7536c1231465d1bdee5fc607a5993/extensions/rv32im/circuit/src/auipc/core.rs#L135\n5. https://github.com/openvm-org/openvm/releases/tag/v1.1.0", "creation_timestamp": "2025-05-02T23:17:25.000000Z"}, {"uuid": "01aba0eb-02cc-4d67-a146-99db6330bf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46587", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46587\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Permission control vulnerability in the media library module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.\n\ud83d\udccf Published: 2025-05-06T07:14:30.179Z\n\ud83d\udccf Modified: 2025-05-06T14:03:05.411Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/5/", "creation_timestamp": "2025-05-06T14:21:30.000000Z"}, {"uuid": "721dce54-f5ab-4695-856a-6e5b1fedc9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15197", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46820\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUB_TOKEN in the Dom workflow run artifact. The ci.yml workflow file uses actions/upload-artifact@v4 to upload the build artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the GitHub API to push malicious code or rewrite release commits in your repository. Any downstream user of the repository may be affected, but the token should only be valid for the duration of the workflow run, limiting the time during which exploitation could occur. Version 4.1.8 fixes the issue.\n\ud83d\udccf Published: 2025-05-06T18:48:52.176Z\n\ud83d\udccf Modified: 2025-05-06T19:02:09.024Z\n\ud83d\udd17 References:\n1. https://github.com/phpgt/Dom/security/advisories/GHSA-cwj7-6v67-2cm4\n2. https://github.com/phpgt/Dom/commit/205cddcc82c002dfa48e874494efbf4c49497394", "creation_timestamp": "2025-05-06T19:21:12.000000Z"}, {"uuid": "38ef54ca-b6cb-4482-ac03-34564159c00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46730", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14981", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46730\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: MobSF is a mobile application security testing tool used. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web applications. Access to the MobSF web interface is often granted to internal security teams, audit teams, and external vendors.  MobSF provides a feature that allows users to upload ZIP files for static analysis. Upon upload, these ZIP files are automatically extracted and stored within the MobSF directory. However, in versions up to and including 4.3.2, this functionality lacks a check on the total uncompressed size of the ZIP file, making it vulnerable to a ZIP of Death (zip bomb) attack. Due to the absence of safeguards against oversized extractions, an attacker can craft a specially prepared ZIP file that is small in compressed form but expands to a massive size upon extraction. Exploiting this, an attacker can exhaust the server's disk space, leading to a complete denial of service (DoS) not just for MobSF, but also for any other applications or websites hosted on the same server. This vulnerability can lead to complete server disruption in an organization which can affect other internal portals and tools too (which are hosted on the same server). If some organization has created their customized cloud based mobile security tool using MobSF core then an attacker can exploit this vulnerability to crash their servers. Commit 6987a946485a795f4fd38cebdb4860b368a1995d fixes this issue. As an additional mitigation, it is recommended to implement a safeguard that checks the total uncompressed size of any uploaded ZIP file before extraction. If the estimated uncompressed size exceeds a safe threshold (e.g., 100 MB), MobSF should reject the file and notify the user.\n\ud83d\udccf Published: 2025-05-05T19:32:24.170Z\n\ud83d\udccf Modified: 2025-05-05T20:04:30.184Z\n\ud83d\udd17 References:\n1. https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-c5vg-26p8-q8cr\n2. https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/6987a946485a795f4fd38cebdb4860b368a1995d", "creation_timestamp": "2025-05-05T20:20:06.000000Z"}, {"uuid": "d6f963f2-75f1-4fa2-a6c0-e106622d8e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46736", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15163", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46736\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8.10 and 13.8.1. No known workarounds are available.\n\ud83d\udccf Published: 2025-05-06T17:08:23.503Z\n\ud83d\udccf Modified: 2025-05-06T17:08:23.503Z\n\ud83d\udd17 References:\n1. https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-4g8m-5mj5-c8xg\n2. https://github.com/umbraco/Umbraco-CMS/commit/14fbd20665b453cbf094ccf4575b79a9fba07e03\n3. https://github.com/umbraco/Umbraco-CMS/commit/34709be6cce9752dfa767dffbf551305f48839bc", "creation_timestamp": "2025-05-06T17:21:41.000000Z"}, {"uuid": "dfbac995-7060-47a6-8991-1e4789f0f836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46813", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14982", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46813\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: Discourse is an open-source community platform. A data leak vulnerability affects sites deployed between commits 10df7fdee060d44accdee7679d66d778d1136510 and 82d84af6b0efbd9fa2aeec3e91ce7be1a768511b. On login-required sites, the leak meant that some content on the site's homepage could be visible to unauthenticated users. Only login-required sites that got deployed during this timeframe are affected, roughly between April 30 2025 noon EDT and May 2 2025, noon EDT. Sites on the stable branch are unaffected. Private content on an instance's homepage could be visible to unauthenticated users on login-required sites. Versions of 3.5.0.beta4 after commit 82d84af6b0efbd9fa2aeec3e91ce7be1a768511b are not vulnerable to the issue. No workarounds are available. Sites must upgrade to a non-vulnerable version of Discourse.\n\ud83d\udccf Published: 2025-05-05T20:03:46.289Z\n\ud83d\udccf Modified: 2025-05-05T20:03:46.289Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse/security/advisories/GHSA-v3h7-c287-pfg9\n2. https://github.com/discourse/discourse/commit/10df7fdee060d44accdee7679d66d778d1136510\n3. https://github.com/discourse/discourse/commit/82d84af6b0efbd9fa2aeec3e91ce7be1a768511b", "creation_timestamp": "2025-05-05T20:20:07.000000Z"}, {"uuid": "27f16665-aa77-44d9-9151-ee80ae0f2d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46728", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15020", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46728\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce configured size limits on incoming request bodies when `Transfer-Encoding: chunked` is used or when no `Content-Length` header is provided. A remote attacker can send a chunked request without the terminating zero-length chunk, causing uncontrolled memory allocation on the server. This leads to potential exhaustion of system memory and results in a server crash or unresponsiveness. Version 0.20.1 fixes the issue by enforcing limits during parsing. If the limit is exceeded at any point during reading, the connection is terminated immediately. A short-term workaround through a Reverse Proxy is available. If updating the library immediately is not feasible, deploy a reverse proxy (e.g., Nginx, HAProxy) in front of the `cpp-httplib` application. Configure the proxy to enforce maximum request body size limits, thereby stopping excessively large requests before they reach the vulnerable library code.\n\ud83d\udccf Published: 2025-05-06T00:45:25.130Z\n\ud83d\udccf Modified: 2025-05-06T00:45:25.130Z\n\ud83d\udd17 References:\n1. https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-px83-72rx-v57c\n2. https://github.com/yhirose/cpp-httplib/commit/7b752106ac42bd5b907793950d9125a0972c8e8e", "creation_timestamp": "2025-05-06T01:20:33.000000Z"}, {"uuid": "9e7518be-192e-4c09-902c-c0bf8d9aca38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46588", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15123", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46588\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Vulnerability of unauthorized access in the app lock module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.\n\ud83d\udccf Published: 2025-05-06T07:16:28.523Z\n\ud83d\udccf Modified: 2025-05-06T14:01:59.835Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2025/5/", "creation_timestamp": "2025-05-06T14:21:32.000000Z"}, {"uuid": "f054282b-5f01-41e8-b388-c6064159ae8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46734", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14988", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46734\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: league/commonmark is a PHP Markdown parser. A cross-site scripting (XSS) vulnerability in the Attributes extension of the league/commonmark library (versions 1.5.0 through 2.6.x) allows remote attackers to insert malicious JavaScript calls into HTML. The league/commonmark library provides configuration options such as `html_input: 'strip'` and `allow_unsafe_links: false` to mitigate cross-site scripting (XSS) attacks by stripping raw HTML and disallowing unsafe links. However, when the Attributes Extension is enabled, it introduces a way for users to inject arbitrary HTML attributes into elements via Markdown syntax using curly braces. Version 2.7.0 contains three changes to prevent this XSS attack vector: All attributes starting with `on` are considered unsafe and blocked by default; support for an explicit allowlist of allowed HTML attributes; and manually-added `href` and `src` attributes now respect the existing `allow_unsafe_links` configuration option. If upgrading is not feasible, please consider disabling the `AttributesExtension` for untrusted users and/or filtering the rendered HTML through a library like HTMLPurifier.\n\ud83d\udccf Published: 2025-05-05T19:52:59.521Z\n\ud83d\udccf Modified: 2025-05-05T19:52:59.521Z\n\ud83d\udd17 References:\n1. https://github.com/thephpleague/commonmark/security/advisories/GHSA-3527-qv2q-pfvx\n2. https://github.com/thephpleague/commonmark/commit/f0d626cf05ad3e99e6db26ebcb9091b6cd1cd89b", "creation_timestamp": "2025-05-05T20:20:16.000000Z"}, {"uuid": "00de17b0-eb27-4513-ae35-4c26036314a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46762\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:N/RE:M/U:Amber)\n\ud83d\udd39 Description: Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code.\n\nWhile 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be executed.\n\nThe exploit is only applicable if the client code of parquet-avro uses the \"specific\" or the \"reflect\" models deliberately for reading Parquet files. (\"generic\" model is not impacted)\n\nUsers are recommended to upgrade to 1.15.2 or set the system property \"org.apache.parquet.avro.SERIALIZABLE_PACKAGES\" to an empty string on 1.15.1. Both are sufficient to fix the issue.\n\ud83d\udccf Published: 2025-05-06T09:08:13.996Z\n\ud83d\udccf Modified: 2025-05-06T09:08:13.996Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/t7724lpvl110xsbgqwsmrdsns0rhycdp", "creation_timestamp": "2025-05-06T09:21:14.000000Z"}, {"uuid": "818f4ed1-16f6-49d0-9414-ea962fc0ecef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46814", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46814\n\ud83d\udd25 CVSS Score: 3.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially inject arbitrary IP addresses into the request. This vulnerability can allow attackers to bypass IP-based access controls, mislead logging systems, and impersonate trusted clients. It is especially impactful when the application relies on the X-Forwarded-For header for IP-based authorization or authentication. Users should upgrade to FastAPI Guard version 2.0.0 to receive a fix.\n\ud83d\udccf Published: 2025-05-06T14:55:48.766Z\n\ud83d\udccf Modified: 2025-05-06T19:51:34.278Z\n\ud83d\udd17 References:\n1. https://github.com/rennf93/fastapi-guard/security/advisories/GHSA-77q8-qmj7-x7pp\n2. https://github.com/rennf93/fastapi-guard/commit/0b003fda4c678c1b514e95f319aee88113e9bf4b", "creation_timestamp": "2025-05-06T20:21:16.000000Z"}, {"uuid": "10493bc4-0d76-4804-b963-870df62c9c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46735", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46735\n\ud83d\udd25 CVSS Score: 1.1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:U)\n\ud83d\udd39 Description: Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue.\n\ud83d\udccf Published: 2025-05-06T17:00:33.902Z\n\ud83d\udccf Modified: 2025-05-06T19:48:41.206Z\n\ud83d\udd17 References:\n1. https://github.com/nrkno/terraform-provider-windns/security/advisories/GHSA-4vgf-2cm4-mp7c\n2. https://github.com/nrkno/terraform-provider-windns/commit/c76f69610c1b502f90aaed8c4f102194530b5bce", "creation_timestamp": "2025-05-06T20:21:22.000000Z"}, {"uuid": "e9228f9f-6b3a-4d6e-9235-6bc899a8fdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46827", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15347", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46827\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with permissions to create event definitions, while the user must have permissions to view alerts. Additionally, an active Input must be present on the Graylog server that is capable of receiving form data (e.g. a HTTP input, TCP raw or syslog etc). Versions 6.0.14, 6.1.10, and 6.2.0 fix the issue. No known workarounds are available, as long as the relatively rare prerequisites are met.\n\ud83d\udccf Published: 2025-05-07T15:29:31.420Z\n\ud83d\udccf Modified: 2025-05-07T15:50:18.084Z\n\ud83d\udd17 References:\n1. https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-76vf-mpmx-777j", "creation_timestamp": "2025-05-07T16:23:25.000000Z"}, {"uuid": "8faa667a-d135-4ff2-ba74-c5e0e5dcec80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46551", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15410", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46551\n\ud83d\udd25 CVSS Score: 5.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1), when verifying SSL certificates, JRuby-OpenSSL does not verify that the hostname presented in the certificate matches the one the user tries to connect to. This means a man-in-the-middle could just present any valid cert for a completely different domain they own, and JRuby would accept the cert. Anybody using JRuby to make requests of external APIs, or scraping the web, that depends on https to connect securely. JRuby-OpenSSL version 0.15.4 contains a fix for the issue. This fix is included in JRuby versions 10.0.0.1 and 9.4.12.1.\n\ud83d\udccf Published: 2025-05-07T16:12:23.771Z\n\ud83d\udccf Modified: 2025-05-07T20:10:54.558Z\n\ud83d\udd17 References:\n1. https://github.com/jruby/jruby-openssl/security/advisories/GHSA-72qj-48g4-5xgx\n2. https://github.com/jruby/jruby-openssl/commit/31a56d690ce9b8af47af09aaaf809081949ed285", "creation_timestamp": "2025-05-07T20:22:48.000000Z"}, {"uuid": "28b11838-a011-4473-ac06-603cbbafa4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46821", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46821\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the `*` character from a set of valid characters in the URI path. As a result URI path containing the `*` character will not match a URI template expressions. This can result in bypass of RBAC rules when configured using the `uri_template` permissions. This vulnerability is fixed in Envoy versions v1.34.1, v1.33.3, v1.32.6, v1.31.8. As a workaround, configure additional RBAC permissions using `url_path` with `safe_regex` expression.\n\ud83d\udccf Published: 2025-05-07T21:24:07.891Z\n\ud83d\udccf Modified: 2025-05-07T21:24:07.891Z\n\ud83d\udd17 References:\n1. https://github.com/envoyproxy/envoy/security/advisories/GHSA-c7cm-838g-6g67", "creation_timestamp": "2025-05-07T22:23:22.000000Z"}, {"uuid": "7fe52643-bbf5-47e6-9371-dc43e24b9742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15975", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46737\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources.\n\ud83d\udccf Published: 2025-05-12T16:06:23.559Z\n\ud83d\udccf Modified: 2025-05-12T17:58:52.199Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:17.000000Z"}, {"uuid": "0a6bea01-019d-4550-bf39-c2a56d3e0d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46265", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15449", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46265\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\ud83d\udccf Published: 2025-05-07T22:04:08.759Z\n\ud83d\udccf Modified: 2025-05-07T22:04:08.759Z\n\ud83d\udd17 References:\n1. https://my.f5.com/manage/s/article/K000139503", "creation_timestamp": "2025-05-07T22:23:09.000000Z"}, {"uuid": "7dbac468-923e-4d3e-a397-e82119c2014a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46826", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15456", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46826\n\ud83d\udd25 CVSS Score: 1.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/S:N/AU:Y/R:A/V:D/RE:L)\n\ud83d\udd39 Description: insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, was never exploited, and had limited impact. A fix was implemented promptly on May 3, 2025.\n\ud83d\udccf Published: 2025-05-07T21:32:30.865Z\n\ud83d\udccf Modified: 2025-05-07T21:32:30.865Z\n\ud83d\udd17 References:\n1. https://github.com/INSAgenda/insa-auth/security/advisories/GHSA-63xr-gvjv-r6xv\n2. https://github.com/INSAgenda/insa-auth/commit/8c1e68b2fb55aa952f522ead55a6587526982a2c\n3. https://github.com/INSAgenda/insa-auth/commit/b0e7508e6ca4360e39fb1fd931f8d47b1f992ced\n4. https://github.com/INSAgenda/insa-auth/commit/c77cf2e25778f83ebf5c4fdb4ded3ffcc8cfd74d", "creation_timestamp": "2025-05-07T22:23:16.000000Z"}, {"uuid": "93564a83-e7e8-407f-ae61-9fe7aba8988c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15459", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46727\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters, allowing attackers to send requests with extremely large numbers of parameters. The vulnerability arises because `Rack::QueryParser` iterates over each `&`-separated key-value pair and adds it to a Hash without enforcing an upper bound on the total number of parameters. This allows an attacker to send a single request containing hundreds of thousands (or more) of parameters, which consumes excessive memory and CPU during parsing. An attacker can trigger denial of service by sending specifically crafted HTTP requests, which can cause memory exhaustion or pin CPU resources, stalling or crashing the Rack server. This results in full service disruption until the affected worker is restarted. Versions 2.2.14, 3.0.16, and 3.1.14 fix the issue. Some other mitigations are available. One may use middleware to enforce a maximum query string size or parameter count, or employ a reverse proxy (such as Nginx) to limit request sizes and reject oversized query strings or bodies. Limiting request body sizes and query string lengths at the web server or CDN level is an effective mitigation.\n\ud83d\udccf Published: 2025-05-07T23:07:40.563Z\n\ud83d\udccf Modified: 2025-05-07T23:07:40.563Z\n\ud83d\udd17 References:\n1. https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx\n2. https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712\n3. https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3\n4. https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74", "creation_timestamp": "2025-05-07T23:23:29.000000Z"}, {"uuid": "e49cc4fe-f211-4cc8-a7f1-cd67731b73d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46750\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected  BIOS settings by importing a BIOS settings file with no password set.\n\ud83d\udccf Published: 2025-05-12T16:13:03.083Z\n\ud83d\udccf Modified: 2025-05-12T16:13:03.083Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:04.000000Z"}, {"uuid": "f61ee1ef-af60-497b-989b-2ef82dd380d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46743", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46743\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L)\n\ud83d\udd39 Description: An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.\n\ud83d\udccf Published: 2025-05-12T16:14:05.722Z\n\ud83d\udccf Modified: 2025-05-12T16:14:05.722Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:03.000000Z"}, {"uuid": "382dbcc1-73ac-41e5-8434-9ae1095d394d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15947", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46742\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Users who were required to change their password could still access system information before changing their password\n\ud83d\udccf Published: 2025-05-12T16:10:09.527Z\n\ud83d\udccf Modified: 2025-05-12T16:10:09.527Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:11.000000Z"}, {"uuid": "3173c14f-2281-43ac-b271-1ed6fa03306e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46744\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An authenticated administrator could modify the Created By username for a user account\n\ud83d\udccf Published: 2025-05-12T16:10:29.888Z\n\ud83d\udccf Modified: 2025-05-12T16:10:29.888Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:10.000000Z"}, {"uuid": "cf479e7c-9697-46cf-8cc0-6e881fe47c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46745\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An authenticated user without user-management permissions could view other users' account information.\n\ud83d\udccf Published: 2025-05-12T16:11:08.840Z\n\ud83d\udccf Modified: 2025-05-12T16:11:08.840Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:09.000000Z"}, {"uuid": "06af0687-514b-4e72-b1f4-17dffc3f5137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46748", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15961", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46748\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An authenticated user attempting to change their password could do so without using the current password.\n\ud83d\udccf Published: 2025-05-12T16:12:07.018Z\n\ud83d\udccf Modified: 2025-05-12T16:12:07.018Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:34.000000Z"}, {"uuid": "39425ab4-b13c-41c8-b7a5-3b6664c46fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15960", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46749\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.\n\ud83d\udccf Published: 2025-05-12T16:12:25.269Z\n\ud83d\udccf Modified: 2025-05-12T16:12:25.269Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:33.000000Z"}, {"uuid": "d6620085-b2b4-48dd-988a-3796deceeb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46336\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie (already a major issue), the session may be restored if the attacker can trigger a long running request (within that same session) adjacent to the user logging out, in order to retain illicit access even after a user has attempted to logout. This issue has been patched in version 2.1.1.\n\ud83d\udccf Published: 2025-05-08T19:26:01.638Z\n\ud83d\udccf Modified: 2025-05-08T20:18:38.555Z\n\ud83d\udd17 References:\n1. https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj\n2. https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g\n3. https://github.com/rack/rack-session/commit/c28c4a8c1861d814e09f2ae48264ac4c40be2d3b", "creation_timestamp": "2025-05-08T20:23:47.000000Z"}, {"uuid": "c1ce604c-32c4-4835-a40b-d64d8ff9fc8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46712", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15613", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46712\n\ud83d\udd25 CVSS Score: 3.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25).\n\ud83d\udccf Published: 2025-05-08T19:26:27.563Z\n\ud83d\udccf Modified: 2025-05-08T20:03:27.225Z\n\ud83d\udd17 References:\n1. https://github.com/erlang/otp/security/advisories/GHSA-934x-xq38-hhqf\n2. https://github.com/erlang/otp/releases/tag/OTP-25.3.2.21\n3. https://github.com/erlang/otp/releases/tag/OTP-26.2.5.12\n4. https://github.com/erlang/otp/releases/tag/OTP-27.3.4", "creation_timestamp": "2025-05-08T20:23:54.000000Z"}, {"uuid": "e23e2e87-1caa-4db4-bee6-7c864e875ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15617", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46812\n\ud83d\udd25 CVSS Score: 2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P)\n\ud83d\udd39 Description: Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user's session, potentially leading to unauthorized actions being performed or sensitive information being disclosed. This issue has been patched in version 2.1.15.\n\ud83d\udccf Published: 2025-05-08T19:27:22.573Z\n\ud83d\udccf Modified: 2025-05-08T20:00:42.604Z\n\ud83d\udd17 References:\n1. https://github.com/basecamp/trix/security/advisories/GHSA-mcrw-746g-9q8h\n2. https://github.com/basecamp/trix/commit/75226089646841b0f774d8b152e5ec27d2d9e191", "creation_timestamp": "2025-05-08T20:23:59.000000Z"}, {"uuid": "869f86d4-f5d9-4e6a-a8a8-0975f83ac734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46192", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15779", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46192\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T16:38:59.002Z\n\ud83d\udd17 References:\n1. https://www.invicti.com/learn/blind-sql-injection/\n2. https://github.com/x6vrn/mitre/blob/main/CVE-2025-46192.md", "creation_timestamp": "2025-05-09T17:25:42.000000Z"}, {"uuid": "7ad913bb-3296-4b12-ba79-7df17ac4c5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46392", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46392\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.\n\nThere are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuration team does not intend to fix these issues in 1.x. Apache Commons Configuration 1.x is still safe to use in scenario's where you only load trusted configurations. \n\n\nUsers that load untrusted configurations or give attackers control over usage patterns are recommended to upgrade to the 2.x version line, which fixes these issues. Apache Commons Configuration 2.x is not a drop-in replacement, but as it uses a separate Maven groupId and Java package namespace they can be loaded side-by-side, making it possible to do a gradual migration.\n\ud83d\udccf Published: 2025-05-09T09:34:38.854Z\n\ud83d\udccf Modified: 2025-05-09T09:34:38.854Z\n\ud83d\udd17 References:\n1. https://www.cve.org/CVERecord?id=CVE-2024-29131\n2. https://www.cve.org/CVERecord?id=CVE-2024-29133\n3. https://lists.apache.org/thread/y1pl0mn3opz6kwkm873zshjdxq3dwq5s", "creation_timestamp": "2025-05-09T10:25:06.000000Z"}, {"uuid": "958ba65e-29d4-42f1-bfef-20c2777f1335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46189", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15762", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46189\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T16:09:41.056Z\n\ud83d\udd17 References:\n1. https://medium.com/@YousefAlotaibi/disclaimer-1699f46cb1a0\n2. https://github.com/x6vrn/mitre/blob/main/CVE-2025-46189.md", "creation_timestamp": "2025-05-09T16:25:00.000000Z"}, {"uuid": "4cd380e8-9842-4393-9efb-e286abb8ef0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46193", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15739", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46193\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T15:13:17.803Z\n\ud83d\udd17 References:\n1. https://portswigger.net/web-security/file-upload\n2. https://github.com/x6vrn/mitre/blob/main/CVE-2025-46193.md", "creation_timestamp": "2025-05-09T15:25:26.000000Z"}, {"uuid": "6a6cc07c-1a15-4843-97f9-51c751dc5480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46190", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15756", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46190\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T16:22:18.841Z\n\ud83d\udd17 References:\n1. https://www.invicti.com/learn/blind-sql-injection/\n2. https://github.com/x6vrn/mitre/blob/main/CVE-2025-46190.md", "creation_timestamp": "2025-05-09T16:24:53.000000Z"}, {"uuid": "732902e6-14b1-4d93-b97b-2a566a0fdd36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46191", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46191\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attackers can upload executable PHP files to a web-accessible directory (/files/). This allows them to execute arbitrary commands remotely by accessing the uploaded script, resulting in full Remote Code Execution (RCE) without authentication.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T16:33:38.615Z\n\ud83d\udd17 References:\n1. https://portswigger.net/web-security/file-upload\n2. https://github.com/x6vrn/mitre/blob/main/CVE-2025-46191.md", "creation_timestamp": "2025-05-09T17:25:45.000000Z"}, {"uuid": "aa6f23f9-b3a4-4226-8883-9d07271c1978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15979", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46740\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An authenticated user without user administrative permissions could  change the administrator Account Name.\n\ud83d\udccf Published: 2025-05-12T16:09:22.036Z\n\ud83d\udccf Modified: 2025-05-12T17:56:25.876Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:21.000000Z"}, {"uuid": "ecb59d58-26df-4103-9549-df43d74dc105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46453", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15870", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46453\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreatorTeam Zoho Creator Forms allows Stored XSS. This issue affects Zoho Creator Forms: from n/a through 1.0.5.\n\ud83d\udccf Published: 2025-04-24T16:09:06.761Z\n\ud83d\udccf Modified: 2025-05-10T02:55:25.315Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/zohocreator/vulnerability/wordpress-zoho-creator-forms-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-10T03:25:57.000000Z"}, {"uuid": "6f8c96b3-2c49-4af0-a289-cce219aad228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46572", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16202", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46572\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by crafting a SAMLResponse. This can be done by using a valid SAML object that was signed by the configured IdP. Users are affected specifically when the service provider is using passport-wsfed-saml2 and a valid SAML document signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability.\n\ud83d\udccf Published: 2025-05-06T20:18:26.379Z\n\ud83d\udccf Modified: 2025-05-13T19:17:06.822Z\n\ud83d\udd17 References:\n1. https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-wjmp-wphq-jvqf\n2. https://github.com/auth0/passport-wsfed-saml2/commit/e5cf3cc2a53748207f7a81bfba9195c8efa94181", "creation_timestamp": "2025-05-13T19:30:57.000000Z"}, {"uuid": "044c637f-bf87-48e7-91db-d9f865327e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46738\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L)\n\ud83d\udd39 Description: An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.\n\ud83d\udccf Published: 2025-05-12T16:07:02.820Z\n\ud83d\udccf Modified: 2025-05-12T17:57:51.802Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:37:58.000000Z"}, {"uuid": "e7658644-4764-451f-8ec4-a4afebc7ca17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46746\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: An administrator could discover another account's credentials.\n\ud83d\udccf Published: 2025-05-12T16:11:33.768Z\n\ud83d\udccf Modified: 2025-05-12T17:50:17.015Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:38:08.000000Z"}, {"uuid": "aaaf4b02-450b-4de3-8cb0-a3eb83241bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46745\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An authenticated user without user-management permissions could view other users' account information.\n\ud83d\udccf Published: 2025-05-12T16:11:08.840Z\n\ud83d\udccf Modified: 2025-05-12T17:51:41.630Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:38:05.000000Z"}, {"uuid": "79e25de2-a740-48a5-8528-3c66f2eec9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46744\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An authenticated administrator could modify the Created By username for a user account\n\ud83d\udccf Published: 2025-05-12T16:10:29.888Z\n\ud83d\udccf Modified: 2025-05-12T17:53:00.590Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:38:04.000000Z"}, {"uuid": "9d697f31-ba9b-4495-bbd9-516889238349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16011", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46742\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Users who were required to change their password could still access system information before changing their password\n\ud83d\udccf Published: 2025-05-12T16:10:09.527Z\n\ud83d\udccf Modified: 2025-05-12T17:53:46.879Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:38:03.000000Z"}, {"uuid": "1436790d-5715-4ab1-b3e9-4fd33223d7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15959", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46750\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected  BIOS settings by importing a BIOS settings file with no password set.\n\ud83d\udccf Published: 2025-05-12T16:13:03.083Z\n\ud83d\udccf Modified: 2025-05-12T16:13:03.083Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:32.000000Z"}, {"uuid": "eddf1727-8dcf-4ca6-86ec-9f8bc6d3056c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46743", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46743\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L)\n\ud83d\udd39 Description: An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.\n\ud83d\udccf Published: 2025-05-12T16:14:05.722Z\n\ud83d\udccf Modified: 2025-05-12T16:14:05.722Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:31.000000Z"}, {"uuid": "264696ae-80a9-419f-a0fe-c2fc1c4ec28f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15966", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46742\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Users who were required to change their password could still access system information before changing their password\n\ud83d\udccf Published: 2025-05-12T16:10:09.527Z\n\ud83d\udccf Modified: 2025-05-12T16:10:09.527Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:42.000000Z"}, {"uuid": "4fc2bdcf-417a-4be3-92e7-bc27630cc06b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15965", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46744\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An authenticated administrator could modify the Created By username for a user account\n\ud83d\udccf Published: 2025-05-12T16:10:29.888Z\n\ud83d\udccf Modified: 2025-05-12T16:10:29.888Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:41.000000Z"}, {"uuid": "c682683b-c21d-4b28-a354-137ca2468442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15964", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46745\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An authenticated user without user-management permissions could view other users' account information.\n\ud83d\udccf Published: 2025-05-12T16:11:08.840Z\n\ud83d\udccf Modified: 2025-05-12T16:11:08.840Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:40.000000Z"}, {"uuid": "01e1d1f7-0ef9-4496-a492-58712cfd6a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15963", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46746\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: An administrator could discover another account's credentials.\n\ud83d\udccf Published: 2025-05-12T16:11:33.768Z\n\ud83d\udccf Modified: 2025-05-12T16:11:33.768Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:39.000000Z"}, {"uuid": "ddad4209-6e22-42a0-9640-c9a6c62d2311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15962", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46747\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An authenticated user without user-management permissions could identify other user accounts.\n\ud83d\udccf Published: 2025-05-12T16:11:52.359Z\n\ud83d\udccf Modified: 2025-05-12T16:11:52.359Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:26:35.000000Z"}, {"uuid": "8eff9960-3ae3-4c49-9699-a04c18f5e5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15978", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46739\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting\n\ud83d\udccf Published: 2025-05-12T16:08:38.763Z\n\ud83d\udccf Modified: 2025-05-12T17:57:08.901Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:20.000000Z"}, {"uuid": "7166cd50-e771-460f-8a22-ab6e066baf11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15985", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46746\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: An administrator could discover another account's credentials.\n\ud83d\udccf Published: 2025-05-12T16:11:33.768Z\n\ud83d\udccf Modified: 2025-05-12T17:50:17.015Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:30.000000Z"}, {"uuid": "b22f8089-227f-4976-b11c-57ac6fa37fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46748", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46748\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An authenticated user attempting to change their password could do so without using the current password.\n\ud83d\udccf Published: 2025-05-12T16:12:07.018Z\n\ud83d\udccf Modified: 2025-05-12T16:12:07.018Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:06.000000Z"}, {"uuid": "240d70ba-5c60-49d8-87cf-6889eb6231c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15941", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46749\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.\n\ud83d\udccf Published: 2025-05-12T16:12:25.269Z\n\ud83d\udccf Modified: 2025-05-12T16:12:25.269Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:05.000000Z"}, {"uuid": "7827e1b6-f38a-4a61-bc64-96a3cbc51657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46744\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An authenticated administrator could modify the Created By username for a user account\n\ud83d\udccf Published: 2025-05-12T16:10:29.888Z\n\ud83d\udccf Modified: 2025-05-12T17:53:00.590Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:43.000000Z"}, {"uuid": "ce077d91-6c74-4f36-81f6-c84aaeb52add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46742\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Users who were required to change their password could still access system information before changing their password\n\ud83d\udccf Published: 2025-05-12T16:10:09.527Z\n\ud83d\udccf Modified: 2025-05-12T17:53:46.879Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:42.000000Z"}, {"uuid": "108a8888-2d03-4c7b-bbb4-b00143432cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46741\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.\n\ud83d\udccf Published: 2025-05-12T16:09:53.581Z\n\ud83d\udccf Modified: 2025-05-12T17:55:24.025Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:41.000000Z"}, {"uuid": "b14429b7-c384-45d9-ae78-1891d1ae3b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15993", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46740\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An authenticated user without user administrative permissions could  change the administrator Account Name.\n\ud83d\udccf Published: 2025-05-12T16:09:22.036Z\n\ud83d\udccf Modified: 2025-05-12T17:56:25.876Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:40.000000Z"}, {"uuid": "fd7dce7c-068e-4e17-91fe-98827bbff571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15992", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46739\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting\n\ud83d\udccf Published: 2025-05-12T16:08:38.763Z\n\ud83d\udccf Modified: 2025-05-12T17:57:08.901Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:39.000000Z"}, {"uuid": "087a67a8-19b4-42f2-b268-3396d0e9f43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15944", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46746\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: An administrator could discover another account's credentials.\n\ud83d\udccf Published: 2025-05-12T16:11:33.768Z\n\ud83d\udccf Modified: 2025-05-12T16:11:33.768Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:08.000000Z"}, {"uuid": "a2b28faa-2f95-42ae-b015-8a29349fdc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15943", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46747\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An authenticated user without user-management permissions could identify other user accounts.\n\ud83d\udccf Published: 2025-05-12T16:11:52.359Z\n\ud83d\udccf Modified: 2025-05-12T16:11:52.359Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:07.000000Z"}, {"uuid": "9654208b-c5b2-4362-b34d-8ecfe4e39584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15952", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46737\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources.\n\ud83d\udccf Published: 2025-05-12T16:06:23.559Z\n\ud83d\udccf Modified: 2025-05-12T16:06:23.559Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:19.000000Z"}, {"uuid": "8f996825-ec9b-43f0-9701-dec08f78f2a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15951", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46738\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L)\n\ud83d\udd39 Description: An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.\n\ud83d\udccf Published: 2025-05-12T16:07:02.820Z\n\ud83d\udccf Modified: 2025-05-12T16:07:02.820Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:18.000000Z"}, {"uuid": "e96dcf38-4a5f-4195-bd10-3d50574997f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46739\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting\n\ud83d\udccf Published: 2025-05-12T16:08:38.763Z\n\ud83d\udccf Modified: 2025-05-12T16:08:38.763Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:17.000000Z"}, {"uuid": "62664dd1-56e7-4634-98a6-c826ec9658f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15949", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46740\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An authenticated user without user administrative permissions could  change the administrator Account Name.\n\ud83d\udccf Published: 2025-05-12T16:09:22.036Z\n\ud83d\udccf Modified: 2025-05-12T16:09:22.036Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:13.000000Z"}, {"uuid": "eee37b42-ad2f-4484-9acb-1878912e7c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46741\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.\n\ud83d\udccf Published: 2025-05-12T16:09:53.581Z\n\ud83d\udccf Modified: 2025-05-12T16:09:53.581Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:24:12.000000Z"}, {"uuid": "9bfee383-2c37-4c29-a13b-536e136a9885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15981", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46742\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Users who were required to change their password could still access system information before changing their password\n\ud83d\udccf Published: 2025-05-12T16:10:09.527Z\n\ud83d\udccf Modified: 2025-05-12T17:53:46.879Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:23.000000Z"}, {"uuid": "c9df439f-7a92-4d24-8795-8fe6cc2185b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15999", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46746\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: An administrator could discover another account's credentials.\n\ud83d\udccf Published: 2025-05-12T16:11:33.768Z\n\ud83d\udccf Modified: 2025-05-12T17:50:17.015Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:50.000000Z"}, {"uuid": "8a7c64cb-2ffb-4d3c-9c8f-4b4f6e85b067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15983", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46745\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An authenticated user without user-management permissions could view other users' account information.\n\ud83d\udccf Published: 2025-05-12T16:11:08.840Z\n\ud83d\udccf Modified: 2025-05-12T17:51:41.630Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:28.000000Z"}, {"uuid": "a189c80b-d494-4eae-8531-7f4a3e4ab1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15982", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46744\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An authenticated administrator could modify the Created By username for a user account\n\ud83d\udccf Published: 2025-05-12T16:10:29.888Z\n\ud83d\udccf Modified: 2025-05-12T17:53:00.590Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:29:24.000000Z"}, {"uuid": "b281f5c5-49c6-4096-90dc-ff295ba23b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15991", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46738\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L)\n\ud83d\udd39 Description: An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.\n\ud83d\udccf Published: 2025-05-12T16:07:02.820Z\n\ud83d\udccf Modified: 2025-05-12T17:57:51.802Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:38.000000Z"}, {"uuid": "3d35455b-d868-43f4-a658-a471c308a8f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46717", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16062", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46717\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list `. Users with local access to a machine can discover the existence/non-existence of certain files, revealing potentially sensitive information in the file names. This information can also be used in conjunction with other attacks. Version 0.2.6 fixes the vulnerability.\n\ud83d\udccf Published: 2025-05-12T14:52:55.408Z\n\ud83d\udccf Modified: 2025-05-12T22:06:55.312Z\n\ud83d\udd17 References:\n1. https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-98cv-wqjx-wx8f\n2. https://github.com/trifectatechfoundation/sudo-rs/releases/tag/v0.2.6", "creation_timestamp": "2025-05-12T22:29:13.000000Z"}, {"uuid": "8c877034-9349-45a7-aea7-97668ae5a58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15989", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46737\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)\n\ud83d\udd39 Description: SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources.\n\ud83d\udccf Published: 2025-05-12T16:06:23.559Z\n\ud83d\udccf Modified: 2025-05-12T17:58:52.199Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:31:36.000000Z"}, {"uuid": "317d59cf-d858-40ad-9467-ff8b9552ba84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16010", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46741\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.\n\ud83d\udccf Published: 2025-05-12T16:09:53.581Z\n\ud83d\udccf Modified: 2025-05-12T17:55:24.025Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:38:02.000000Z"}, {"uuid": "67e597ce-35e1-4615-9362-352694a06021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16009", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46740\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An authenticated user without user administrative permissions could  change the administrator Account Name.\n\ud83d\udccf Published: 2025-05-12T16:09:22.036Z\n\ud83d\udccf Modified: 2025-05-12T17:56:25.876Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:38:01.000000Z"}, {"uuid": "7ae51f63-a36f-4fbc-bce6-65c05b83b0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16008", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46739\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting\n\ud83d\udccf Published: 2025-05-12T16:08:38.763Z\n\ud83d\udccf Modified: 2025-05-12T17:57:08.901Z\n\ud83d\udd17 References:\n1. https://selinc.com/products/software/latest-software-versions/", "creation_timestamp": "2025-05-12T18:37:59.000000Z"}, {"uuid": "748dc344-4050-46a3-8473-2b276db0cb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46611", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16058", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46611\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script.\n\ud83d\udccf Published: 2025-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T22:07:18.183Z\n\ud83d\udd17 References:\n1. https://www.artec-it.com/en-us/ema.html\n2. https://www.syss.de/pentest-blog/csrf-und-xss-schwachstelle-in-ema-mail-von-artec-it-solutions-syss-2025-020/-021", "creation_timestamp": "2025-05-12T22:29:08.000000Z"}, {"uuid": "51ea746f-22a4-4bb8-976c-5ab2e0a2d193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46610", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16057", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46610\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ARTEC EMA Mail 6.92 allows CSRF.\n\ud83d\udccf Published: 2025-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T22:07:23.502Z\n\ud83d\udd17 References:\n1. https://www.artec-it.com/en-us/ema.html\n2. https://www.syss.de/pentest-blog/csrf-und-xss-schwachstelle-in-ema-mail-von-artec-it-solutions-syss-2025-020/-021", "creation_timestamp": "2025-05-12T22:29:07.000000Z"}, {"uuid": "c9d10b74-80a7-4830-8efd-330f9d336ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46718", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16063", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46718\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows users with limited sudo privileges to enumerate the sudoers file, revealing sensitive information about other users' permissions. Attackers can collect information that can be used to more targeted attacks. Systems where users either do not have sudo privileges or have the ability to run all commands as root through sudo (the default configuration on most systems) are not affected by this advisory. Version 0.2.6 fixes the vulnerability.\n\ud83d\udccf Published: 2025-05-12T14:54:24.925Z\n\ud83d\udccf Modified: 2025-05-12T22:06:49.474Z\n\ud83d\udd17 References:\n1. https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-w9q3-g4p5-5q2r\n2. https://github.com/trifectatechfoundation/sudo-rs/releases/tag/v0.2.6", "creation_timestamp": "2025-05-12T22:29:14.000000Z"}, {"uuid": "a40658db-e4c0-4b3c-9ad1-39c4f4b24fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4648", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16091", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4648\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Download of Code Without Integrity Check vulnerability in Centreon web allows Reflected XSS.\nA user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.\nThis issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29.\n\ud83d\udccf Published: 2025-05-13T09:45:41.519Z\n\ud83d\udccf Modified: 2025-05-13T09:45:41.519Z\n\ud83d\udd17 References:\n1. https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55575-centreon-web-high-severity-4434\n2. https://github.com/centreon/centreon/releases", "creation_timestamp": "2025-05-13T10:30:14.000000Z"}, {"uuid": "e6e941d7-48e5-4434-bba2-857f3589e797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46825", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46825\n\ud83d\udd25 CVSS Score: 1.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P)\n\ud83d\udd39 Description: Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting (XSS) Vulnerability in the `name` parameter of the `http://localhost/?controller=ProjectCreationController&action=create` form. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. Note that the default content security policy (CSP) blocks the JavaScript attack, though it can be exploited if an instance is badly configured and the software is vulnerable to CSS injection because of the unsafe-inline on the default CSP. Version 1.2.45 contains a fix for the issue.\n\ud83d\udccf Published: 2025-05-12T22:53:42.294Z\n\ud83d\udccf Modified: 2025-05-12T22:53:42.294Z\n\ud83d\udd17 References:\n1. https://github.com/kanboard/kanboard/security/advisories/GHSA-5wj3-c9v4-pj9v\n2. https://github.com/kanboard/kanboard/commit/6ebf22eeaae9f8b4abab72e3c18e45a2c4a2a808\n3. https://github.com/kanboard/kanboard/commit/ac94004ea9fc455dcc5edc8a242d67d1ccd85564\n4. https://github.com/kanboard/kanboard/blame/v1.2.44/app/Template/project_view/importTasks.php#L11", "creation_timestamp": "2025-05-12T23:29:31.000000Z"}, {"uuid": "a341dfc3-abd3-48b9-879b-b3e1b6f92999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4646", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16087", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4646\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Privilege Management vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.\n\ud83d\udccf Published: 2025-05-13T09:17:35.146Z\n\ud83d\udccf Modified: 2025-05-13T09:19:49.835Z\n\ud83d\udd17 References:\n1. https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55572-centreon-web-high-severity-4460\n2. https://github.com/centreon/centreon/releases", "creation_timestamp": "2025-05-13T09:30:35.000000Z"}, {"uuid": "09b6a14e-74fc-4b6a-b663-f0116979489d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16080", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4632\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.\n\ud83d\udccf Published: 2025-05-13T05:19:19.254Z\n\ud83d\udccf Modified: 2025-05-13T05:19:19.254Z\n\ud83d\udd17 References:\n1. https://security.samsungtv.com/securityUpdates#SVP-MAY-2025", "creation_timestamp": "2025-05-13T06:30:12.000000Z"}, {"uuid": "18dba5fb-3d64-4b5d-a140-b80781d5311f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46721", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16215", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46721\n\ud83d\udd25 CVSS Score: 6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site (either via XSS, or otherwise) to bypass CSRF checks and issue requests on user's behalf. Due to misuse of the Go `net/http` library, nosurf categorizes all incoming requests as plain-text HTTP requests, in which case the `Referer` header is not checked to have the same origin as the target webpage. If the attacker has control over HTML contents on either the target website (e.g. `example.com`), or on a website hosted on a subdomain of the target (e.g. `attacker.example.com`), they will also be able to manipulate cookies set for the target website. By acquiring the secret CSRF token from the cookie, or overriding the cookie with a new token known to the attacker, `attacker.example.com` is able to craft cross-site requests to `example.com`. A patch for the issue was released in nosurf 1.2.0. In lieu of upgrading to a patched version of nosurf, users may additionally use another HTTP middleware to ensure that a non-safe HTTP request is coming from the same origin (e.g. by requiring a `Sec-Fetch-Site: same-origin` header in the request).\n\ud83d\udccf Published: 2025-05-13T15:29:30.068Z\n\ud83d\udccf Modified: 2025-05-13T19:07:23.093Z\n\ud83d\udd17 References:\n1. https://github.com/justinas/nosurf/security/advisories/GHSA-w9hf-35q4-vcjw\n2. https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee\n3. https://github.com/advisories/GHSA-rq77-p4h8-4crw\n4. https://github.com/justinas/nosurf-cve-2025-46721\n5. https://github.com/justinas/nosurf/releases/tag/v1.2.0", "creation_timestamp": "2025-05-13T19:31:12.000000Z"}, {"uuid": "b5d73f26-92f6-4881-9c20-88a32ceb1c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16181", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4660\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:M/U:Amber)\n\ud83d\udd39 Description: A remote code execution vulnerability exists in the Windows agent component of SecureConnector\u00a0due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without authentication. By interacting with this pipe, an attacker can redirect the agent to communicate with a rogue server that can issue commands via the SecureConnector Agent.\u00a0\n\n\n\nThis does not impact Linux or OSX Secure Connector.\n\ud83d\udccf Published: 2025-05-13T17:34:53.955Z\n\ud83d\udccf Modified: 2025-05-13T18:14:43.084Z\n\ud83d\udd17 References:\n1. https://forescout.my.site.com/support/s/article/", "creation_timestamp": "2025-05-13T18:30:47.000000Z"}, {"uuid": "89d713dc-7607-477f-8bbb-efab82cb0b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4638", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4638\n\ud83d\udd25 CVSS Score: 9.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:L/SA:H/AU:Y/R:U/V:D/RE:M/U:Amber)\n\ud83d\udd39 Description: A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary (PCL). This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic.\n\nSince version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.\n\ud83d\udccf Published: 2025-05-14T17:59:58.180Z\n\ud83d\udccf Modified: 2025-05-14T17:59:58.180Z\n\ud83d\udd17 References:\n1. https://github.com/PointCloudLibrary/pcl/pull/6245\n2. https://github.com/PointCloudLibrary/pcl/blob/master/surface/CMakeLists.txt#L70\n3. https://github.com/PointCloudLibrary/pcl/commit/502bd2b013ce635f21632d523aa8cf2e04f7b7ac", "creation_timestamp": "2025-05-14T18:32:13.000000Z"}, {"uuid": "7660b049-5003-46f6-af4d-c83e7ba576f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4696", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16487", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4696\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Cyber Cafe Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-15T13:00:08.625Z\n\ud83d\udccf Modified: 2025-05-15T13:00:08.625Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308995\n2. https://vuldb.com/?ctiid.308995\n3. https://vuldb.com/?submit.567683\n4. https://github.com/Iandweb/CVE/issues/15\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-15T13:33:31.000000Z"}, {"uuid": "5498c4a5-dbfb-4af6-9493-a544d0fa3248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4697", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16486", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4697\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-15T13:00:11.709Z\n\ud83d\udccf Modified: 2025-05-15T13:00:11.709Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308996\n2. https://vuldb.com/?ctiid.308996\n3. https://vuldb.com/?submit.567694\n4. https://github.com/lwecho/myCVE/issues/2\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-15T13:33:30.000000Z"}, {"uuid": "30df4614-128b-4f4b-9263-06ed2cba0db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4664\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)\n\ud83d\udccf Published: 2025-05-14T17:41:06.667Z\n\ud83d\udccf Modified: 2025-05-14T18:22:37.873Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html\n2. https://issues.chromium.org/issues/415810136", "creation_timestamp": "2025-05-14T18:31:51.000000Z"}, {"uuid": "20f359c0-d3a4-466c-a45c-764062fd9914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4641", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16365", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4641\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H)\n\ud83d\udd39 Description: Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.\n\nThis issue affects webdrivermanager: from 1.0.0 before 6.0.2.\n\ud83d\udccf Published: 2025-05-14T18:09:26.105Z\n\ud83d\udccf Modified: 2025-05-14T18:09:26.105Z\n\ud83d\udd17 References:\n1. https://github.com/bonigarcia/webdrivermanager/pull/1458", "creation_timestamp": "2025-05-14T18:32:02.000000Z"}, {"uuid": "ca757436-2e98-4f3b-ad2a-ea94fece6140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4639", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16372", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4639\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:L/SI:N/SA:N)\n\ud83d\udd39 Description: CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0.\n\ud83d\udccf Published: 2025-05-14T18:04:11.726Z\n\ud83d\udccf Modified: 2025-05-14T18:04:11.726Z\n\ud83d\udd17 References:\n1. https://github.com/Peergos/Peergos/pull/1267", "creation_timestamp": "2025-05-14T18:32:11.000000Z"}, {"uuid": "e120e479-07fa-4488-b7d1-92ce2b443a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4640", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4640\n\ud83d\udd25 CVSS Score: 8.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:L/U:Amber)\n\ud83d\udd39 Description: Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.\n\ud83d\udccf Published: 2025-05-14T18:06:51.766Z\n\ud83d\udccf Modified: 2025-05-14T18:06:51.766Z\n\ud83d\udd17 References:\n1. https://github.com/PointCloudLibrary/pcl/pull/6246\n2. https://github.com/PointCloudLibrary/pcl/blob/master/surface/CMakeLists.txt#L70\n3. https://github.com/PointCloudLibrary/pcl/commit/502bd2b013ce635f21632d523aa8cf2e04f7b7ac", "creation_timestamp": "2025-05-14T18:32:08.000000Z"}, {"uuid": "05176e5b-97f7-4f1c-a44f-cc1ca5e1f5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16434", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46836\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\ud83d\udccf Published: 2025-05-14T22:59:19.997Z\n\ud83d\udccf Modified: 2025-05-14T22:59:19.997Z\n\ud83d\udd17 References:\n1. https://github.com/ecki/net-tools/security/advisories/GHSA-pfwf-h6m3-63wf\n2. https://github.com/ecki/net-tools/commit/7a8f42fb20013a1493d8cae1c43436f85e656f2d", "creation_timestamp": "2025-05-14T23:33:27.000000Z"}, {"uuid": "b127c127-9a98-4851-aff5-0d6f65a2c551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4695", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16465", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4695\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Cyber Cafe Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add-users.php. The manipulation of the argument uadd leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-15T12:31:05.940Z\n\ud83d\udccf Modified: 2025-05-15T12:31:05.940Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308994\n2. https://vuldb.com/?ctiid.308994\n3. https://vuldb.com/?submit.567673\n4. https://github.com/Iandweb/CVE/issues/14\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-15T12:34:11.000000Z"}, {"uuid": "af7d4015-5d86-45b2-9cfa-5badd908ba3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46052", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16550", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46052\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by injecting a crafted payload into the DEL form field in a POST request to /StockCounts.php\n\ud83d\udccf Published: 2025-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-15T19:22:58.277Z\n\ud83d\udd17 References:\n1. https://www.weberp.org/\n2. https://github.com/johnchd/CVEs/blob/main/WebERP/CVE-2025-46052%20-%20SQLi.md", "creation_timestamp": "2025-05-15T19:33:11.000000Z"}, {"uuid": "8d3f3d0f-a3f0-4f0b-afc6-a6fe5d5ecae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4602", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4602\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Reads in all versions up to, and including, 1.2.5 via the get_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. This is only exploitable by unauthenticated attackers in default configurations where the the default password is left as 1:1, or where the attacker gains access to the credentials.\n\ud83d\udccf Published: 2025-05-24T03:37:31.470Z\n\ud83d\udccf Modified: 2025-05-24T03:37:31.470Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/20caab24-4af7-4592-9b18-f2f5acb423c9?source=cve\n2. https://plugins.trac.wordpress.org/browser/store-manager-connector/trunk/smconnector.php#L35-36\n3. https://plugins.trac.wordpress.org/browser/store-manager-connector/trunk/classes/class-emosmconnectorcommon.php#L2220\n4. https://plugins.trac.wordpress.org/browser/store-manager-connector/trunk/classes/class-emosmcwoocommerceoverrider.php#L426\n5. https://github.com/d0n601/CVE-2025-4602/\n6. https://ryankozak.com/posts/cve-2025-4602/", "creation_timestamp": "2025-05-24T04:52:39.000000Z"}, {"uuid": "f9f08e5b-a363-4ce4-8afc-bee1ee3a602f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4679", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16667", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4679\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors.\n\ud83d\udccf Published: 2025-05-16T08:36:37.066Z\n\ud83d\udccf Modified: 2025-05-16T08:36:37.066Z\n\ud83d\udd17 References:\n1. https://www.synology.com/en-global/security/advisory/Synology_SA_25_06", "creation_timestamp": "2025-05-16T09:34:52.000000Z"}, {"uuid": "4fe95f3a-5a51-4ebe-ac84-708047709d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46464", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46464\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scripteo Ads Pro Plugin allows Stored XSS. This issue affects Ads Pro Plugin: from n/a through 4.88.\n\ud83d\udccf Published: 2025-05-16T15:45:22.238Z\n\ud83d\udccf Modified: 2025-05-16T16:49:25.069Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ap-plugin-scripteo/vulnerability/wordpress-ads-pro-plugin-4-88-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-16T17:35:04.000000Z"}, {"uuid": "d54fae69-6ba4-4d6a-ae20-89d40d8b0c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46412", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17182", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46412\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication.\n\ud83d\udccf Published: 2025-05-21T19:20:00.513Z\n\ud83d\udccf Modified: 2025-05-21T19:20:00.513Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10\n2. https://www.vertiv.com/en-us/support/security-support-center/", "creation_timestamp": "2025-05-21T19:42:52.000000Z"}, {"uuid": "2b422513-7303-40cf-8f71-daac6516619f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46543", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16899", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46543\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Charly Leetham Enhanced Paypal Shortcodes allows Stored XSS.This issue affects Enhanced Paypal Shortcodes: from n/a through 0.5a.\n\ud83d\udccf Published: 2025-05-19T17:04:06.073Z\n\ud83d\udccf Modified: 2025-05-19T17:04:06.073Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/enhanced-paypal-shortcodes/vulnerability/wordpress-enhanced-paypal-shortcodes-plugin-0-5a-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-19T17:39:10.000000Z"}, {"uuid": "1aff8ea9-1086-4b9d-b4e3-923526c85531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46263", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16898", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46263\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lloyd Saunders Author Box After Posts allows Stored XSS.This issue affects Author Box After Posts: from n/a through 1.6.\n\ud83d\udccf Published: 2025-05-19T17:05:18.843Z\n\ud83d\udccf Modified: 2025-05-19T17:05:18.843Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/author-box-after-posts/vulnerability/wordpress-author-box-after-posts-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-19T17:39:09.000000Z"}, {"uuid": "b7c33693-6273-4dfd-ae13-18580c4f5bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46262", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16897", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46262\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz Mad Mimi for WordPress allows Stored XSS.This issue affects Mad Mimi for WordPress: from n/a through 1.5.1.\n\ud83d\udccf Published: 2025-05-19T17:06:23.877Z\n\ud83d\udccf Modified: 2025-05-19T17:06:23.877Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/mad-mimi/vulnerability/wordpress-mad-mimi-for-wordpress-plugin-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-19T17:39:08.000000Z"}, {"uuid": "457fd2d2-fb15-49a6-94ab-2e4f6c088354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46801", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16814", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46801\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.\n\ud83d\udccf Published: 2025-05-19T07:14:45.304Z\n\ud83d\udccf Modified: 2025-05-19T07:14:45.304Z\n\ud83d\udd17 References:\n1. https://www.pgpool.net/mediawiki/index.php/Main_Page#News\n2. https://jvn.jp/en/jp/JVN06238225/", "creation_timestamp": "2025-05-19T07:38:16.000000Z"}, {"uuid": "08542682-e948-471c-bc90-159f9ccc9280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4692", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17366", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4692\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: Actors can use a maliciously crafted JavaScript object notation (JSON) web token (JWT) to perform privilege escalation by submitting the malicious JWT to a vulnerable method exposed on the cloud platform. If the exploit is successful, the user can escalate privileges to access any device managed by the \n\nABUP Cloud Update Platform.\n\ud83d\udccf Published: 2025-05-22T23:12:39.168Z\n\ud83d\udccf Modified: 2025-05-22T23:12:39.168Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-01", "creation_timestamp": "2025-05-22T23:43:39.000000Z"}, {"uuid": "f434d0c7-0dec-4738-bc0c-a45144e1993c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4610", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4610\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpmem_user_memberships shortcode in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-17T09:22:53.941Z\n\ud83d\udccf Modified: 2025-05-19T20:20:29.563Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3ff96d74-8f20-49a6-bd02-0bfe3498b599?source=cve\n2. https://wordpress.org/plugins/wp-members/#developers\n3. https://plugins.trac.wordpress.org/browser/wp-members/tags/3.5.2/includes/class-wp-members-products.php#L115\n4. https://plugins.trac.wordpress.org/browser/wp-members/tags/3.5.2/includes/class-wp-members-products.php#L660\n5. https://plugins.trac.wordpress.org/changeset?old_path=%2Fwp-members&old=3240295&new_path=%2Fwp-members&new=3293207&sfp_email=&sfph_mail=", "creation_timestamp": "2025-05-19T20:39:25.000000Z"}, {"uuid": "328c4a51-9a3b-41e4-bf98-f556334ad96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46416", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46416\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account (e.g., nixbld or guixbuild). This affects Nix through 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix through 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.\n\ud83d\udccf Published: 2025-06-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-27T15:49:08.285Z\n\ud83d\udd17 References:\n1. https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017\n2. https://lix.systems/blog/2025-06-24-lix-cves/\n3. https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/\n4. https://labs.snyk.io\n5. https://security.snyk.io/vuln/?search=CVE-2025-46416\n6. https://security-tracker.debian.org/tracker/CVE-2025-46416", "creation_timestamp": "2025-06-27T16:57:35.000000Z"}, {"uuid": "81d831fa-5d5e-4de9-b1c2-052d97ddc43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4611", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17106", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4611\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Slim SEO \u2013 Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slim_seo_breadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-21T09:21:50.279Z\n\ud83d\udccf Modified: 2025-05-21T09:21:50.279Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6318a1cf-716f-450c-a1c2-497de8095daa?source=cve\n2. https://wordpress.org/plugins/slim-seo/#developers\n3. https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.5.3/src/Breadcrumbs.php#L37\n4. https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.5.3/src/Breadcrumbs.php#L85\n5. https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.5.3/src/Breadcrumbs.php#L109\n6. https://github.com/elightup/slim-seo/commit/b475dceff3a6bd94335d5a79eb12cdd92e2c8350\n7. https://plugins.trac.wordpress.org/changeset/3296099/", "creation_timestamp": "2025-05-21T09:52:43.000000Z"}, {"uuid": "4946272d-90ba-4142-b0e6-7d32e9448443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46714", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46714\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to 1.15.12, API_GET_SECURE_PARAM has an arithmetic overflow leading to a small memory allocation and then a extremely large copy into the small allocation. Version 1.15.12 fixes the issue.\n\ud83d\udccf Published: 2025-05-22T12:27:57.002Z\n\ud83d\udccf Modified: 2025-05-22T14:21:10.879Z\n\ud83d\udd17 References:\n1. https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-c5h5-54gp-xh4q", "creation_timestamp": "2025-05-22T14:44:21.000000Z"}, {"uuid": "a64e15a9-3e7a-42a8-b0f6-2b6bf9e3ae1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46725", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46725\n\ud83d\udd25 CVSS Score: 8.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`. As a result, an attacker may be able to make the agent run malicious commands through `QueryPlan.dataframe_calc]`) compromising the host system. Langroid 0.53.15 sanitizes input to the affected function by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.\n\ud83d\udccf Published: 2025-05-20T17:24:31.618Z\n\ud83d\udccf Modified: 2025-05-20T17:24:31.618Z\n\ud83d\udd17 References:\n1. https://github.com/langroid/langroid/security/advisories/GHSA-22c2-9gwg-mj59\n2. https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6", "creation_timestamp": "2025-05-20T17:43:47.000000Z"}, {"uuid": "b8aaf3f8-a1d2-4ded-9b41-d1cc832b6437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46526", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17412", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46526\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in janekniefeldt My Custom Widgets allows Reflected XSS. This issue affects My Custom Widgets: from n/a through 2.0.5.\n\ud83d\udccf Published: 2025-05-23T12:43:38.920Z\n\ud83d\udccf Modified: 2025-05-23T15:34:42.366Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/mycustomwidget/vulnerability/wordpress-my-custom-widgets-plugin-2-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T15:45:03.000000Z"}, {"uuid": "0c99329e-7f55-4e94-b85b-91c0b51bacf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46724", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46724\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.\n\ud83d\udccf Published: 2025-05-20T17:22:13.475Z\n\ud83d\udccf Modified: 2025-05-20T17:23:50.936Z\n\ud83d\udd17 References:\n1. https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj\n2. https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6", "creation_timestamp": "2025-05-20T17:43:48.000000Z"}, {"uuid": "525bc556-a33a-41dc-b883-9f39990bcb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46437", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17401", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46437\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tayoricom Tayori Form allows Reflected XSS. This issue affects Tayori Form: from n/a through 1.2.9.\n\ud83d\udccf Published: 2025-05-23T12:43:48.870Z\n\ud83d\udccf Modified: 2025-05-23T13:42:05.583Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/tayori/vulnerability/wordpress-tayori-form-plugin-1-2-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T14:47:08.000000Z"}, {"uuid": "a466c2be-b49a-462a-903d-1a86c905ab2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46440", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17400", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46440\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark kStats Reloaded allows Reflected XSS. This issue affects kStats Reloaded: from n/a through 0.7.4.\n\ud83d\udccf Published: 2025-05-23T12:43:48.408Z\n\ud83d\udccf Modified: 2025-05-23T13:42:25.826Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/kstats-reloaded/vulnerability/wordpress-kstats-reloaded-plugin-0-7-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T14:47:07.000000Z"}, {"uuid": "56ae75ba-204f-44b6-9af1-93c171130dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46444", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17399", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46444\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scripteo Ads Pro Plugin allows PHP Local File Inclusion. This issue affects Ads Pro Plugin: from n/a through 4.88.\n\ud83d\udccf Published: 2025-05-23T12:43:47.879Z\n\ud83d\udccf Modified: 2025-05-23T13:42:44.533Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ap-plugin-scripteo/vulnerability/wordpress-ads-pro-plugin-4-88-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T14:47:02.000000Z"}, {"uuid": "cb6158d0-287a-4973-840f-469271d4e5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46822", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17159", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46822\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.\n\ud83d\udccf Published: 2025-05-21T17:23:37.087Z\n\ud83d\udccf Modified: 2025-05-21T17:23:37.087Z\n\ud83d\udd17 References:\n1. https://github.com/OsamaTaher/Java-springboot-codebase/security/advisories/GHSA-q6mm-cm37-w637\n2. https://github.com/OsamaTaher/Java-springboot-codebase/commit/c835c6f7799eacada4c0fc77e0816f250af01ad2", "creation_timestamp": "2025-05-21T17:43:13.000000Z"}, {"uuid": "3a2c17b2-10bd-4fe5-b5b1-92cd956a1b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46702", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46702\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce channel member management permissions when adding participants to playbook runs. This allows authenticated users with member-level permissions to bypass system admin restrictions and add or remove users to/from private channels via the playbook run participants feature, even when the 'Manage Members' permission has been explicitly removed. This can lead to unauthorized access to sensitive channel content and allow guest users to gain channel management privileges.\n\ud83d\udccf Published: 2025-06-30T16:51:13.440Z\n\ud83d\udccf Modified: 2025-06-30T16:51:13.440Z\n\ud83d\udd17 References:\n1. https://mattermost.com/security-updates", "creation_timestamp": "2025-06-30T17:07:31.000000Z"}, {"uuid": "dcf0f4a0-a74b-48cf-b6a8-c36689c92697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46446", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17398", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46446\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ivanrojas Libro de Reclamaciones allows Stored XSS. This issue affects Libro de Reclamaciones: from n/a through 1.0.1.\n\ud83d\udccf Published: 2025-05-23T12:43:47.397Z\n\ud83d\udccf Modified: 2025-05-23T13:43:02.121Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/libro-de-reclamaciones/vulnerability/wordpress-libro-de-reclamaciones-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T14:47:01.000000Z"}, {"uuid": "2bda6c21-8197-421b-bee6-f93ee03ee511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46448", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17397", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46448\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reifsnyderb Document Management System allows Reflected XSS. This issue affects Document Management System: from n/a through 1.24.\n\ud83d\udccf Published: 2025-05-23T12:43:46.932Z\n\ud83d\udccf Modified: 2025-05-23T13:43:20.466Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/dms/vulnerability/wordpress-document-management-system-1-24-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T14:47:00.000000Z"}, {"uuid": "6e30a986-09c6-494c-a60c-1e537300a44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46454", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46454\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in svil4ok Meta Keywords & Description allows PHP Local File Inclusion. This issue affects Meta Keywords & Description: from n/a through 0.8.\n\ud83d\udccf Published: 2025-05-23T12:43:46.472Z\n\ud83d\udccf Modified: 2025-05-23T13:43:39.013Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-meta-keywords-meta-description/vulnerability/wordpress-meta-keywords-description-0-8-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T14:46:58.000000Z"}, {"uuid": "eb64d673-dff7-4f85-90ea-3b8488a7ef99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46455", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17395", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46455\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IndigoThemes WP HRM LITE allows SQL Injection. This issue affects WP HRM LITE: from n/a through 1.1.\n\ud83d\udccf Published: 2025-05-23T12:43:46.010Z\n\ud83d\udccf Modified: 2025-05-23T13:43:55.889Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-hrm-lite-human-resource-management-system/vulnerability/wordpress-wp-hrm-lite-1-1-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T14:46:57.000000Z"}, {"uuid": "845bd3ac-c53e-420c-9379-6c97e1bf8855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17455", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46176\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.\n\ud83d\udccf Published: 2025-05-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-23T18:54:16.599Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/namberino/cve/tree/main/CVE-2025-46176", "creation_timestamp": "2025-05-23T19:45:22.000000Z"}, {"uuid": "c2d313fe-568d-49b5-b8e6-cd685b384b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4603", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4603\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is only exploitable by unauthenticated attackers in default configurations where the the default password is left as 1:1, or where the attacker gains access to the credentials.\n\ud83d\udccf Published: 2025-05-24T03:37:32.048Z\n\ud83d\udccf Modified: 2025-05-24T03:37:32.048Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/242ad00b-3602-4988-ab7a-76fba2e9d4cf?source=cve\n2. https://plugins.trac.wordpress.org/browser/store-manager-connector/trunk/smconnector.php#L35-36\n3. https://plugins.trac.wordpress.org/browser/store-manager-connector/trunk/classes/class-emosmconnectorcommon.php#L2167\n4. https://plugins.trac.wordpress.org/browser/store-manager-connector/trunk/classes/class-emosmcwoocommerceoverrider.php#L380\n5. https://github.com/d0n601/CVE-2025-4603/\n6. https://ryankozak.com/posts/cve-2025-4603/", "creation_timestamp": "2025-05-24T04:50:48.000000Z"}, {"uuid": "0254b08e-a294-4301-b18b-db64a43a0619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46804", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46804\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A minor information leak when running Screen with setuid-root privileges allosw unprivileged users to deduce information about a path that would otherwise not be available.\n\n\nAffected are older Screen versions, as well as version 5.0.0.\n\ud83d\udccf Published: 2025-05-26T13:31:17.792Z\n\ud83d\udccf Modified: 2025-05-26T13:31:17.792Z\n\ud83d\udd17 References:\n1. https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46804\n2. https://www.openwall.com/lists/oss-security/2025/05/12/1", "creation_timestamp": "2025-05-26T13:47:17.000000Z"}, {"uuid": "6e754f6f-0fda-4e53-bd9c-27f35b5b1af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46805", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17556", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46805\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Screen version 5.0.0 and older version 4 releases have  a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root.\n\ud83d\udccf Published: 2025-05-26T13:16:40.969Z\n\ud83d\udccf Modified: 2025-05-26T13:23:17.702Z\n\ud83d\udd17 References:\n1. https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46805\n2. https://www.openwall.com/lists/oss-security/2025/05/12/1", "creation_timestamp": "2025-05-26T13:47:19.000000Z"}, {"uuid": "ba022285-2325-4f9c-95a0-d011f75e6517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46803", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17570", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46803\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.\n\ud83d\udccf Published: 2025-05-26T15:06:04.339Z\n\ud83d\udccf Modified: 2025-05-26T15:06:04.339Z\n\ud83d\udd17 References:\n1. https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46803\n2. https://www.openwall.com/lists/oss-security/2025/05/12/1", "creation_timestamp": "2025-05-26T15:47:08.000000Z"}, {"uuid": "5508b613-7105-4c9e-bf4b-0d9ebf9f12d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46802", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17569", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46802\n\ud83d\udd25 CVSS Score: 6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.\n\ud83d\udccf Published: 2025-05-26T15:10:38.460Z\n\ud83d\udccf Modified: 2025-05-26T15:18:22.995Z\n\ud83d\udd17 References:\n1. https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46802\n2. https://www.openwall.com/lists/oss-security/2025/05/12/1", "creation_timestamp": "2025-05-26T15:47:07.000000Z"}, {"uuid": "b409bc77-4ba9-45a0-83de-8cb9ae1ce43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4601\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The \"RH - Real Estate WordPress Theme\" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the inspiry_update_profile() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to set their role to that of an administrator. The vulnerability was partially patched in version 4.4.0, and fully patched in version 4.4.1.\n\ud83d\udccf Published: 2025-06-10T03:41:38.102Z\n\ud83d\udccf Modified: 2025-06-10T03:41:38.102Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a816e5a8-2494-4bcf-869d-5214b21f7791?source=cve\n2. https://themeforest.net/item/real-homes-wordpress-real-estate-theme/5373914", "creation_timestamp": "2025-06-10T04:29:31.000000Z"}, {"uuid": "33c3a37c-e532-4962-971c-0d26b53dd2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46011", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46011\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.\n\ud83d\udccf Published: 2025-06-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T20:56:28.471Z\n\ud83d\udd17 References:\n1. https://github.com/kevinroleke/security/tree/main/CVE-2025-46011\n2. https://github.com/knadh/listmonk/releases/tag/v5.0.0\n3. https://github.com/knadh/listmonk/commit/4b805f885b9f5a20126ec06f8b59dc448c4af33b\n4. https://github.com/knadh/listmonk/issues/2412\n5. https://github.com/knadh/listmonk/releases/tag/v4.1.0", "creation_timestamp": "2025-06-09T21:32:04.000000Z"}, {"uuid": "61278071-17b2-442c-b9cd-ea8da8af332a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46041", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46041\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interface (/admin/pages/add).\n\ud83d\udccf Published: 2025-06-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T19:47:45.597Z\n\ud83d\udd17 References:\n1. http://anchor.com\n2. https://github.com/binneko/CVE-2025-46041", "creation_timestamp": "2025-06-09T20:31:31.000000Z"}, {"uuid": "e1d6e5ce-3c27-4763-b1ab-d9cc5be269d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46910", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18088", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46910\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:00.863Z\n\ud83d\udccf Modified: 2025-06-11T17:22:35.598Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T17:34:13.000000Z"}, {"uuid": "e09d1bf8-017e-4375-bfee-71836174176b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4681", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4681\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affects upKeeper Instant Privilege Access: before 1.4.0.\n\ud83d\udccf Published: 2025-06-10T08:44:14.160Z\n\ud83d\udccf Modified: 2025-06-10T08:44:14.160Z\n\ud83d\udd17 References:\n1. https://support.upkeeper.se/hc/en-us/articles/20159882527772-CVE-2025-4681-Improper-Privilege-Management", "creation_timestamp": "2025-06-10T09:33:08.000000Z"}, {"uuid": "bde2c656-9bb0-421d-9d5d-f048dd232685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4680", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17852", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4680\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects upKeeper Instant Privilege Access: before 1.4.0.\n\ud83d\udccf Published: 2025-06-10T08:41:44.594Z\n\ud83d\udccf Modified: 2025-06-10T08:41:44.594Z\n\ud83d\udd17 References:\n1. https://support.upkeeper.se/hc/en-us/articles/20159822847900-CVE-2025-4680-Improper-Input-Validation", "creation_timestamp": "2025-06-10T09:33:10.000000Z"}, {"uuid": "f4daa385-ea16-4e33-b7c2-955478eb3c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46612", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17883", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46612\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload. To exploit this, the attacker must login to the administrator console (default credentials are weak and easily guessable) and upload a JSP file via the Panel Designer dashboard.\n\ud83d\udccf Published: 2025-06-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-10T14:10:15.120Z\n\ud83d\udd17 References:\n1. https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-036.txt", "creation_timestamp": "2025-06-10T14:30:23.000000Z"}, {"uuid": "d5c4fea4-a196-421b-a414-3a780bbbfe8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17959", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4678\n\ud83d\udd25 CVSS Score: 7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:U/V:D/RE:M/U:Green)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105.\n\ud83d\udccf Published: 2025-06-10T15:54:55.871Z\n\ud83d\udccf Modified: 2025-06-10T18:10:45.319Z\n\ud83d\udd17 References:\n1. https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/", "creation_timestamp": "2025-06-10T18:33:14.000000Z"}, {"uuid": "13f23a21-93ba-46df-8fe3-fe5ec3f7e969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4653", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17957", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4653\n\ud83d\udd25 CVSS Score: 7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:U/V:D/RE:M/U:Green)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105.\n\ud83d\udccf Published: 2025-06-10T15:53:22.364Z\n\ud83d\udccf Modified: 2025-06-10T18:11:02.730Z\n\ud83d\udd17 References:\n1. https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/", "creation_timestamp": "2025-06-10T18:33:09.000000Z"}, {"uuid": "ea3e5634-1c6d-433c-ba78-f137f1bf7a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46917", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46917\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:35.058Z\n\ud83d\udccf Modified: 2025-06-10T22:20:35.058Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:23.000000Z"}, {"uuid": "979b3b9c-985e-4672-afd6-d9d7ff3ae1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46995", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18000", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46995\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:35.818Z\n\ud83d\udccf Modified: 2025-06-10T22:20:35.818Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:22.000000Z"}, {"uuid": "5887fc4c-22f9-4180-a22d-6d82ddb94fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46954", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18004", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46954\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:32.374Z\n\ud83d\udccf Modified: 2025-06-10T22:20:32.374Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:26.000000Z"}, {"uuid": "1c281d28-7075-4da6-972c-3aa4fbe99bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4652", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17993", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4652\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-06-09T06:00:14.489Z\n\ud83d\udccf Modified: 2025-06-10T20:05:25.390Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2a18ab96-ba95-4599-824f-df12e4851e6d/", "creation_timestamp": "2025-06-10T20:31:54.000000Z"}, {"uuid": "769de5d0-fd14-4e1b-bb62-d7862d036a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46923", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18129", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46923\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:41.217Z\n\ud83d\udccf Modified: 2025-06-11T19:20:53.756Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T19:33:14.000000Z"}, {"uuid": "09470e8e-985e-4421-8f1e-f71bcb471fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46890", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46890\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:41.989Z\n\ud83d\udccf Modified: 2025-06-11T19:21:39.778Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T19:33:14.000000Z"}, {"uuid": "e88498f6-ac38-4eed-8160-68665506e47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46901", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18002", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46901\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:34.283Z\n\ud83d\udccf Modified: 2025-06-10T22:20:34.283Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:24.000000Z"}, {"uuid": "87c71eff-45e0-429b-bcb5-f298e343004e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46874", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46874\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.\n\ud83d\udccf Published: 2025-06-10T22:20:23.508Z\n\ud83d\udccf Modified: 2025-06-10T22:20:23.508Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:40.000000Z"}, {"uuid": "60775868-32de-44c2-bb88-28caaeb1fa25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46985", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46985\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:24.253Z\n\ud83d\udccf Modified: 2025-06-10T22:20:24.253Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:39.000000Z"}, {"uuid": "f8220f45-10e8-45a3-8550-e5b509bcf95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46951", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18011", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46951\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:25.046Z\n\ud83d\udccf Modified: 2025-06-10T22:20:25.046Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:38.000000Z"}, {"uuid": "3d0d3401-bf37-4be3-8af1-5e2f8308b950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46922", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18017", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46922\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:20.291Z\n\ud83d\udccf Modified: 2025-06-10T22:20:20.291Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:47.000000Z"}, {"uuid": "e9d362f3-1ae3-422c-b7d3-9714d587cb09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46997", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46997\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:21.063Z\n\ud83d\udccf Modified: 2025-06-10T22:20:21.063Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:46.000000Z"}, {"uuid": "f2eee20d-2dc8-41b5-90f3-f7c5de43ba19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46971", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46971\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:21.887Z\n\ud83d\udccf Modified: 2025-06-10T22:20:21.887Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:45.000000Z"}, {"uuid": "280249cd-ce79-4c88-9e27-82de52018e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46882", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46882\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:18.783Z\n\ud83d\udccf Modified: 2025-06-10T22:20:18.783Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:48.000000Z"}, {"uuid": "bc47dfcf-69d8-41da-acfd-9309e900181f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46988", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46988\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:39.668Z\n\ud83d\udccf Modified: 2025-06-11T19:14:35.267Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T19:33:16.000000Z"}, {"uuid": "02ee78cc-1af5-4d68-b91d-3eed40bf21d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46850", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18113", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46850\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:33.390Z\n\ud83d\udccf Modified: 2025-06-11T18:14:14.223Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:35:02.000000Z"}, {"uuid": "5c3ffb55-351a-4b84-b180-9470621a7d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46939", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18112", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46939\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:32.592Z\n\ud83d\udccf Modified: 2025-06-11T18:14:53.734Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:34:58.000000Z"}, {"uuid": "b51ac404-f6ab-4ebb-a5f6-3fbdcd887326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46871", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18111", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46871\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:31.801Z\n\ud83d\udccf Modified: 2025-06-11T18:16:28.677Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:34:57.000000Z"}, {"uuid": "d6a3dbc8-5990-470e-bba1-b193e511c6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46548", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46548\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: If you enable Basic Authentication in Pekko Management using the Java DSL, the authenticator may not be properly applied.\n\n\nUsers that rely on authentication instead of making sure the Management API ports are only available to trusted users are recommended to upgrade to version 1.1.1, which fixes this issue.\n\n\n\n\nAkka was affected by the same issue and has released the fix in version 1.6.1.\n\ud83d\udccf Published: 2025-06-03T14:45:32.890Z\n\ud83d\udccf Modified: 2025-06-11T17:44:23.190Z\n\ud83d\udd17 References:\n1. https://github.com/apache/pekko-management/pull/418\n2. https://github.com/akka/akka-management/pull/1385\n3. https://lists.apache.org/thread/tnd84hj9w0ggjcft6cp12q67d5jzhp66", "creation_timestamp": "2025-06-11T18:35:19.000000Z"}, {"uuid": "a2ee5899-5e04-47e5-b21f-7a0dd6335042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46999", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18080", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46999\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:57.201Z\n\ud83d\udccf Modified: 2025-06-11T15:16:56.153Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T15:31:57.000000Z"}, {"uuid": "a9c81b93-77ab-4566-b129-fb5ea234ad93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46924", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46924\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:40.459Z\n\ud83d\udccf Modified: 2025-06-11T19:17:02.495Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T19:33:16.000000Z"}, {"uuid": "92693846-d17a-4fc1-9aea-e6e93259c81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46060", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18295", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46060\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FILENAME component\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T12:45:44.868Z\n\ud83d\udd17 References:\n1. http://totolink.com\n2. https://github.com/Luanruy/qax\n3. https://github.com/Luanruy/qax/blob/main/CVE-2025-46060_Info.md", "creation_timestamp": "2025-06-13T13:33:43.000000Z"}, {"uuid": "5ff2b019-7ad0-4635-b750-b47db7c41b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46979", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46979\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:58.945Z\n\ud83d\udccf Modified: 2025-06-11T18:02:37.259Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:35:09.000000Z"}, {"uuid": "a408bbe3-cb09-4f58-ba99-e161d81f6499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46845", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18117", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46845\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:58.018Z\n\ud83d\udccf Modified: 2025-06-11T18:06:45.652Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:35:05.000000Z"}, {"uuid": "f9dc5a65-5693-4d7e-9330-db250a0ef456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46990", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18115", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46990\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:43.586Z\n\ud83d\udccf Modified: 2025-06-11T18:10:42.328Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:35:03.000000Z"}, {"uuid": "70087bb2-57ba-42a4-a181-bae13d1b9765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46895", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18114", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46895\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:42.828Z\n\ud83d\udccf Modified: 2025-06-11T18:13:37.986Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:35:02.000000Z"}, {"uuid": "a1bafbee-264d-41e8-aa9b-44251cb9b8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4673\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.\n\ud83d\udccf Published: 2025-06-11T16:42:53.054Z\n\ud83d\udccf Modified: 2025-06-11T17:59:48.033Z\n\ud83d\udd17 References:\n1. https://go.dev/cl/679257\n2. https://go.dev/issue/73816\n3. https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A\n4. https://pkg.go.dev/vuln/GO-2025-3751", "creation_timestamp": "2025-06-11T18:35:10.000000Z"}, {"uuid": "3a073c26-730a-4c51-942d-55509ba9a71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46855", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18133", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46855\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:27.133Z\n\ud83d\udccf Modified: 2025-06-11T19:11:06.823Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T19:33:21.000000Z"}, {"uuid": "1cc3815a-a1fc-45bf-a2bb-359143fb55e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46840", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46840\n\ud83d\udd25 CVSS Score: 8.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue requires user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.\n\ud83d\udccf Published: 2025-06-10T22:18:33.290Z\n\ud83d\udccf Modified: 2025-06-12T03:55:09.562Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-12T04:34:39.000000Z"}, {"uuid": "ff566e3e-3f8b-4ca0-8d5e-febe666a94d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46889", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46889\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized elevated access. Exploitation of this issue does not require user interaction.\n\ud83d\udccf Published: 2025-06-10T22:18:44.435Z\n\ud83d\udccf Modified: 2025-06-12T03:55:10.979Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-12T04:34:38.000000Z"}, {"uuid": "acbf258c-8d82-4dfd-ab9f-f8cb057f87ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46035", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18175", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46035\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an unauthenticated HTTP GET request to the /goform/openSchedWifi endpoint\n\ud83d\udccf Published: 2025-06-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-12T15:19:15.090Z\n\ud83d\udd17 References:\n1. http://tenda.com\n2. http://ac6.com\n3. https://github.com/XiDP0/MyCVE/blob/main/CVE/Tenda%20AC6%20V15.03.05.16/setSchedWifi/setSchedWifi.md", "creation_timestamp": "2025-06-12T15:33:50.000000Z"}, {"uuid": "1052b0dd-c424-49de-a4c4-8753e32e425b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4613", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18155", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4613\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L)\n\ud83d\udd39 Description: Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template\n\ud83d\udccf Published: 2025-06-12T09:06:05.252Z\n\ud83d\udccf Modified: 2025-06-12T09:06:05.252Z\n\ud83d\udd17 References:\n1. https://balintmagyar.com/articles/google-web-designer-path-traversal-client-side-rce-cve-2025-4613", "creation_timestamp": "2025-06-12T09:34:02.000000Z"}, {"uuid": "312cc0f3-5fe0-492a-8f61-10724aaad6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46783", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46783\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product.\n\ud83d\udccf Published: 2025-06-13T08:18:58.850Z\n\ud83d\udccf Modified: 2025-06-13T08:18:58.850Z\n\ud83d\udd17 References:\n1. https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000005\n2. https://jvn.jp/en/jp/JVN27937557/", "creation_timestamp": "2025-06-13T08:34:27.000000Z"}, {"uuid": "8f214123-b3ee-413f-83d7-09c18e92b9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46096", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46096\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T12:48:15.380Z\n\ud83d\udd17 References:\n1. https://github.com/opensolon/solon/issues/357\n2. https://gist.github.com/yaoyao-cool/1b7d80930fea88b6fd4839646cedc437", "creation_timestamp": "2025-06-13T13:33:41.000000Z"}, {"uuid": "c1d35606-4df9-4fc4-9433-2cd12dc38663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4667", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4667\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Appointment Booking Calendar \u2014 Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ssa_admin_upcoming_appointments, ssa_admin_upcoming_appointments, and ssa_past_appointments shortcodes in all versions up to, and including, 1.6.8.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-14T09:23:33.636Z\n\ud83d\udccf Modified: 2025-06-14T09:23:33.636Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/414173b9-d23e-4e44-bf8c-77a074bb09e9?source=cve\n2. https://wordpress.org/plugins/simply-schedule-appointments/#developers\n3. https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.8.24/includes/class-shortcodes.php#L718\n4. https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.8.24/includes/class-shortcodes.php#L754\n5. https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.8.24/includes/class-shortcodes.php#L784\n6. https://plugins.trac.wordpress.org/changeset/3306064/simply-schedule-appointments/tags/1.6.8.32/includes/class-shortcodes.php", "creation_timestamp": "2025-06-14T09:35:12.000000Z"}, {"uuid": "0096d671-7bfd-4309-b09e-b784b78e6173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46710", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18438", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46710\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Possible kernel exceptions caused by reading and writing kernel heap data after free.\n\ud83d\udccf Published: 2025-06-16T11:13:19.232Z\n\ud83d\udccf Modified: 2025-06-16T11:13:19.232Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-06-16T11:39:54.000000Z"}, {"uuid": "89494ad9-37ce-4e84-b478-382f9cae748e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46109", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18765", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46109\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET request\n\ud83d\udccf Published: 2025-06-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T15:24:09.372Z\n\ud83d\udd17 References:\n1. http://cocr.cc/2025/04/17/pbootcms/\n2. https://github.com/pbootcmspro/PbootCMS/issues/22", "creation_timestamp": "2025-06-18T15:42:56.000000Z"}, {"uuid": "3276fa16-00e3-46ab-a36c-902205836589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4661", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18830", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4661\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A path transversal vulnerability in \nBrocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to \ngain access to files outside the intended directory potentially leading \nto the disclosure of sensitive information.\n\n\nNote: Admin level privilege is required on the switch in order to exploit\n\ud83d\udccf Published: 2025-06-19T02:27:04.559Z\n\ud83d\udccf Modified: 2025-06-19T02:27:04.559Z\n\ud83d\udd17 References:\n1. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35814", "creation_timestamp": "2025-06-19T02:40:14.000000Z"}, {"uuid": "cc3f1ccc-faed-4f40-9afd-cc299a64ecf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46179", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18957", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46179\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries.\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T14:34:26.427Z\n\ud83d\udd17 References:\n1. https://portswigger.net/web-security/sql-injection\n2. https://pastebin.com/DGraeWm8", "creation_timestamp": "2025-06-20T14:43:33.000000Z"}, {"uuid": "897f4e94-c1ec-4960-a4f7-476301ccaac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46158", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19008", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46158\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitimer` syscall\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T17:29:14.773Z\n\ud83d\udd17 References:\n1. https://gitlab.redox-os.org/redox-os/kernel/-/issues/164\n2. https://gitlab.redox-os.org/redox-os/kernel/-/merge_requests/386\n3. https://github.com/Marsman1996/pocs/tree/master/redox/CVE-2025-46158", "creation_timestamp": "2025-06-20T17:46:23.000000Z"}, {"uuid": "88c01c1d-0327-4dc5-8ed3-515d7e833422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46014", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19889", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46014\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation.\n\ud83d\udccf Published: 2025-06-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-30T01:42:08.920Z\n\ud83d\udd17 References:\n1. https://github.com/Souhardya/Exploit-PoCs/tree/main/HonorPCManager-PrivEsc", "creation_timestamp": "2025-06-30T01:54:40.000000Z"}, {"uuid": "7f182bfa-c945-4ffb-9559-2a72a394dab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46415", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19788", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46415\n\ud83d\udd25 CVSS Score: 3.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.\n\ud83d\udccf Published: 2025-06-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-27T19:57:56.693Z\n\ud83d\udd17 References:\n1. https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017\n2. https://lix.systems/blog/2025-06-24-lix-cves/\n3. https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/\n4. https://labs.snyk.io\n5. https://security.snyk.io/vuln/?search=CVE-2025-46415\n6. https://security-tracker.debian.org/tracker/CVE-2025-46415", "creation_timestamp": "2025-06-27T20:52:34.000000Z"}, {"uuid": "8cd6d6ce-373f-40cf-9045-2d46fd3b0bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46101", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19377", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46101\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T16:02:28.690Z\n\ud83d\udd17 References:\n1. https://packetstorm.news/files/id/200942/", "creation_timestamp": "2025-06-24T16:47:34.000000Z"}, {"uuid": "aa478604-de18-4833-9c70-73b2852f54e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4656", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19484", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4656\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11, 1.17.17, and 1.16.22.\n\ud83d\udccf Published: 2025-06-25T16:15:11.861Z\n\ud83d\udccf Modified: 2025-06-25T16:17:34.648Z\n\ud83d\udd17 References:\n1. https://discuss.hashicorp.com/t/hcsec-2025-11-vault-vulnerable-to-recovery-key-cancellation-denial-of-service/75570", "creation_timestamp": "2025-06-25T16:47:42.000000Z"}, {"uuid": "2f835d53-0b3d-4b64-8254-39343c952310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46259", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20086", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46259\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Pro: from n/a before 6.3.7.\n\ud83d\udccf Published: 2025-07-01T19:10:23.281Z\n\ud83d\udccf Modified: 2025-07-01T19:35:27.142Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/theplus_elementor_addon/vulnerability/wordpress-the-plus-addons-for-elementor-pro-plugin-6-1-0-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-07-01T20:09:47.000000Z"}, {"uuid": "18b1063d-24ae-414d-899c-deb39201d528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4654", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/20098", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4654\n\ud83d\udd25 CVSS Score: 3.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of data due to a improper authorization checks on the make_signature function in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to create/edit/delete Soumettre posts. This vulnerability affects only installations where the soumettre account is not connected (i.e. API key is not installed)\n\ud83d\udccf Published: 2025-07-02T03:47:24.306Z\n\ud83d\udccf Modified: 2025-07-02T03:47:24.306Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4f29d476-0730-437c-8065-309523278efa?source=cve\n2. https://plugins.trac.wordpress.org/browser/soumettre-fr/tags/2.1.5/public/rest/class-soumettre-rest-route.php#L211", "creation_timestamp": "2025-07-02T04:12:22.000000Z"}, {"uuid": "391e34c8-6928-4ac9-b6ab-68a980069e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46419", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13168", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46419\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.\n\ud83d\udccf Published: 2025-04-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T00:40:54.586Z\n\ud83d\udd17 References:\n1. https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_25-02_malformed_esp_packet_could_cause_denial_vulnerability_in_weos.pdf?rev=9af5c93194f343a0b4fad2d24d032df2&hash=87F4AD7F74C2BE69CA1B4C24F29B82EA", "creation_timestamp": "2025-04-24T01:04:57.000000Z"}, {"uuid": "4cfc996c-d304-4424-8ccd-8a14ae9cf36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46565", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/183", "content": "", "creation_timestamp": "2025-11-21T18:06:21.000000Z"}, {"uuid": "06cfe12f-a90d-4ec7-9b3b-025c3d0c6600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/54477", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2025-46817 \u2013 Redis Lua unpack Integer Overflow (Potential RCE)\nURL\uff1ahttps://github.com/dwisiswant0/CVE-2025-46817\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-10-07T05:01:47.000000Z"}, {"uuid": "5804e5f1-f75d-49d8-a0e9-34add721784c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/34783", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTomcat CVE-2025-46701 PoC\nURL\uff1ahttps://github.com/gregk4sec/CVE-2025-46701\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-30T07:49:00.000000Z"}, {"uuid": "076f6d14-6203-408e-9119-fd688f8771e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46801", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/37614", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-46801 \u2013 Pgpool-II Authentication Bypass PoC\nURL\uff1ahttps://github.com/hendrewna/CVE-2025-46801\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-21T14:10:19.000000Z"}, {"uuid": "2c06a643-156d-410f-85b5-955a618a0971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/2274", "content": "Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit \u2013 thehackernews.com\n\nThu, 15 May 2025 01:57:00", "creation_timestamp": "2025-05-14T20:03:33.000000Z"}, {"uuid": "6b9abb38-b325-47f3-a0d6-fc35857d7a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/37194", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-4664\nURL\uff1ahttps://github.com/doomygloom/CVE-2025-4664\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-18T02:10:23.000000Z"}, {"uuid": "f4c79dfe-5e41-44ee-829a-6c835374a3b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46173", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38163", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1apoc for the CVE-2025-46173\nURL\uff1ahttps://github.com/pruthuraut/CVE-2025-46173\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-26T06:43:13.000000Z"}, {"uuid": "ece7edc2-1ecd-48f8-8413-f73700130d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46701", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/39326", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTomcat CVE-2025-46701 PoC\nURL\uff1ahttps://github.com/Moulish2004/CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-05T05:35:11.000000Z"}, {"uuid": "272d435d-69cd-4e0e-aa52-4feaf2f0ba41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46801", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/37844", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-46801 \u2013 Pgpool-II Authentication Bypass PoC\nURL\uff1ahttps://github.com/korden-c/CVE-2025-46801\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-23T12:35:40.000000Z"}, {"uuid": "a0b3b0b4-c85b-48e3-8573-07d9bb449e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4611", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/37818", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-4611\nURL\uff1ahttps://github.com/x6vrn/CVE-2025-4611-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-23T07:20:57.000000Z"}, {"uuid": "34b0033a-e197-489a-9855-9b193ad4d0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38100", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-4664 \u2013 Remote Code Execution via Chrome Loader Referrer Policy Bypass\nURL\uff1ahttps://github.com/korden-c/CVE-2025-4664\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-25T17:05:01.000000Z"}, {"uuid": "b8859e09-7ecc-4cc4-96a5-064341977629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46203", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38553", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC of CVE-2025-46203\nURL\uff1ahttps://github.com/spbavarva/CVE-2025-46203\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-29T15:37:05.000000Z"}, {"uuid": "b339c719-2bed-47ba-ada0-b055df4df869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/37196", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-4664\nURL\uff1ahttps://github.com/HossamEAhmed/wp-ulike-cve-2025-32259-poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-18T02:18:51.000000Z"}, {"uuid": "5fe30ab0-691f-4cbf-bf4d-0ae58df60536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/38432", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAdvanced AI-Powered Exploitation Framework  |  CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397  |  \nURL\uff1ahttps://github.com/Leviticus-Triage/ChromSploit-Framework\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-28T14:37:55.000000Z"}, {"uuid": "fc85c530-427e-4d3d-9d6d-2ed139d11a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46099", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44498", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-46099\nURL\uff1ahttps://github.com/0xC4J/CVE-Lists\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-18T19:08:34.000000Z"}, {"uuid": "37cd8f9c-6099-4e74-9be0-2b0459a4cef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42530", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC and Setup for CVE-2025-4664\nURL\uff1ahttps://github.com/amalmurali47/cve-2025-4664\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-30T18:25:20.000000Z"}, {"uuid": "cf652225-f063-4fa8-abd9-07815c8549a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46018", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/46177", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDisclosure of CVE-2025-46018: A Bluetooth-based payment bypass vulnerability in CSC Pay Mobile App v2.19.4\\\"\nURL\uff1ahttps://github.com/niranjangaire1995/CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-01T12:26:31.000000Z"}, {"uuid": "8376a51b-9bb4-4030-823d-a98cfa088aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/CyberUnderworlds/7", "content": "\ud83c\udf11 @CyberUnderworlds | Shadows of the Digital Realm \ud83c\udf11\nMay 27, 2025 \u2013 In the silent pulse of cyberspace, threats weave their intricate dance. Here\u2019s the latest from the frontlines of the digital underworld:\n\n\ud83d\udd0d China\u2019s Silent Strike: The UNC5221 group exploits Ivanti Endpoint Manager flaws (CVE-2025-4427, CVE-2025-4428), infiltrating critical sectors across Europe, North America, and Asia-Pacific. Espionage executed with surgical precision.\n\n\ud83c\uddf7\ud83c\uddfa APT28\u2019s Shadow Play: Russian hackers target NATO-aligned logistics and tech firms aiding Ukraine, wielding malware, phishing, and seven CVEs to spy on vital aid routes.\n\n\ud83d\udc89 Lumma\u2019s Global Plague: 394,000 Windows devices fall to Lumma malware. From Booking.com phishing scams to crypto wallet heists, this digital scourge spares no one.\n\n\ud83c\uddec\ud83c\udde7 UK Retail Under Siege: Scattered Spider is suspected in attacks on Marks & Spencer, Co-op, and Harrods. Customer data stolen, though payment details and passwords remain secure\u2014for now.\n\n\ud83d\udcb0 Coinbase\u2019s Costly Breach: Hackers bribed rogue support agents, siphoning customer data and causing $45M in losses with $400M in damages. Coinbase rejected a $20M ransom, offering a bounty instead.\n\n\ud83e\udd16 AI Ascends as Top Threat: Arctic Wolf\u2019s 2025 Trends Report crowns AI, including LLMs, as the new king of cybersecurity fears, dethroning ransomware.\n\n\u26a0\ufe0f Critical Exploits: Firefox (CVE-2025-4918, CVE-2025-4919) and Chrome (CVE-2025-4664) vulnerabilities are actively exploited for data theft and remote code execution. Patch now, or pay the price later.\n\n@CyberUnderworlds \u2013 #CyberUnderworlds", "creation_timestamp": "2025-05-27T05:05:05.000000Z"}, {"uuid": "f531dc6a-55ef-4583-ad55-6b2430e825c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46822", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/44", "content": "", "creation_timestamp": "2025-06-14T20:58:24.000000Z"}, {"uuid": "bef03d28-83f1-4747-a9af-c3fa665e6db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/notlukatsky/6135", "content": "\u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u043b 250 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 Chrome\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Micky \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0431\u0430\u0433 \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b 250 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 bug bounty.\n\nhttps://xakep.ru/2025/08/12/cve-2025-4609/", "creation_timestamp": "2025-08-12T15:43:52.000000Z"}, {"uuid": "20671da2-82ff-42ca-8766-26ccda3b2e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46728", "type": "seen", "source": "https://t.me/NinjaSec/298", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "creation_timestamp": "2025-05-19T12:58:14.000000Z"}, {"uuid": "9f1870bd-3e75-4f01-9d0b-c69c30b4f78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "Telegram/J-MU9h__yUr48mGKh3TVGdgnh_XJPBeWUPz7BxIj2w4uV5ef", "content": "", "creation_timestamp": "2025-09-21T01:51:26.000000Z"}, {"uuid": "b8e43c69-2e2b-4bf1-8d78-f60c46f75ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46728", "type": "seen", "source": "https://t.me/NinjaSec/299", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "creation_timestamp": "2025-05-07T15:48:27.000000Z"}, {"uuid": "a2fa793b-da6b-40b6-bc7f-b6a9e325a262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/2516", "content": "Chrome 0-Day CVE-2025-4664 Exposes Windows, Linux Browser Activity \u2013 hackread.com\n\nFri, 23 May 2025 19:07:09", "creation_timestamp": "2025-05-23T12:03:23.000000Z"}, {"uuid": "df4ce266-e229-4eb9-aebf-3037b787d069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/2278", "content": "Google Chrome Zero-Day Vulnerability (CVE-2025-4664) Actively Exploited in The Wild \u2013 gbhackers.com\n\nThu, 15 May 2025 14:25:12", "creation_timestamp": "2025-05-15T08:03:14.000000Z"}, {"uuid": "7ad9e52e-334b-484b-9cd7-22b4ec224c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/true_secator/7435", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 0-day, \u0448\u0435\u0441\u0442\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 CVE-2025-2783, CVE-2025-4664, CVE-2025-5419, CVE-2025-6554 \u0438 CVE-2025-6558.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-1058, \u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043b\u044f \u043d\u0435\u0435 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 - \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n0-day \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u044d \u0442\u0438\u043f\u043e\u0432\u00a0\u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly, \u0435\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG) \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0439 16 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 -  \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, RCE \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 V8 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0447\u0442\u0435\u043d\u0438\u044f/\u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Google TAG, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0440\u0430\u0445\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 APT.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Dawn (CVE-2025-10500) \u0438 WebRTC (CVE-2025-10501), \u0437\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u043d\u0430\u0433\u0440\u0430\u0434\u044b \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 15 000 \u0438 10 000 \u0434\u043e\u043b\u043b. \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 ANGLE (CVE-2025-10502), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e Big Sleep AI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Google, \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u0437\u043d\u0430\u044e\u0442 \u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0434\u0435\u043d\u044c \u043f\u043e\u0437\u0436\u0435, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 140.0.7339.185/.186 \u0434\u043b\u044f Windows/Mac \u0438 140.0.7339.185 \u0434\u043b\u044f Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u044f\u0442 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0445 \u043d\u0435\u0434\u0435\u043b\u044c.", "creation_timestamp": "2025-09-18T11:08:39.000000Z"}, {"uuid": "93205096-6250-43d2-aae3-38abbb292cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "Telegram/x1eex3kndcEqy6z661kya4yDXTj4TvSSihGKNCSEdQmepQ", "content": "", "creation_timestamp": "2025-05-14T20:01:26.000000Z"}, {"uuid": "55fc2376-96c4-4c90-9654-35424a37cf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_News/3557", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: IPW Systems Metazo Vulnerability (CVE-2025-46661) Leads to Remote Code Execution via Template Injection\nLink: https://darkwebinformer.com/ipw-systems-metazo-vulnerability-cve-2025-46661-leads-to-remote-code-execution-via-template-injection/", "creation_timestamp": "2025-04-28T16:27:22.000000Z"}, {"uuid": "ed0625f3-1547-4f38-94f1-b7a53cc4f859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/17953", "content": "\u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u043b 250 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 Chrome\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Micky \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0431\u0430\u0433 \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b 250 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 bug bounty.\n\nhttps://xakep.ru/2025/08/12/cve-2025-4609/", "creation_timestamp": "2025-08-12T15:34:51.000000Z"}, {"uuid": "fb80086b-1d6b-4010-b1cf-7b63ffb5a5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46018", "type": "published-proof-of-concept", "source": "Telegram/c7cbPtmt-wvp58L-ZWyOmaJSC5Jr8mLGQ4OOoqeiUsIBfOk", "content": "", "creation_timestamp": "2025-08-02T09:00:04.000000Z"}, {"uuid": "47a535fa-0adf-4302-a8fc-3c13cc9e4fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4606", "type": "published-proof-of-concept", "source": "Telegram/q5mn87rSG6gtI0smEdxx6J-G64nS0ki-dVcfLGdhRjHxuoE", "content": "", "creation_timestamp": "2025-08-02T23:00:09.000000Z"}, {"uuid": "4f5e57c4-684e-418b-a0d8-20a91882b48b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://t.me/DarkWebInformer_News/4508", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit\nLink: https://thehackernews.com/2025/05/samsung-patches-cve-2025-4632-used-to.html", "creation_timestamp": "2025-05-14T18:03:16.000000Z"}, {"uuid": "60c36a61-a87b-4305-ba8b-d7600570b4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/DarkWebInformer_News/4802", "content": "\ud83d\udea8 News Alert!\n\nSource: Hackread \u2013 Latest Cybersecurity, Hacking News, Tech, AI & Crypto\nTitle: Chrome 0-Day CVE-2025-4664 Exposes Windows, Linux Browser Activity\nLink: https://hackread.com/chrome-0-day-cve-2025-4664-windows-linux-browser-activity/", "creation_timestamp": "2025-05-23T11:12:31.000000Z"}, {"uuid": "40f9bdf1-bf60-4338-864b-8a3ae0bb567b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46568", "type": "published-proof-of-concept", "source": "https://t.me/wr3dmast3rvs/57", "content": "\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0432 \u043b\u0430\u0439\u0432-\u0440\u0435\u0436\u0438\u043c\u0435 \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u043b\u0438\u0441\u044c \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u043a\u043e\u0434\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 SSRF \u0432 Stirling-PDF (CVE-2025-46568): \u0447\u0442\u0435\u043d\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 WeasyPrint. \u041d\u0435 \u0431\u044b\u043b\u043e \u043e\u0441\u043e\u0431\u043e \u0432\u0430\u0436\u043d\u043e, \u043a\u0430\u043a\u0430\u044f CVE. \u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u2014 \u043f\u043e\u0442\u0440\u0435\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430 \ud83c\udfc3\u200d\u2642\ufe0f\n\nStirling-PDF \u2014 \u044d\u0442\u043e \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 PDF (\u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0430\u0446\u0438\u044f, \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435). \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 0.45.0 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 HTML \u0432 WeasyPrint \u26a0\ufe0f\n\n\u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n1. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u0435\u0442 HTML-\u043a\u043e\u043d\u0442\u0435\u043d\u0442, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043f\u043e URL;\n2. WeasyPrint \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0442\u0435\u0433 , \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b (file://) \u0432 PDF \u043a\u0430\u043a \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u2014 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438 HTML \u043f\u0435\u0440\u0435\u0434 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u043e\u043c:\n// 1. \u041f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 URL \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0445\u0435\u043c\u0443 http/https\nif (!URL.matches(\"^https?://.*\") || !GeneralUtils.isValidURL(URL)) {\n    throw new IllegalArgumentException(\"Invalid URL format provided.\");\n}\n\n// 2. \u041f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 URL \u0432 WeasyPrint \u0431\u0435\u0437 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 HTML\nList command = new ArrayList<>();\ncommand.add(runtimePathConfig.getWeasyPrintPath());\ncommand.add(URL);  // HTML \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \ncommand.add(\"--pdf-forms\");\ncommand.add(tempOutputFile.toString());\n\n// 3. WeasyPrint \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u0442 PDF \u0441 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438\nProcessExecutor.runCommandWithOutputHandling(command);\n\nPoC:\n\n\n\n    \n\n\n\n\n\u0415\u0441\u043b\u0438 \u0412\u0430\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0435\u043d \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f, \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0439\u0442\u0435\u0441\u044c \u043a Discord \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0438! \ud83d\udd0d", "creation_timestamp": "2025-06-21T19:52:27.000000Z"}, {"uuid": "17eae5b7-623e-4372-a94f-402da690b94b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/itsec_news/5885", "content": "\ud83e\udd12 \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome \u2014 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome (\u0432\u0435\u0440\u0441\u0438\u044f 136.0.7103.113/114) \u2014 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f: \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e?\n\u25fc\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-4664 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader: \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u25fc\ufe0f\u041e \u0431\u0430\u0433\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0412\u0441\u0435\u0432\u043e\u043b\u043e\u0434 \u041a\u043e\u043a\u043e\u0440\u0438\u043d 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430.\n\u25fc\ufe0f\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0443\u0436\u0435 \u0433\u0443\u043b\u044f\u0435\u0442 \u043f\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u0427\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442?\n\u0425\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c \u0442\u0435\u0431\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e:\n\u25fc\ufe0f\u041f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 (\u0434\u0430, \u0434\u0430\u0436\u0435 \u043a \u0442\u043e\u043a\u0435\u043d\u0430\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438).\n\u25fc\ufe0f\u041e\u0431\u043e\u0439\u0434\u0451\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f Chrome.\n\u25fc\ufe0f\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u2014 \u0434\u0430\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442 \u043a\u043e\u0434 \u0432\u043d\u0435 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0412\u0441\u0451 \u043f\u043b\u043e\u0445\u043e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Link \u0441 \u0445\u0438\u0442\u0440\u043e\u0439 referrer-policy. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u0434\u0430\u0451\u0442 \u0432\u0441\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0415\u0441\u043b\u0438 \u0432 URL \u0441\u0438\u0434\u0438\u0442 access_token \u0438\u043b\u0438 auth_code \u2014 \u043e\u043d \u0443\u0445\u043e\u0434\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0434\u044b\u0440\u0430 \u2014 CVE-2025-4609 (Mojo)\n\u042d\u0442\u043e \u0443\u0436\u0435 \u0431\u0430\u0433 \u0432 IPC (\u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043b\u0435\u0437\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u043d\u043e\u2026 \u0437\u0432\u0443\u0447\u0438\u0442 \u0441\u0442\u0440\u0451\u043c\u043d\u043e.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n\u25fc\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Chrome \u0432\u0440\u0443\u0447\u043d\u0443\u044e:\n\u041c\u0435\u043d\u044e \u2192 \u0421\u043f\u0440\u0430\u0432\u043a\u0430 \u2192 \u041e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome \u2192 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c.\n\u25fc\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 Brave, Edge, Opera, Vivaldi? \u2014 \u043e\u043d\u0438 \u0442\u043e\u0436\u0435 \u043d\u0430 Chromium. \u0416\u0434\u0451\u043c \u043f\u0430\u0442\u0447\u0435\u0439.\n\u25fc\ufe0f\u0420\u0430\u0441\u0441\u043a\u0430\u0436\u0438\u0442\u0435 \u0434\u0440\u0443\u0437\u044c\u044f\u043c. \u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0438\u0434\u0443\u0442.\n\n\u041c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 Chrome (CVE-2025-2783) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0421\u041c\u0418, \u0432\u0443\u0437\u044b \u0438 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0431\u044b\u0441\u0442\u0440\u043e. \u041d\u0435 \u043d\u0430\u0434\u043e \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0437\u0434\u043d\u043e.\n\n\u0411\u0430\u0433 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c. \u041f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u044c\u0442\u0435 \u0436\u0438\u0442\u044c \u043d\u0430 \u0430\u0432\u0442\u043e\u043f\u0438\u043b\u043e\u0442\u0435.\n\nITsec NEWS", "creation_timestamp": "2025-05-15T10:48:39.000000Z"}, {"uuid": "6e6303ed-6280-4c75-ae24-89b634e0a71a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://t.me/CyberBulletin/10754", "content": "\u26a1\ufe0fCVE-2025-46762: Apache Parquet Java Flaw Allows Potential RCE via Avro Schema.\n\n#CyberBulletin", "creation_timestamp": "2025-05-05T04:59:22.000000Z"}, {"uuid": "3f31e6b1-8c23-4e90-bd00-549ee9c21a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/palcyberseccom/146", "content": "\ud83d\udea8 \u062a\u062d\u0630\u064a\u0631 \u0639\u0627\u062c\u0644 \u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a \u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645!\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 (CVE-2025-4664) \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d \u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a\u0643 \u0639\u0628\u0631 \u0635\u0641\u062d\u0627\u062a \u0648\u064a\u0628 \u0645\u064f\u0639\u062f\u0629 \u062e\u0635\u064a\u0635\u064b\u0627.\n\n\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629:\n\u0627\u0644\u0648\u0635\u0641: \u0636\u0639\u0641 \u0641\u064a \u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0628\u0645\u0643\u0648\u0646 \"\u0644\u0648\u062f\u0631\" \u0641\u064a \u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645 (\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0642\u0628\u0644 136.0.7103.113) \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0633\u0631\u064a\u0628 \u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0628\u0631 \u0627\u0644\u0645\u0648\u0627\u0642\u0639.\n\u0645\u0633\u062a\u0648\u0649 \u0627\u0644\u062e\u0637\u0648\u0631\u0629: \u0639\u0627\u0644\u064d (\u062d\u0633\u0628 \u062a\u0635\u0646\u064a\u0641 \u0643\u0631\u0648\u0645\u064a\u0648\u0645) / \u0645\u062a\u0648\u0633\u0637 (\u062d\u0633\u0628 \u062a\u0635\u0646\u064a\u0641 CVSS 4.3).\n\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0647\u062c\u0648\u0645: \u0642\u062f \u062a\u0646\u062a\u062c \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0646 \u0632\u064a\u0627\u0631\u0629 \u0635\u0641\u062d\u0629 \u0648\u064a\u0628 \u0636\u0627\u0631\u0629 \u062a\u064f\u0639\u0631\u0636 \u0628\u064a\u0627\u0646\u0627\u062a\u0643 \u0627\u0644\u062e\u0627\u0635\u0629 (\u0645\u062b\u0644 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0634\u062e\u0635\u064a\u0629 \u0623\u0648 \u062c\u0644\u0633\u0627\u062a \u0627\u0644\u062a\u0633\u062c\u064a\u0644) \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646.\n\n\u0627\u0644\u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629:\n- \u062a\u0633\u0631\u0651\u064f\u0628 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0633\u0627\u0633\u0629 \u0645\u0646 \u062d\u0633\u0627\u0628\u0627\u062a\u0643 \u0623\u0648 \u0623\u0646\u0634\u0637\u062a\u0643 \u0639\u0628\u0631 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a.\n- \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u062e\u0627\u0635\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n\u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0645\u0637\u0644\u0648\u0628\u0629 \u0641\u0648\u0631\u064b\u0627:\n- \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0645\u062a\u0635\u0641\u062d: \u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u062d\u062f\u064a\u062b \u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645 \u0625\u0644\u0649 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 136.0.7103.113 \u0623\u0648 \u0623\u062d\u062f\u062b \u0639\u0628\u0631 \u0627\u0644\u0631\u0627\u0628\u0637:\n    https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html\n- \u0627\u0644\u062d\u0630\u0631 \u0645\u0646 \u0627\u0644\u0631\u0648\u0627\u0628\u0637 \u063a\u064a\u0631 \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629: \u062a\u062c\u0646\u0628 \u0627\u0644\u0646\u0642\u0631 \u0639\u0644\u0649 \u0631\u0648\u0627\u0628\u0637 \u0645\u062c\u0647\u0648\u0644\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0623\u0648 \u0641\u062a\u062d \u0635\u0641\u062d\u0627\u062a \u0648\u064a\u0628 \u0645\u0634\u0628\u0648\u0647\u0629.\n- \u0627\u062a\u0628\u0627\u0639 \u062a\u0648\u062c\u064a\u0647\u0627\u062a CISA: \u0623\u062f\u0631\u062c\u062a \u0627\u0644\u062b\u063a\u0631\u0629 \u0641\u064a \u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u064f\u0633\u062a\u063a\u0644\u0629\u060c \u0648\u064a\u062c\u0628 \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0642\u0628\u0644 5 \u064a\u0648\u0646\u064a\u0648 2025.\n\n\u0644\u0645\u0627\u0630\u0627 \u0647\u0630\u0627 \u0645\u0647\u0645\u061f\n- \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u064f\u062f\u0631\u062c\u0629 \u0641\u064a \u0642\u0627\u0626\u0645\u0629 CISA (\u0648\u0643\u0627\u0644\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629) \u0643\u062e\u0637\u0631 \u0642\u0627\u0626\u0645 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647 \u0641\u0639\u0644\u064a\u0651\u064b\u0627.\n- \u0625\u0647\u0645\u0627\u0644 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u064a\u0639\u0631\u0636 \u0623\u062c\u0647\u0632\u062a\u0643 \u0648\u0628\u064a\u0627\u0646\u0627\u062a\u0643 \u0644\u0644\u0627\u062e\u062a\u0631\u0627\u0642\u060c \u062e\u0627\u0635\u0629 \u0645\u0639 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u0629.\n\n#\u0627\u0644\u0623\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a #\u0641\u0644\u0633\u0637\u064a\u0646 #\u062d\u0645\u0627\u064a\u0629_\u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a #\u062c\u0648\u062c\u0644_\u0643\u0631\u0648\u0645 #\u062a\u062d\u062f\u064a\u062b_\u0623\u0645\u0646\u064a", "creation_timestamp": "2025-05-24T18:27:18.000000Z"}, {"uuid": "0badf85d-1293-42a3-b561-c66edcd1b068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://t.me/CyberBulletin/10753", "content": "\u26a1\ufe0fCritical SQL Injection Vulnerability Found in ADOdb PHP Library \u2013 CVE-2025-46337 (CVSS 10.0).\n\n#CyberBulletin", "creation_timestamp": "2025-05-05T04:58:49.000000Z"}, {"uuid": "6248afdb-19fd-426b-a8a3-06343402f51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "exploited", "source": "https://t.me/itsec_news/5885", "content": "\ud83e\udd12 \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome \u2014 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome (\u0432\u0435\u0440\u0441\u0438\u044f 136.0.7103.113/114) \u2014 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f: \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e?\n\u25fc\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-4664 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader: \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u25fc\ufe0f\u041e \u0431\u0430\u0433\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0412\u0441\u0435\u0432\u043e\u043b\u043e\u0434 \u041a\u043e\u043a\u043e\u0440\u0438\u043d 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430.\n\u25fc\ufe0f\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0443\u0436\u0435 \u0433\u0443\u043b\u044f\u0435\u0442 \u043f\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u0427\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442?\n\u0425\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c \u0442\u0435\u0431\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e:\n\u25fc\ufe0f\u041f\u043e\u043b\u0443\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 (\u0434\u0430, \u0434\u0430\u0436\u0435 \u043a \u0442\u043e\u043a\u0435\u043d\u0430\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438).\n\u25fc\ufe0f\u041e\u0431\u043e\u0439\u0434\u0451\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f Chrome.\n\u25fc\ufe0f\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u2014 \u0434\u0430\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442 \u043a\u043e\u0434 \u0432\u043d\u0435 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0412\u0441\u0451 \u043f\u043b\u043e\u0445\u043e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Link \u0441 \u0445\u0438\u0442\u0440\u043e\u0439 referrer-policy. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u0434\u0430\u0451\u0442 \u0432\u0441\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0415\u0441\u043b\u0438 \u0432 URL \u0441\u0438\u0434\u0438\u0442 access_token \u0438\u043b\u0438 auth_code \u2014 \u043e\u043d \u0443\u0445\u043e\u0434\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0434\u044b\u0440\u0430 \u2014 CVE-2025-4609 (Mojo)\n\u042d\u0442\u043e \u0443\u0436\u0435 \u0431\u0430\u0433 \u0432 IPC (\u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043b\u0435\u0437\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u043d\u043e\u2026 \u0437\u0432\u0443\u0447\u0438\u0442 \u0441\u0442\u0440\u0451\u043c\u043d\u043e.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n\u25fc\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Chrome \u0432\u0440\u0443\u0447\u043d\u0443\u044e:\n\u041c\u0435\u043d\u044e \u2192 \u0421\u043f\u0440\u0430\u0432\u043a\u0430 \u2192 \u041e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome \u2192 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c.\n\u25fc\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 Brave, Edge, Opera, Vivaldi? \u2014 \u043e\u043d\u0438 \u0442\u043e\u0436\u0435 \u043d\u0430 Chromium. \u0416\u0434\u0451\u043c \u043f\u0430\u0442\u0447\u0435\u0439.\n\u25fc\ufe0f\u0420\u0430\u0441\u0441\u043a\u0430\u0436\u0438\u0442\u0435 \u0434\u0440\u0443\u0437\u044c\u044f\u043c. \u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0438\u0434\u0443\u0442.\n\n\u041c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 Chrome (CVE-2025-2783) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0421\u041c\u0418, \u0432\u0443\u0437\u044b \u0438 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0431\u044b\u0441\u0442\u0440\u043e. \u041d\u0435 \u043d\u0430\u0434\u043e \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0437\u0434\u043d\u043e.\n\n\u0411\u0430\u0433 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c. \u041f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u044c\u0442\u0435 \u0436\u0438\u0442\u044c \u043d\u0430 \u0430\u0432\u0442\u043e\u043f\u0438\u043b\u043e\u0442\u0435.\n\nITsec NEWS", "creation_timestamp": "2025-05-15T10:48:39.000000Z"}, {"uuid": "e09e39bf-b26e-41de-a2a8-78279e2ab3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46806", "type": "seen", "source": "https://t.me/CyberBulletin/3590", "content": "\ud83d\udea8 Critical Vulnerabilities in sslh Expose Systems to Remote DoS Attacks\n\nTwo newly discovered critical vulnerabilities in sslh, a widely-used protocol multiplexer, are putting systems at risk of remote denial-of-service (DoS) attacks. Tracked as CVE-2025-46807 and CVE-2025-46806, the flaws affect all sslh versions prior to v2.2.4.\n\n\ud83d\udd0d What is sslh?\n\nsslh is a lightweight utility that allows multiple protocols like HTTPS, SSH, OpenVPN, and others to share the same port\u2014commonly used to bypass firewalls in enterprise environments.\n\n\n---\n\n\ud83d\udd13 CVE-2025-46807 \u2014 File Descriptor Exhaustion (High Severity)\n\nType: Remote DoS via UDP\nCVSS Score: 7.5\nA flaw in the way sslh manages UDP connections can lead to file descriptor exhaustion. Since timeout checks only occur during active network events, an attacker can flood the service with single-byte UDP packets, hitting the default limit of 1024 open descriptors.\n\n\u27a1\ufe0f Once this limit is reached, sslh crashes due to a NULL pointer dereference (new_cnx), making it trivial for an attacker to bring down the service.\n\nFix: Patched in commit ff8206f7c, which prevents the segmentation fault. However, open UDP sockets may still persist longer than ideal.\n\n\n---\n\n\u26a0\ufe0f CVE-2025-46806 \u2014 Misaligned Memory Access in OpenVPN Probe\n\nType: Remote DoS on ARM and similar architectures\nCVSS Score: 7.5\nThis vulnerability targets the OpenVPN detection logic in sslh. The function is_openvpn_protocol() improperly dereferences memory using a misaligned pointer, causing a SIGBUS crash on architectures like ARM.\n\nAttackers only need to send 29+ crafted UDP packets (e.g., a sequence of 0x08 bytes) to reliably trigger the crash.\n\nFix: Commit 204305a88fb3 replaces the unsafe pointer operation with a memcpy() into a local buffer\u2014preserving alignment and preventing the crash.\n\n\n---\n\n\ud83d\udee1\ufe0f Who's at Risk?\n\nAny system running sslh < v2.2.4\u2014especially with UDP protocols or OpenVPN probing enabled\u2014can be affected. The sslh-fork version handles resource exhaustion better, but it's not immune to aggressive attack scenarios.\n\n\n---\n\nMitigation & Recommendations\n\nUpgrade immediately to sslh v2.2.4, which includes fixes for both vulnerabilities.\n\nHarden your environment by setting OS-level resource limits (ulimits) to reduce attack impact.\n\nConsider reducing UDP-based probes or limiting simultaneous connections where possible.\n\n\nAccording to SUSE\u2019s security analysts, sslh remains a reliable tool with a small attack surface, and with these fixes in place, is considered safe for production deployments.\n\n\n---\n\n\ud83e\udde0 Final Take \u2013 Cyber Bulletin Insight\n\nThese sslh vulnerabilities highlight the importance of keeping even lightweight, often-overlooked services fully patched and monitored. As attackers increasingly target multiplexers and edge services to maximize disruption, staying ahead with proactive upgrades and resource hardening is more vital than ever.\n\n\n\ud83d\udce2 Stay informed. Stay secure.\nSubscribe to Cyber Bulletin for real-time updates on critical vulnerabilities and threat intelligence.", "creation_timestamp": "2025-07-06T21:55:44.000000Z"}, {"uuid": "e6581a43-2105-4bf3-a553-c09fd098eb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46807", "type": "seen", "source": "https://t.me/CyberBulletin/3590", "content": "\ud83d\udea8 Critical Vulnerabilities in sslh Expose Systems to Remote DoS Attacks\n\nTwo newly discovered critical vulnerabilities in sslh, a widely-used protocol multiplexer, are putting systems at risk of remote denial-of-service (DoS) attacks. Tracked as CVE-2025-46807 and CVE-2025-46806, the flaws affect all sslh versions prior to v2.2.4.\n\n\ud83d\udd0d What is sslh?\n\nsslh is a lightweight utility that allows multiple protocols like HTTPS, SSH, OpenVPN, and others to share the same port\u2014commonly used to bypass firewalls in enterprise environments.\n\n\n---\n\n\ud83d\udd13 CVE-2025-46807 \u2014 File Descriptor Exhaustion (High Severity)\n\nType: Remote DoS via UDP\nCVSS Score: 7.5\nA flaw in the way sslh manages UDP connections can lead to file descriptor exhaustion. Since timeout checks only occur during active network events, an attacker can flood the service with single-byte UDP packets, hitting the default limit of 1024 open descriptors.\n\n\u27a1\ufe0f Once this limit is reached, sslh crashes due to a NULL pointer dereference (new_cnx), making it trivial for an attacker to bring down the service.\n\nFix: Patched in commit ff8206f7c, which prevents the segmentation fault. However, open UDP sockets may still persist longer than ideal.\n\n\n---\n\n\u26a0\ufe0f CVE-2025-46806 \u2014 Misaligned Memory Access in OpenVPN Probe\n\nType: Remote DoS on ARM and similar architectures\nCVSS Score: 7.5\nThis vulnerability targets the OpenVPN detection logic in sslh. The function is_openvpn_protocol() improperly dereferences memory using a misaligned pointer, causing a SIGBUS crash on architectures like ARM.\n\nAttackers only need to send 29+ crafted UDP packets (e.g., a sequence of 0x08 bytes) to reliably trigger the crash.\n\nFix: Commit 204305a88fb3 replaces the unsafe pointer operation with a memcpy() into a local buffer\u2014preserving alignment and preventing the crash.\n\n\n---\n\n\ud83d\udee1\ufe0f Who's at Risk?\n\nAny system running sslh < v2.2.4\u2014especially with UDP protocols or OpenVPN probing enabled\u2014can be affected. The sslh-fork version handles resource exhaustion better, but it's not immune to aggressive attack scenarios.\n\n\n---\n\nMitigation & Recommendations\n\nUpgrade immediately to sslh v2.2.4, which includes fixes for both vulnerabilities.\n\nHarden your environment by setting OS-level resource limits (ulimits) to reduce attack impact.\n\nConsider reducing UDP-based probes or limiting simultaneous connections where possible.\n\n\nAccording to SUSE\u2019s security analysts, sslh remains a reliable tool with a small attack surface, and with these fixes in place, is considered safe for production deployments.\n\n\n---\n\n\ud83e\udde0 Final Take \u2013 Cyber Bulletin Insight\n\nThese sslh vulnerabilities highlight the importance of keeping even lightweight, often-overlooked services fully patched and monitored. As attackers increasingly target multiplexers and edge services to maximize disruption, staying ahead with proactive upgrades and resource hardening is more vital than ever.\n\n\n\ud83d\udce2 Stay informed. Stay secure.\nSubscribe to Cyber Bulletin for real-time updates on critical vulnerabilities and threat intelligence.", "creation_timestamp": "2025-07-06T21:55:44.000000Z"}, {"uuid": "2aaad478-2693-4d50-a4b9-b5f1845adce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "Telegram/YEiFamPdgcqsNBKcTHrz6s6bZPTIwshB08cHvtzul5ZyUxA", "content": "", "creation_timestamp": "2025-06-30T21:00:03.000000Z"}, {"uuid": "10ea33be-dac8-4c35-a152-19bb949f7cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "Telegram/6d680N_0vVMXuPQZA4iUQbb1G3eD9P_AX7fLY1XUADPVmeM", "content": "", "creation_timestamp": "2025-06-30T23:00:09.000000Z"}, {"uuid": "477e2e54-8ba7-4779-873f-254c25e4ca94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/kasperskylab_ru/6194", "content": "\ud83d\udd04 \u0412\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c Chrome \n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-4664. \u0427\u0435\u0440\u0435\u0437 \u044d\u0442\u0443 \u0434\u044b\u0440\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0432 \u0445\u0443\u0434\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u2014 \u0437\u0430\u0445\u0432\u0430\u0442 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430. \u041f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 Chrome. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u0433\u0434\u0430 \u0441\u0430\u0439\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043b\u044e\u0447\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OAuth.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Windows, Linux \u0438 Mac, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0415\u0441\u043b\u0438 \u0437\u0430\u0432\u0435\u0442\u043d\u0430\u044f \u043a\u043d\u043e\u043f\u043a\u0430 Update \u0432 \u0432\u0430\u0448\u0435\u043c Chrome \u0435\u0449\u0451 \u043d\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435\u0441\u044c \u043d\u0430\u0448\u0438\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u043f\u0430\u0442\u0447\u0438 #Chrome", "creation_timestamp": "2025-05-15T13:37:08.000000Z"}, {"uuid": "13bf8fa0-5ca2-45cd-83b1-def0fa7c7b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "seen", "source": "Telegram/-QOyMiowJoIyiMyTWDmr53uOV1Gxrf1KetOkwLf9_gvu4z0", "content": "", "creation_timestamp": "2025-06-25T00:39:14.000000Z"}, {"uuid": "109c1353-6270-4d49-b02c-92ed86abc254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46816", "type": "published-proof-of-concept", "source": "Telegram/LAhBt3rpcnQDQY7FXJyrJd3noKQxjl1V2vQxdg9PO3Q48dM", "content": "", "creation_timestamp": "2025-06-04T21:00:04.000000Z"}, {"uuid": "d7dddc1e-6019-48c4-83a0-daba634d4979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "Telegram/lNYnifXy2tvvlbwVWmK52LO1GeZbuWWQO1JVjb-19j9IRA", "content": "", "creation_timestamp": "2025-05-15T07:44:42.000000Z"}, {"uuid": "774a5c1b-1cbc-474a-87d7-07e5fc5a197f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "seen", "source": "Telegram/EKi3juhW8KdvSrT-C52NnQYma9e80zcUs_26vGBIli1oz3UL", "content": "", "creation_timestamp": "2025-06-25T17:32:32.000000Z"}, {"uuid": "545c9ed8-6d09-495d-bf0e-af285d9acbb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "seen", "source": "Telegram/nVjbyWi1OTQqVrCfCpVg9HGjFoxjWvVL_Heny3L18ja2tx5m", "content": "", "creation_timestamp": "2025-06-25T00:39:13.000000Z"}, {"uuid": "8ed1729e-f27a-4547-9df6-611681690315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46807", "type": "published-proof-of-concept", "source": "Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI", "content": "", "creation_timestamp": "2025-06-02T12:01:30.000000Z"}, {"uuid": "b96438c6-eab4-44cf-a32b-f047b04050fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46206", "type": "published-proof-of-concept", "source": "Telegram/AVc_P4NaAVoAIaI4JZ8722BzyGCBMKTxXAkeHop-I5vQFCI", "content": "", "creation_timestamp": "2025-06-03T11:00:08.000000Z"}, {"uuid": "c222a79e-6082-4ad3-a0bc-bf37ad68b45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4601", "type": "published-proof-of-concept", "source": "Telegram/3XjFdQnl9XelOVe1uN4E2a4frNC7kETFnR_z5QGqSWjIPjM", "content": "", "creation_timestamp": "2025-06-11T15:00:07.000000Z"}, {"uuid": "0ce4cb5d-07f7-4a74-bb8c-fb93c527c302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4613", "type": "published-proof-of-concept", "source": "Telegram/ZpcFsHaFmgBiwGa5yUnI2p38ayaii-TrhvMyDYToJoZN9_A", "content": "", "creation_timestamp": "2025-06-12T10:54:04.000000Z"}, {"uuid": "94f5b7e6-0a94-4f1f-9aaf-aefe8176c545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/17523", "content": "\u0412 Chrome \u043f\u0430\u0442\u0447\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u043c\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nhttps://xakep.ru/2025/05/16/chrome-cve-2025-4664/", "creation_timestamp": "2025-05-16T08:35:01.000000Z"}, {"uuid": "b4243ca1-25d1-4475-968b-7961c06080f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/kasperskyb2b/1737", "content": "\ud83d\udd04 \u0412\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c Chrome \n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-4664. \u0427\u0435\u0440\u0435\u0437 \u044d\u0442\u0443 \u0434\u044b\u0440\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0441\u0435\u0441\u0441\u0438\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0447\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader Chrome, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0443\u0436\u043d\u0443\u044e \u0435\u043c\u0443 referrer policy, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 unsafe-url, \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0441\u0435\u0441\u0441\u0438\u0438. \u0412 PoC, \u043a\u043e\u0433\u0434\u0430 \u0441\u0430\u0439\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 OAuth.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Windows, Linux \u0438 Mac, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0415\u0441\u043b\u0438 \u0437\u0430\u0432\u0435\u0442\u043d\u0430\u044f \u043a\u043d\u043e\u043f\u043a\u0430 Update \u0432 \u0432\u0430\u0448\u0435\u043c Chrome \u0435\u0449\u0451 \u043d\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435\u0441\u044c \u043d\u0430\u0448\u0438\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c Microsoft \u0432\u043d\u0435\u0441\u043b\u0430 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 Chromium, \u043a\u0430\u0441\u0430\u044e\u0449\u0435\u0435\u0441\u044f Windows. \u0422\u0435\u043f\u0435\u0440\u044c Chrome \u0431\u0443\u0434\u0435\u0442 \u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0441\u043d\u0438\u0436\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 (de-elevate) \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Edge \u0441 2019 \u0433\u043e\u0434\u0430 \u0438 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a\u0438, \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u043f\u0430\u0442\u0447\u0438 #Chrome @\u041f2\u0422", "creation_timestamp": "2025-05-15T14:52:59.000000Z"}, {"uuid": "fc587d1d-bee7-4728-8e60-0b8de032ff22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46833", "type": "seen", "source": "https://t.me/cvedetector/24859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46833 - Apache SimplePythonEncryption RSA Brute Force Decryption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46833 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:51.000000Z"}, {"uuid": "56fe6083-b15b-4592-b8b1-484df36dd7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46746", "type": "seen", "source": "https://t.me/cvedetector/25093", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46746 - Citrix SharePoint Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46746 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An administrator could discover another account's credentials. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:07:56.000000Z"}, {"uuid": "0a5d942f-612e-4043-9df1-bb98628e8fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46744", "type": "seen", "source": "https://t.me/cvedetector/25092", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46744 - Apache Struts Username Manipulation\", \n  \"Content\": \"CVE ID : CVE-2025-46744 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An authenticated administrator could modify the Created By username for a user account \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:07:55.000000Z"}, {"uuid": "4841f856-d5a9-44d3-b968-4dc3378406e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46745", "type": "seen", "source": "https://t.me/cvedetector/25091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46745 - Apache User Account Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46745 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An authenticated user without user-management permissions could view other users' account information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:07:54.000000Z"}, {"uuid": "d8af4c15-68aa-4c36-bfb9-91514a9ecc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://t.me/cvedetector/25219", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4660 - \"SecureConnector Windows Agent Named Pipe Remote Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-4660 \nPublished : May 13, 2025, 6:15 p.m. | 59\u00a0minutes ago \nDescription : A remote code execution vulnerability exists in the Windows agent component of SecureConnector\u00a0due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without authentication. By interacting with this pipe, an attacker can redirect the agent to communicate with a rogue server that can issue commands via the SecureConnector Agent.\u00a0  \n  \n  \n  \nThis does not impact Linux or OSX Secure Connector. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T21:24:24.000000Z"}, {"uuid": "d49efd3c-f650-49ae-a8cf-e7d6d7d7b142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46743", "type": "seen", "source": "https://t.me/cvedetector/25102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46743 - Apache HTTP Server Session Token Reuse\", \n  \"Content\": \"CVE ID : CVE-2025-46743 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An authenticated user's token could be used by another source after the user had logged out prior to the token expiring. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:09.000000Z"}, {"uuid": "a1c1a53d-43c9-482a-a9e6-391a5c1e49e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46742", "type": "seen", "source": "https://t.me/cvedetector/25101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46742 - Oracle WebLogic Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46742 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Users who were required to change their password could still access system information before changing their password \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:08.000000Z"}, {"uuid": "6ac0fda8-6098-4f54-96f4-583764b46029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46741", "type": "seen", "source": "https://t.me/cvedetector/25100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46741 - Blueframe Session Fixation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46741 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:04.000000Z"}, {"uuid": "7b29bb0d-8106-4bdb-a4ef-d37a069bf16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46747", "type": "seen", "source": "https://t.me/cvedetector/25094", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46747 - Adobe Acrobat Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46747 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An authenticated user without user-management permissions could identify other user accounts. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:07:57.000000Z"}, {"uuid": "7887add9-8f30-4890-a987-11cd7a35d64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46721", "type": "seen", "source": "https://t.me/cvedetector/25203", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46721 - Apache NOSurf CSRF Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46721 \nPublished : May 13, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site (either via XSS, or otherwise) to bypass CSRF checks and issue requests on user's behalf. Due to misuse of the Go `net/http` library, nosurf categorizes all incoming requests as plain-text HTTP requests, in which case the `Referer` header is not checked to have the same origin as the target webpage. If the attacker has control over HTML contents on either the target website (e.g. `example.com`), or on a website hosted on a subdomain of the target (e.g. `attacker.example.com`), they will also be able to manipulate cookies set for the target website. By acquiring the secret CSRF token from the cookie, or overriding the cookie with a new token known to the attacker, `attacker.example.com` is able to craft cross-site requests to `example.com`. A patch for the issue was released in nosurf 1.2.0. In lieu of upgrading to a patched version of nosurf, users may additionally use another HTTP middleware to ensure that a non-safe HTTP request is coming from the same origin (e.g. by requiring a `Sec-Fetch-Site: same-origin` header in the request). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:43:43.000000Z"}, {"uuid": "4f6744a3-4129-412c-9be3-867b4a93f353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4649", "type": "seen", "source": "https://t.me/cvedetector/25195", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4649 - Centreon Web Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4649 \nPublished : May 13, 2025, 12:15 p.m. | 53\u00a0minutes ago \nDescription : Improper Privilege Management vulnerability in Centreon web allows Privilege Escalation.  \nACL are not correctly taken into account in the display of the \"event logs\" page. This page requiring, high privileges, will display all available logs.  \n  \n  \nThis issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T15:32:53.000000Z"}, {"uuid": "e580e102-2f84-4e38-8a8c-23093211c818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4648", "type": "seen", "source": "https://t.me/cvedetector/25177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4648 - Centreon Web Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-4648 \nPublished : May 13, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Download of Code Without Integrity Check vulnerability in Centreon web allows Reflected XSS.  \nA user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.  \nThis issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T13:52:10.000000Z"}, {"uuid": "cd66ed41-9374-4506-ac0a-fda177fe1622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46738", "type": "seen", "source": "https://t.me/cvedetector/25108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46738 - Apache SEL arbitrary code execution vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46738 \nPublished : May 12, 2025, 4:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:16.000000Z"}, {"uuid": "cc76d618-4a51-40c2-b729-28397849c429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "https://t.me/cvedetector/25107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46737 - Cisco SEL Cross-Origin Resource Sharing (CORS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46737 \nPublished : May 12, 2025, 4:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:16.000000Z"}, {"uuid": "ec2b2d3c-13ce-4a87-b19e-bb960f413daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4647", "type": "seen", "source": "https://t.me/cvedetector/25176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4647 - Centreon Web Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-4647 \nPublished : May 13, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon web allows Reflected XSS.  \n  \nA user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG.  \n  \nThis issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T13:52:10.000000Z"}, {"uuid": "d0ef12eb-28b7-4ddd-8266-92d1829f847b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46825", "type": "seen", "source": "https://t.me/cvedetector/25138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46825 - Kanboard Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46825 \nPublished : May 12, 2025, 11:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting (XSS) Vulnerability in the `name` parameter of the `http://localhost/?controller=ProjectCreationController&action=create` form. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. Note that the default content security policy (CSP) blocks the JavaScript attack, though it can be exploited if an instance is badly configured and the software is vulnerable to CSS injection because of the unsafe-inline on the default CSP. Version 1.2.45 contains a fix for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T02:59:50.000000Z"}, {"uuid": "ba1bc5e5-fd52-4519-bd56-456c7e4d99b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46189", "type": "seen", "source": "https://t.me/cvedetector/24969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46189 - SourceCodester Client Database Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46189 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:38.000000Z"}, {"uuid": "251f3d33-57fc-4955-aaae-4a7948869df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4646", "type": "seen", "source": "https://t.me/cvedetector/25175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4646 - Centreon Web Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4646 \nPublished : May 13, 2025, 10:15 a.m. | 51\u00a0minutes ago \nDescription : Improper Privilege Management vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T13:52:09.000000Z"}, {"uuid": "0f04aae4-5d7c-43b4-8bf3-397a86b23b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://t.me/cvedetector/25168", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4632 - Samsung MagicINFO 9 Server Path Traversal Write Arbitrary File Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4632 \nPublished : May 13, 2025, 6:15 a.m. | 37\u00a0minutes ago \nDescription : Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T09:41:16.000000Z"}, {"uuid": "7e27ce6f-f1d5-477e-99ca-a331dd856af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46750", "type": "seen", "source": "https://t.me/cvedetector/25097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46750 - SELogic BIOS Password Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46750 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected  BIOS settings by importing a BIOS settings file with no password set. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:02.000000Z"}, {"uuid": "0b90e346-ee5f-4053-8127-c2d169258741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46749", "type": "seen", "source": "https://t.me/cvedetector/25096", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46749 - Apache Struts XSS\", \n  \"Content\": \"CVE ID : CVE-2025-46749 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:01.000000Z"}, {"uuid": "1c831e01-dcec-431e-a478-868c271dc465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46748", "type": "seen", "source": "https://t.me/cvedetector/25095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46748 - Apache Password Change Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46748 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An authenticated user attempting to change their password could do so without using the current password. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:07:57.000000Z"}, {"uuid": "31316f05-bcd5-4f42-9441-54ea61bc9118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46718", "type": "seen", "source": "https://t.me/cvedetector/25082", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46718 - \"sudo-rs Sudo Privilege Listing Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-46718 \nPublished : May 12, 2025, 3:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows users with limited sudo privileges to enumerate the sudoers file, revealing sensitive information about other users' permissions. Attackers can collect information that can be used to more targeted attacks. Systems where users either do not have sudo privileges or have the ability to run all commands as root through sudo (the default configuration on most systems) are not affected by this advisory. Version 0.2.6 fixes the vulnerability. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T18:37:13.000000Z"}, {"uuid": "92a8c62b-37a2-4755-8f3d-e84213b40faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46610", "type": "seen", "source": "https://t.me/cvedetector/25081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46610 - Artec EMA Mail CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46610 \nPublished : May 12, 2025, 3:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : ARTEC EMA Mail 6.92 allows CSRF. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T18:37:13.000000Z"}, {"uuid": "0e3984b0-be39-4d97-acec-a78ae40d23ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46739", "type": "seen", "source": "https://t.me/cvedetector/25098", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46739 - Adobe Acrobat Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46739 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An unauthenticated user could discover account credentials via a brute-force attack without rate limiting \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:03.000000Z"}, {"uuid": "d9cba642-4194-4fd0-9121-1f11f1dd00b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46717", "type": "seen", "source": "https://t.me/cvedetector/25084", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46717 - \"Sudo-rs Path Traversal Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2025-46717 \nPublished : May 12, 2025, 3:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list `. Users with local access to a machine can discover the existence/non-existence of certain files, revealing potentially sensitive information in the file names. This information can also be used in conjunction with other attacks. Version 0.2.6 fixes the vulnerability. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T18:37:15.000000Z"}, {"uuid": "7596bdea-513d-4ebd-934d-059d8ae29f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46611", "type": "seen", "source": "https://t.me/cvedetector/25083", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46611 - ARTEC EMA Mail Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46611 \nPublished : May 12, 2025, 3:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T18:37:14.000000Z"}, {"uuid": "90522f0c-6f65-4391-8d68-e074c0e032c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46740", "type": "seen", "source": "https://t.me/cvedetector/25099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46740 - Adobe Acrobat Account Name Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46740 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An authenticated user without user administrative permissions could  change the administrator Account Name. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:03.000000Z"}, {"uuid": "71702295-6ab1-47a5-bb59-7f4cccc1218c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46190", "type": "seen", "source": "https://t.me/cvedetector/24955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46190 - SourceCodester Client Database Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46190 \nPublished : May 9, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:18.000000Z"}, {"uuid": "b2b30dba-52b9-4508-97a8-b234ee4d985c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46729", "type": "seen", "source": "https://t.me/cvedetector/25076", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46729 - Julmud/phpDVDProfiler Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46729 \nPublished : May 12, 2025, 11:15 a.m. | 1\u00a0hour ago \nDescription : julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v_20230807 and prior to v_20250511, cross-site scripting in the search function. v_20250511 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T14:26:24.000000Z"}, {"uuid": "bd3bc077-f125-4e31-94a4-b6cfc7c563da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46188", "type": "seen", "source": "https://t.me/cvedetector/24970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46188 - SourceCodester Client Database Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46188 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:39.000000Z"}, {"uuid": "8f14e725-7d33-4a12-b123-2d01f1b480a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46193", "type": "seen", "source": "https://t.me/cvedetector/24962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46193 - SourceCodester Client Database Management System Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46193 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:27.000000Z"}, {"uuid": "0567302c-a83c-4a97-8287-b4f063017945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46192", "type": "seen", "source": "https://t.me/cvedetector/24957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46192 - SourceCodester Client Database Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46192 \nPublished : May 9, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:19.000000Z"}, {"uuid": "cb73e13b-1f91-4ecd-807f-5632d49eb8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46191", "type": "seen", "source": "https://t.me/cvedetector/24956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46191 - SourceCodester Client Database Management System Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46191 \nPublished : May 9, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attackers can upload executable PHP files to a web-accessible directory (/files/). This allows them to execute arbitrary commands remotely by accessing the uploaded script, resulting in full Remote Code Execution (RCE) without authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:18.000000Z"}, {"uuid": "6a02b4cc-a14c-4eba-a2a3-a679a631b313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46392", "type": "seen", "source": "https://t.me/cvedetector/24943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46392 - Apache Commons Configuration Uncontrolled Resource Consumption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46392 \nPublished : May 9, 2025, 10:15 a.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.  \n  \nThere are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuration team does not intend to fix these issues in 1.x. Apache Commons Configuration 1.x is still safe to use in scenario's where you only load trusted configurations.   \n  \n  \nUsers that load untrusted configurations or give attackers control over usage patterns are recommended to upgrade to the 2.x version line, which fixes these issues. Apache Commons Configuration 2.x is not a drop-in replacement, but as it uses a separate Maven groupId and Java package namespace they can be loaded side-by-side, making it possible to do a gradual migration. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T14:32:28.000000Z"}, {"uuid": "bc582421-7b8f-4919-83ec-452b67cfcfbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "seen", "source": "https://t.me/cvedetector/24868", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46812 - Trix Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46812 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user's session, potentially leading to unauthorized actions being performed or sensitive information being disclosed. This issue has been patched in version 2.1.15. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:19:04.000000Z"}, {"uuid": "4664cb29-9c6b-47dc-98f1-90d42d2ded84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46712", "type": "seen", "source": "https://t.me/cvedetector/24867", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46712 - Erlang/OTP SSH Man-in-the-Middle Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46712 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25). \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:19:03.000000Z"}, {"uuid": "26035060-edc2-4214-96d0-4b48f2219ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46336", "type": "seen", "source": "https://t.me/cvedetector/24866", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46336 - Rack::Session Pool Session Restoration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46336 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie (already a major issue), the session may be restored if the attacker can trigger a long running request (within that same session) adjacent to the user logging out, in order to retain illicit access even after a user has attempted to logout. This issue has been patched in version 2.1.1. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:59.000000Z"}, {"uuid": "1715c3f1-bb7d-44f5-9844-0824b2180786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46646", "type": "seen", "source": "https://t.me/cvedetector/23805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46646 - Ghostscript UTF-8 Encoding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46646 \nPublished : April 26, 2025, 3:15 p.m. | 30\u00a0minutes ago \nDescription : In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954. \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T18:35:28.000000Z"}, {"uuid": "526c06bb-126a-43b7-b52e-786a17255fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46393", "type": "seen", "source": "https://t.me/cvedetector/23591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46393 - ImageMagick Multispectral Packet Size Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-46393 \nPublished : April 23, 2025, 3:16 p.m. | 58\u00a0minutes ago \nDescription : In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels in an arbitrary order). \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T18:39:45.000000Z"}, {"uuid": "75f12eb6-3563-4ea1-9112-2224764d7d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "seen", "source": "https://t.me/cvedetector/23910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46661 - IPW Systems Metazo Server-Side Template-Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46661 \nPublished : April 28, 2025, 1:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T17:24:25.000000Z"}, {"uuid": "72fcb332-8219-4651-9b91-24d0a726f5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46224", "type": "seen", "source": "https://t.me/cvedetector/23575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46224 - Dropbox Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46224 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:24.000000Z"}, {"uuid": "f355ab1f-2c37-4a5d-846c-368e0691b0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46614", "type": "seen", "source": "https://t.me/cvedetector/23919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46614 - Snowflake ODBC Driver Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46614 \nPublished : April 28, 2025, 4:15 p.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T19:54:58.000000Z"}, {"uuid": "90a743b3-2e98-4847-b5e1-7ac44d5d7e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46690", "type": "seen", "source": "https://t.me/cvedetector/23863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46690 - Ververica Platform SQL Connector Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46690 \nPublished : April 27, 2025, 10:15 p.m. | 39\u00a0minutes ago \nDescription : Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T01:31:06.000000Z"}, {"uuid": "5b9de3b1-d02d-4100-9816-23e7d77f3e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46689", "type": "seen", "source": "https://t.me/cvedetector/23862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46689 - Ververica Platform Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46689 \nPublished : April 27, 2025, 10:15 p.m. | 39\u00a0minutes ago \nDescription : Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T01:31:05.000000Z"}, {"uuid": "8063b406-ab77-41ad-bb5e-f750a88a44c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46618", "type": "seen", "source": "https://t.me/cvedetector/23766", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46618 - JetBrains TeamCity Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46618 \nPublished : April 25, 2025, 3:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T19:11:11.000000Z"}, {"uuid": "2efe8370-974d-4c0c-b9cd-0a003f20e4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46688", "type": "seen", "source": "https://t.me/cvedetector/23857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46688 - QuickJS Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46688 \nPublished : April 27, 2025, 8:15 p.m. | 36\u00a0minutes ago \nDescription : quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T23:00:35.000000Z"}, {"uuid": "3d4a9570-31ef-4f30-b745-f28e2c7364e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46687", "type": "seen", "source": "https://t.me/cvedetector/23855", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46687 - QuickJS Heap Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-46687 \nPublished : April 27, 2025, 8:15 p.m. | 36\u00a0minutes ago \nDescription : quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T23:00:33.000000Z"}, {"uuid": "dfff9919-22b1-48ba-8d4a-a4af105ba524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46656", "type": "seen", "source": "https://t.me/cvedetector/23811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46656 - Markdownify Headline Prefix Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-46656 \nPublished : April 26, 2025, 10:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as  in addition to \nthrough \n. This causes memory consumption. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T02:06:49.000000Z"}, {"uuid": "1912a1e9-d10f-4c0c-a908-29b1fcd76ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46657", "type": "seen", "source": "https://t.me/cvedetector/23847", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46657 - Karaz Karazal Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-46657 \nPublished : April 27, 2025, 4:15 p.m. | 33\u00a0minutes ago \nDescription : Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T18:49:49.000000Z"}, {"uuid": "072675d2-650f-465a-a3f7-d93d248bbeba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46575", "type": "seen", "source": "https://t.me/cvedetector/23821", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46575 - GoldenDB Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46575 \nPublished : April 27, 2025, 2:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T06:17:34.000000Z"}, {"uuid": "4f392c0a-ad47-4422-890f-cd4bfb2f20ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46574", "type": "seen", "source": "https://t.me/cvedetector/23824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46574 - GoldenDB Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46574 \nPublished : April 27, 2025, 2:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T06:17:39.000000Z"}, {"uuid": "6f1fd820-fabc-4a3e-a757-164391b80b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46577", "type": "seen", "source": "https://t.me/cvedetector/23823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46577 - GoldenDB Database SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46577 \nPublished : April 27, 2025, 2:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T06:17:38.000000Z"}, {"uuid": "5b80c6a7-2422-4077-954d-9c3df476248d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46576", "type": "seen", "source": "https://t.me/cvedetector/23822", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46576 - GoldenDB Database Permission Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46576 \nPublished : April 27, 2025, 2:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T06:17:34.000000Z"}, {"uuid": "44ee69bb-3a5d-4871-80be-a26a43fcbf7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46579", "type": "seen", "source": "https://t.me/cvedetector/23820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46579 - GoldenDB DDE Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46579 \nPublished : April 27, 2025, 2:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T06:17:33.000000Z"}, {"uuid": "849a7390-7466-4bc8-b789-36f964b4c130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46578", "type": "seen", "source": "https://t.me/cvedetector/23819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46578 - GoldenDB Database SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46578 \nPublished : April 27, 2025, 2:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T06:17:32.000000Z"}, {"uuid": "a1c32c90-e9ff-4c61-b4c7-6e9a02f9eb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46580", "type": "seen", "source": "https://t.me/cvedetector/23818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46580 - GoldenDB Database Information Disclosure and Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46580 \nPublished : April 27, 2025, 3:15 a.m. | 57\u00a0minutes ago \nDescription : There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business SQL. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T06:17:32.000000Z"}, {"uuid": "51a849fb-d9bd-414d-9779-2111d10cac6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46675", "type": "seen", "source": "https://t.me/cvedetector/23816", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46675 - NASA CryptoLib Cryptographic Key State Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46675 \nPublished : April 27, 2025, 1:15 a.m. | 56\u00a0minutes ago \nDescription : In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T04:37:17.000000Z"}, {"uuid": "c60cb47d-803d-4786-9421-91efff7680d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46674", "type": "seen", "source": "https://t.me/cvedetector/23815", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46674 - NASA CryptoLib Cryptographic Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46674 \nPublished : April 27, 2025, 1:15 a.m. | 56\u00a0minutes ago \nDescription : NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T04:37:17.000000Z"}, {"uuid": "76999488-d982-46cc-846f-91d809709ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46673", "type": "seen", "source": "https://t.me/cvedetector/23814", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46673 - NASA CryptoLib SDLS Protocol Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46673 \nPublished : April 27, 2025, 1:15 a.m. | 56\u00a0minutes ago \nDescription : NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS). \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T04:37:16.000000Z"}, {"uuid": "cb9531d4-06bc-456a-8629-fbdc2ca0cf58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46672", "type": "seen", "source": "https://t.me/cvedetector/23813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46672 - NASA CryptoLib Crypto Function Status Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46672 \nPublished : April 27, 2025, 1:15 a.m. | 56\u00a0minutes ago \nDescription : NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T04:37:15.000000Z"}, {"uuid": "d9a8ed67-ad7c-4407-8c85-c1cf3e6e78da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46653", "type": "seen", "source": "https://t.me/cvedetector/23810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46653 - Formidable File Name Guessing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46653 \nPublished : April 26, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not \"cryptographically secure.\" (Also, there is a scenario in which only the last two characters of a hexoid string need to be guessed, but this is not often relevant.) NOTE: this does not imply that, in a typical use case, attackers will be able to exploit any hexoid behavior to upload and execute their own content. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T00:26:39.000000Z"}, {"uuid": "59edc24f-9dd4-4076-a88b-00560de37c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46654", "type": "seen", "source": "https://t.me/cvedetector/23809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46654 - CodiMD through 2.2.0 has a CSP-based protection me\", \n  \"Content\": \"CVE ID : CVE-2025-46654 \nPublished : April 26, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaded .js file. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T00:26:38.000000Z"}, {"uuid": "0504ca86-cf0a-438c-bc11-653f8570d419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46655", "type": "seen", "source": "https://t.me/cvedetector/23808", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46655 - CodiMD AWS S3 SVG XSS Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46655 \nPublished : April 26, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain cases of different-origin file storage, such as AWS S3. NOTE: it can be considered a user error if AWS is employed for hosting untrusted JavaScript content, but the selected architecture within AWS does not have components that are able to insert Content-Security-Policy headers. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T00:26:37.000000Z"}, {"uuid": "4e7b2c02-a651-4c36-9e0d-133528d5444d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46652", "type": "seen", "source": "https://t.me/cvedetector/23807", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46652 - IZArc Mark-of-the-Web Bypass Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46652 \nPublished : April 26, 2025, 6:15 p.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not propagated to the extracted files. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T21:56:11.000000Z"}, {"uuid": "99653408-cd79-4a1a-ad40-f21a29934588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46333", "type": "seen", "source": "https://t.me/cvedetector/23788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46333 - Z2D Stride Compositor Out-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2025-46333 \nPublished : April 25, 2025, 9:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : z2d is a pure Zig 2D graphics library. In version 0.6.0, when writing from one surface to another using `z2d.compositor.StrideCompositor.run`, the source surface can be completely out-of-bounds on the x-axis (but not on the y-axis) by way of a negative offset. This results in an overflow of the value controlling the length of the stride. In non-safe optimization modes (consumers compiling with `ReleaseFast` or `ReleaseSmall`), this could potentially lead to invalid memory accesses or corruption. This issue is patched in version 0.6.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T01:52:34.000000Z"}, {"uuid": "2cf9e7a1-c3f9-4139-8c5a-e3956a3d2a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46377", "type": "seen", "source": "https://t.me/cvedetector/23638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46377 - Apache HTTP Server Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46377 \nPublished : April 24, 2025, 3:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T07:12:39.000000Z"}, {"uuid": "2884bc39-f9de-4d15-8725-a501de59f473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46376", "type": "seen", "source": "https://t.me/cvedetector/23637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46376 - Cisco Webex Meeting Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46376 \nPublished : April 24, 2025, 3:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T07:12:39.000000Z"}, {"uuid": "ee8df0a7-55fa-4869-ba2d-0809dc1710df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46375", "type": "seen", "source": "https://t.me/cvedetector/23636", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46375 - Apache Struts Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46375 \nPublished : April 24, 2025, 3:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T07:12:38.000000Z"}, {"uuid": "11c6d36d-f71c-4254-b099-cdad6ff22bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46417", "type": "seen", "source": "https://t.me/cvedetector/23628", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46417 - Apache Picklescan SSL Exfiltration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46417 \nPublished : April 24, 2025, 1:15 a.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T04:42:06.000000Z"}, {"uuid": "f8b22ebf-972b-43a3-84c5-a35ca8f58e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46419", "type": "seen", "source": "https://t.me/cvedetector/23627", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46419 - Westermo WeOS Reboot Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46419 \nPublished : April 24, 2025, 1:15 a.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T04:42:05.000000Z"}, {"uuid": "01bbd16e-a375-4119-81bd-4d5dc526d1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46223", "type": "seen", "source": "https://t.me/cvedetector/23574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46223 - Apache HTTP Server Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46223 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:23.000000Z"}, {"uuid": "af8c0079-4d72-48c1-8991-00b15287da6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46433", "type": "seen", "source": "https://t.me/cvedetector/23765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46433 - JetBrains TeamCity Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46433 \nPublished : April 25, 2025, 3:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T19:11:10.000000Z"}, {"uuid": "5b1aeeaa-083d-4990-86c7-7f023156daac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46432", "type": "seen", "source": "https://t.me/cvedetector/23764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46432 - JetBrains TeamCity Base64 Credentials Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-46432 \nPublished : April 25, 2025, 3:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T19:11:09.000000Z"}, {"uuid": "816a2965-29c7-4f91-a0fb-f25926a7604a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46613", "type": "seen", "source": "https://t.me/cvedetector/23729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46613 - OpenPLC Server Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2025-46613 \nPublished : April 25, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T09:09:10.000000Z"}, {"uuid": "7f4f4d21-09c4-4498-ba8a-db0f6785f727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46544", "type": "seen", "source": "https://t.me/cvedetector/23727", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46544 - Sherpa Orchestrator Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46544 \nPublished : April 25, 2025, 3:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : In Sherpa Orchestrator 141851, a low-privileged user can elevate their privileges by creating new users and roles. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T07:28:56.000000Z"}, {"uuid": "43cf68d0-a7e7-4b81-af23-f6f08a774bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46595", "type": "seen", "source": "https://t.me/cvedetector/23726", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46595 - Backdrop CMS Flag Module Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46595 \nPublished : April 25, 2025, 3:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a module that allows flags to be added to nodes, comments, users, and any other type of entity. It doesn't verify flag links before performing the flag action, or verify that the response returned was provided by the flag module. This can allow crafted HTML to result in Cross Site Scripting. This is mitigated by the fact that an attacker must have a role with permission to create links on the website, for example: create or edit comments or content with a filtered text format. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T07:28:55.000000Z"}, {"uuid": "46a7a68c-e65c-4fc8-ab5c-6eefb5f16733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46546", "type": "seen", "source": "https://t.me/cvedetector/23725", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46546 - Sherpa Orchestrator Blind SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46546 \nPublished : April 25, 2025, 3:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll, /api/gui/processVersion/export/csv/, /api/gui/processVersion/export/xlsx/, /api/gui/processVersion/list/, /api/gui/robot/list/, /api/gui/task/export/csv/, /api/gui/task/export/xlsx/, and /api/gui/task/list/. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T07:28:54.000000Z"}, {"uuid": "4f3ffa54-6129-4231-99d9-876f28777922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "seen", "source": "https://t.me/cvedetector/23743", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46617 - Quantum StorNext Web GUI API Unauthorized Configuration Access and Modification\", \n  \"Content\": \"CVE ID : CVE-2025-46617 \nPublished : April 25, 2025, 7:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T10:49:38.000000Z"}, {"uuid": "715b4cc7-d43f-482a-add2-a2b5d04cce3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://t.me/cvedetector/23742", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46616 - Quantum StorNext Web GUI API RCE\", \n  \"Content\": \"CVE ID : CVE-2025-46616 \nPublished : April 25, 2025, 7:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T10:49:37.000000Z"}, {"uuid": "ea935127-11a3-4083-a076-b4db20ed6d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46482", "type": "seen", "source": "https://t.me/cvedetector/23738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46482 - MyThemeShop WP Quiz Stored Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46482 \nPublished : April 25, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz allows Stored XSS.This issue affects WP Quiz: from n/a through 2.0.10. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T10:49:31.000000Z"}, {"uuid": "9a97e706-a345-45d1-a9b7-b1018c0db85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46535", "type": "seen", "source": "https://t.me/cvedetector/23737", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46535 - AlphaEfficiencyTeam Custom Login and Registration Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46535 \nPublished : April 25, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T10:49:31.000000Z"}, {"uuid": "c2e86db9-fa2d-4246-865e-01f4327a2167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46599", "type": "seen", "source": "https://t.me/cvedetector/23735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46599 - K3s Kubernetes Kubelet ReadWritePort Remote Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46599 \nPublished : April 25, 2025, 5:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticated access to this port, exposing credentials. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T09:09:17.000000Z"}, {"uuid": "cb883878-2b59-4cd1-8839-070c3653e015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46547", "type": "seen", "source": "https://t.me/cvedetector/23724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46547 - Sherpa Orchestrator Cross-Site Request Forgery (XSS, SQL Injection) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46547 \nPublished : April 25, 2025, 3:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T07:28:54.000000Z"}, {"uuid": "4432d3d8-fbe1-491d-9895-81c5b635103b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46545", "type": "seen", "source": "https://t.me/cvedetector/23723", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46545 - Sherpa Orchestrator Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46545 \nPublished : April 25, 2025, 3:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T07:28:53.000000Z"}, {"uuid": "43cfb433-74a6-4fd8-bca2-cee8311f9893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://t.me/cvedetector/23719", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46275 - Fortinet FortiSwitch Unauthenticated Administrator Account Creation\", \n  \"Content\": \"CVE ID : CVE-2025-46275 \nPublished : April 24, 2025, 11:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could   \nallow an attacker to create an administrator account without knowing any  \n existing credentials. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T03:18:20.000000Z"}, {"uuid": "b88770ab-d923-4910-82f8-d0f4182b293e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://t.me/cvedetector/23718", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46274 - UNI-NMS-Lite Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46274 \nPublished : April 24, 2025, 11:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : UNI-NMS-Lite uses hard-coded credentials that could allow an   \nunauthenticated attacker to read, manipulate and create entries in the   \nmanaged database. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T03:18:19.000000Z"}, {"uuid": "468e8714-e282-42c7-96c6-2fb25e493707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://t.me/cvedetector/23717", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46273 - UNI-NMS-Lite Hard-Coded Credentials Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46273 \nPublished : April 24, 2025, 11:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : UNI-NMS-Lite uses hard-coded credentials that could allow an   \nunauthenticated attacker to gain administrative privileges to all   \nUNI-NMS managed devices. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T03:18:19.000000Z"}, {"uuid": "5b39f9de-7f04-4930-ab94-1759635023c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://t.me/cvedetector/23716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46272 - D-Link Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46272 \nPublished : April 24, 2025, 11:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection   \nattack that could allow an unauthenticated attacker to execute OS   \ncommands on the host system. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T03:18:15.000000Z"}, {"uuid": "b067ff51-87a1-49d8-9e24-45b883dbfc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://t.me/cvedetector/23715", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46271 - UNI-NMS-Lite Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46271 \nPublished : April 24, 2025, 11:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : UNI-NMS-Lite is vulnerable to a command injection attack that could   \nallow an unauthenticated attacker to read or manipulate device data. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T03:18:14.000000Z"}, {"uuid": "b637b988-67b6-4bec-adb1-7c267912eb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46525", "type": "seen", "source": "https://t.me/cvedetector/23694", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46525 - MSMitley WP Cookie Consent Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46525 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in msmitley WP Cookie Consent allows Stored XSS. This issue affects WP Cookie Consent: from n/a through 1.0. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:22.000000Z"}, {"uuid": "98778730-9cea-4fb8-8874-9758c18559fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46519", "type": "seen", "source": "https://t.me/cvedetector/23693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46519 - Michael Revellin-Clerc Media Library Downloader Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46519 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Michael Revellin-Clerc Media Library Downloader allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Library Downloader: from n/a through 1.3.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:21.000000Z"}, {"uuid": "50d8cd97-3c89-421c-86a5-c088202c9e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46524", "type": "seen", "source": "https://t.me/cvedetector/23692", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46524 - Stesvis WordPress CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-46524 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in stesvis WP Filter Post Category allows Stored XSS. This issue affects WP Filter Post Category: from n/a through 2.1.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:20.000000Z"}, {"uuid": "b9ae1bf9-b840-48ce-8245-3e5fdade0363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46523", "type": "seen", "source": "https://t.me/cvedetector/23691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46523 - Devignstudiosltd COVID-19 Update Your Customers Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46523 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devignstudiosltd COVID-19 (Coronavirus) Update Your Customers allows Stored XSS. This issue affects COVID-19 (Coronavirus) Update Your Customers: from n/a through 1.5.1. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:20.000000Z"}, {"uuid": "38a4888d-95be-491a-8b5f-218d0faca4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46522", "type": "seen", "source": "https://t.me/cvedetector/23690", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46522 - Billy Bryant Tabs CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-46522 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Billy Bryant Tabs allows Stored XSS. This issue affects Tabs: from n/a through 4.0.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:16.000000Z"}, {"uuid": "dfc87642-c5c1-4b85-9686-06eb5703ba4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46521", "type": "seen", "source": "https://t.me/cvedetector/23689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46521 - Silver Muru WS Force Stored Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46521 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Silver Muru WS Force Login Page allows Stored XSS. This issue affects WS Force Login Page: from n/a through 3.0.3. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:15.000000Z"}, {"uuid": "3fac3f91-fe7f-4559-8e2f-a67bf88352f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46520", "type": "seen", "source": "https://t.me/cvedetector/23688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46520 - Alphasis Related Posts CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-46520 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in alphasis Related Posts via Taxonomies allows Stored XSS. This issue affects Related Posts via Taxonomies: from n/a through 1.0.1. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:14.000000Z"}, {"uuid": "4d7bd014-804d-43a3-9c95-0a6d3ca29449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46530", "type": "seen", "source": "https://t.me/cvedetector/23687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46530 - HuangYe WuDeng Hacklog Remote Attachment CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-46530 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in HuangYe WuDeng Hacklog Remote Attachment allows Stored XSS. This issue affects Hacklog Remote Attachment: from n/a through 1.3.2. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:14.000000Z"}, {"uuid": "8d33041c-8fc3-4c91-afd3-d100e6e995cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46528", "type": "seen", "source": "https://t.me/cvedetector/23686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46528 - Steve Availability Calendar CSRF Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-46528 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar allows Stored XSS. This issue affects Availability Calendar: from n/a through 0.2.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:13.000000Z"}, {"uuid": "a894e985-1f1c-4953-b0df-6b3d0b050285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46536", "type": "seen", "source": "https://t.me/cvedetector/23685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46536 - RichardHarrison Carousel-of-post-images Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46536 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RichardHarrison Carousel-of-post-images allows DOM-Based XSS. This issue affects Carousel-of-post-images: from n/a through 1.07. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:09.000000Z"}, {"uuid": "2255cd61-c6f7-419a-ba21-33e86dbc87e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46534", "type": "seen", "source": "https://t.me/cvedetector/23684", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46534 - DanielRiera Image Style Hover DOM-Based Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46534 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DanielRiera Image Style Hover allows DOM-Based XSS. This issue affects Image Style Hover: from n/a through 1.0.6. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:08.000000Z"}, {"uuid": "e4105e45-8070-4f80-82b7-fb407a353747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46533", "type": "seen", "source": "https://t.me/cvedetector/23683", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46533 - WordPress wpdrift.no Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-46533 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdrift.no Landing pages and Domain aliases for WordPress allows Stored XSS. This issue affects Landing pages and Domain aliases for WordPress: from n/a through 0.8. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:08.000000Z"}, {"uuid": "649c5b58-b471-46a8-92d4-499d6b5d5324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46532", "type": "seen", "source": "https://t.me/cvedetector/23682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46532 - Haris Zulfiqar Tooltip Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-46532 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Haris Zulfiqar Tooltip allows DOM-Based XSS. This issue affects Tooltip: from n/a through 1.0.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:07.000000Z"}, {"uuid": "7d257fe1-4a8b-48a5-9008-fd1a8cc68c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46531", "type": "seen", "source": "https://t.me/cvedetector/23681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46531 - Ankur Vishwakarma WP AVCL Automation Helper SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46531 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Server-Side Request Forgery (SSRF) vulnerability in Ankur Vishwakarma WP AVCL Automation Helper (formerly WPFlyLeads) allows Server Side Request Forgery. This issue affects WP AVCL Automation Helper (formerly WPFlyLeads): from n/a through 3.4. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:06.000000Z"}, {"uuid": "855bbdd3-cf05-45f6-bb38-28d2e4629369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46529", "type": "seen", "source": "https://t.me/cvedetector/23680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46529 - StressFree Sites Business Contact Widget Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46529 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StressFree Sites Business Contact Widget allows Stored XSS. This issue affects Business Contact Widget: from n/a through 2.7.0. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:03.000000Z"}, {"uuid": "2caf1e1e-b2b8-4955-a700-14c3a40da2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46542", "type": "seen", "source": "https://t.me/cvedetector/23679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46542 - ThemeXpert Xpert Tab Stored Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46542 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeXpert Xpert Tab allows Stored XSS. This issue affects Xpert Tab: from n/a through 1.3. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:02.000000Z"}, {"uuid": "724edd42-2f01-4175-9f2f-b6cf216ed007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46540", "type": "seen", "source": "https://t.me/cvedetector/23678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46540 - Chris Mok GNA Search Shortcode Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46540 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Mok GNA Search Shortcode allows Stored XSS. This issue affects GNA Search Shortcode: from n/a through 0.9.5. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:01.000000Z"}, {"uuid": "fc68b5ee-9ae4-4525-93ca-e430ac55f994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46538", "type": "seen", "source": "https://t.me/cvedetector/23677", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46538 - Webplanetsoft Inline Text Popup Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46538 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webplanetsoft Inline Text Popup allows DOM-Based XSS. This issue affects Inline Text Popup: from n/a through 1.0.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:00.000000Z"}, {"uuid": "3b7e07a1-035a-41ff-8142-c41c2171b354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46541", "type": "seen", "source": "https://t.me/cvedetector/23676", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46541 - Elrata WP-reCAPTCHA-bp Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-46541 \nPublished : April 24, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elrata_ WP-reCAPTCHA-bp allows Stored XSS. This issue affects WP-reCAPTCHA-bp: from n/a through 4.1. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T18:55:00.000000Z"}, {"uuid": "fc24e83f-c23f-45aa-817f-0e7764851275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46421", "type": "seen", "source": "https://t.me/cvedetector/23675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46421 - Apache Libsoup HTTP Authorization Header Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46421 \nPublished : April 24, 2025, 1:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T17:14:41.000000Z"}, {"uuid": "37f37860-4fce-4603-bd46-fb1682996840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46420", "type": "seen", "source": "https://t.me/cvedetector/23674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46420 - Libsoup Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46420 \nPublished : April 24, 2025, 1:15 p.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T17:14:41.000000Z"}, {"uuid": "fa44ef03-4ba7-417a-9314-28f3d1579806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46398", "type": "seen", "source": "https://t.me/cvedetector/23621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46398 - Fig2Dev Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46398 \nPublished : April 23, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Stack-overflow\u00a0in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via read_objects function. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T00:31:14.000000Z"}, {"uuid": "f38407ff-99f6-4902-8a4c-1c3b486fe216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46397", "type": "seen", "source": "https://t.me/cvedetector/23620", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46397 - \"Fig2Dev Bezier Spline Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-46397 \nPublished : April 23, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Stack-overflow\u00a0in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezier_spline function. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T00:31:13.000000Z"}, {"uuid": "114789b6-da5b-43ea-a021-ccfb4bba4a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46374", "type": "seen", "source": "https://t.me/cvedetector/23635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46374 - Apache HTTP Server Cross-Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2025-46374 \nPublished : April 24, 2025, 3:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T07:12:34.000000Z"}, {"uuid": "3185cadf-e8ce-4c8c-a185-7943216f0e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46399", "type": "seen", "source": "https://t.me/cvedetector/23619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46399 - Fig2Dev Genge Itp Spline Segmentation Fault\", \n  \"Content\": \"CVE ID : CVE-2025-46399 \nPublished : April 23, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Segmentation fault in fig2dev in version 3.2.9a\u00a0allows an attacker to availability via local input manipulation via\u00a0genge_itp_spline function. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T00:31:12.000000Z"}, {"uuid": "bfee3836-2162-4261-b35a-838614464753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46400", "type": "seen", "source": "https://t.me/cvedetector/23618", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46400 - Fig2dev ArcObject Segmentation Fault Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46400 \nPublished : April 23, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via read_arcobject function. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T00:31:12.000000Z"}, {"uuid": "36755e34-c194-47c1-86ec-11d83c0e7645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46222", "type": "seen", "source": "https://t.me/cvedetector/23573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46222 - Apache HTTP Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46222 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:23.000000Z"}, {"uuid": "edc90984-83a6-4210-9735-ba2d858fcf8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46221", "type": "seen", "source": "https://t.me/cvedetector/23572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46221 - Apache HTTP Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46221 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:22.000000Z"}, {"uuid": "095616e6-e7e7-413f-8837-5b2c3af22b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46220", "type": "seen", "source": "https://t.me/cvedetector/23571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46220 - Apache HTTP Server Unvalidated User Input\", \n  \"Content\": \"CVE ID : CVE-2025-46220 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:21.000000Z"}, {"uuid": "254eccf6-1728-452e-bfa3-cd51b77af625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46218", "type": "seen", "source": "https://t.me/cvedetector/23570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46218 - Microsoft Azure AD Authentication\", \n  \"Content\": \"CVE ID : CVE-2025-46218 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:18.000000Z"}, {"uuid": "019ef84f-73f6-4f95-a2ee-6cba9d05cc35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46219", "type": "seen", "source": "https://t.me/cvedetector/23569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46219 - Apache HTTP Server Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46219 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:17.000000Z"}, {"uuid": "43a50b75-ba25-4873-a26a-01a0074f4576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46216", "type": "seen", "source": "https://t.me/cvedetector/23568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46216 - Apache HTTP Server HTTP Request Smuggling\", \n  \"Content\": \"CVE ID : CVE-2025-46216 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:16.000000Z"}, {"uuid": "db174536-3802-426d-bf01-1b8d1580f195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46217", "type": "seen", "source": "https://t.me/cvedetector/23567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46217 - Apache HTTP Server Cross-Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2025-46217 \nPublished : April 23, 2025, 3:15 a.m. | 54\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T06:57:16.000000Z"}, {"uuid": "04a6ada0-bc7a-4899-9cf2-0c54859dc1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46240", "type": "seen", "source": "https://t.me/cvedetector/23505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46240 - Simple Download Counter Stored Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46240 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Download Counter allows Stored XSS. This issue affects Simple Download Counter: from n/a through 2.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:37.000000Z"}, {"uuid": "bc079ae5-3b09-46ef-b50f-246cbacd8729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46239", "type": "seen", "source": "https://t.me/cvedetector/23504", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46239 - Theme Switcha Cross-site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46239 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Theme Switcha allows Stored XSS. This issue affects Theme Switcha: from n/a through 3.4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:37.000000Z"}, {"uuid": "fe62802c-18db-4864-9444-67dbf05ab00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46238", "type": "seen", "source": "https://t.me/cvedetector/23503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46238 - Apache RBAER Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46238 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rbaer List Last Changes allows Stored XSS. This issue affects List Last Changes: from n/a through 1.2.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:36.000000Z"}, {"uuid": "e598712b-90dd-431c-b181-a3d787518961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46233", "type": "seen", "source": "https://t.me/cvedetector/23510", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46233 - Sirv CDN and Image Hosting Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46233 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv allows Stored XSS. This issue affects Sirv: from n/a through 7.5.3. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:44.000000Z"}, {"uuid": "4269e6b5-3aeb-4872-9b5c-257247799d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46232", "type": "seen", "source": "https://t.me/cvedetector/23509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46232 - Alt Text AI Missing Authorization\", \n  \"Content\": \"CVE ID : CVE-2025-46232 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Missing Authorization vulnerability in alttextai Download Alt Text AI allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Download Alt Text AI: from n/a through 1.9.93. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:43.000000Z"}, {"uuid": "5bb8753e-06fd-471b-97f0-47cd2d90c682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46231", "type": "seen", "source": "https://t.me/cvedetector/23508", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46231 - SERVIT Software Solutions Affiliate-Toolkit CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46231 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in SERVIT Software Solutions affiliate-toolkit allows Cross Site Request Forgery. This issue affects affiliate-toolkit: from n/a through 3.7.3. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:42.000000Z"}, {"uuid": "84522aa4-5eff-4a6f-8e3a-4d3277c87559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46241", "type": "seen", "source": "https://t.me/cvedetector/23507", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46241 - Codepeople Appointment Booking Calendar CSRF-Enabled SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46241 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar allows SQL Injection. This issue affects Appointment Booking Calendar: from n/a through 1.3.92. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:42.000000Z"}, {"uuid": "2a99d8f6-a40c-4a3d-8342-6b2ec077a3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46237", "type": "seen", "source": "https://t.me/cvedetector/23506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46237 - Yannick Lefebvre Link Library Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46237 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Stored XSS. This issue affects Link Library: from n/a through 7.8. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:41.000000Z"}, {"uuid": "912acca6-7864-4660-9468-8d10358c1863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46246", "type": "seen", "source": "https://t.me/cvedetector/23502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46246 - CM Answers CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-46246 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Answers allows Cross Site Request Forgery. This issue affects CM Answers: from n/a through 3.3.3. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:35.000000Z"}, {"uuid": "06d85338-79ef-4b76-80c6-d4645b8616e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46245", "type": "seen", "source": "https://t.me/cvedetector/23501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46245 - CreativeMindsSolutions CM Ad Changer CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46245 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Ad Changer allows Cross Site Request Forgery. This issue affects CM Ad Changer: from n/a through 2.0.5. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:34.000000Z"}, {"uuid": "818740e7-b5b8-4464-bf2d-fc02684d8223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46244", "type": "seen", "source": "https://t.me/cvedetector/23500", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46244 - Dotstore Advanced Linked Variations for Woocommerce Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46244 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Linked Variations for Woocommerce: from n/a through 1.0.3. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:30.000000Z"}, {"uuid": "f3d49eda-fb13-4c01-a959-4a94cbcea59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46243", "type": "seen", "source": "https://t.me/cvedetector/23499", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46243 - Sonalsinha21 WooCommerce Recover Abandoned Cart CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-46243 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce allows Cross Site Request Forgery. This issue affects Recover abandoned cart for WooCommerce: from n/a through 2.2. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:30.000000Z"}, {"uuid": "b2df9c47-fc38-40ec-b5ca-7099cf8f8c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46242", "type": "seen", "source": "https://t.me/cvedetector/23498", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46242 - Watu Quiz SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46242 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz allows SQL Injection. This issue affects Watu Quiz: from n/a through 3.4.3. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:29.000000Z"}, {"uuid": "dc8a330b-81ff-4132-ae41-cd7d146d238e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46252", "type": "seen", "source": "https://t.me/cvedetector/23497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46252 - Contact Form 7 SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46252 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kofimokome Message Filter for Contact Form 7 allows SQL Injection. This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3.2. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:28.000000Z"}, {"uuid": "18d30240-44cd-41c5-a4eb-cac1ab962df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46251", "type": "seen", "source": "https://t.me/cvedetector/23496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46251 - VikRestaurants Table Reservations and Take-Away CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-46251 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRestaurants Table Reservations and Take-Away allows Cross Site Request Forgery. This issue affects VikRestaurants Table Reservations and Take-Away: from n/a through 1.3.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:27.000000Z"}, {"uuid": "468f74d1-b155-4c1e-85b7-297e3b449570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46250", "type": "seen", "source": "https://t.me/cvedetector/23495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46250 - Vikas Ratudi VForm Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-46250 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Stored XSS. This issue affects VForm: from n/a through 3.1.14. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:23.000000Z"}, {"uuid": "081f378e-1585-451f-90e9-94271fb9aeae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46249", "type": "seen", "source": "https://t.me/cvedetector/23494", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46249 - Elementor Simple Calendar CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-46249 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor allows Cross Site Request Forgery. This issue affects Simple calendar for Elementor: from n/a through 1.6.4. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:23.000000Z"}, {"uuid": "6f3e16b4-b570-4d86-8181-3cfc5a3e5f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46247", "type": "seen", "source": "https://t.me/cvedetector/23493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46247 - Codepeople Appointment Booking Calendar Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46247 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Missing Authorization vulnerability in codepeople Appointment Booking Calendar allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Appointment Booking Calendar: from n/a through 1.3.92. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:22.000000Z"}, {"uuid": "ae701118-d2d9-403b-a2ff-2b39ff1ee94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46253", "type": "seen", "source": "https://t.me/cvedetector/23492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46253 - Ataur GutenKit Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-46253 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit allows Stored XSS. This issue affects GutenKit: from n/a through 2.2.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:21.000000Z"}, {"uuid": "a5457302-0a05-43d9-85e5-d929af42ac44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46254", "type": "seen", "source": "https://t.me/cvedetector/23491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46254 - Visual Composer Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-46254 \nPublished : April 22, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through 45.10.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T14:13:20.000000Z"}, {"uuid": "0e82fd95-db7d-4579-8496-0758982c3998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46781", "type": "seen", "source": "https://t.me/cvedetector/24067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46781 - Apache OpenOffice Insufficient Input Validation\", \n  \"Content\": \"CVE ID : CVE-2025-46781 \nPublished : April 30, 2025, 3:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T07:53:00.000000Z"}, {"uuid": "7c28334b-21c1-41d3-be78-afcf9535bbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46558", "type": "seen", "source": "https://t.me/cvedetector/24136", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46558 - XWiki Contrib Markdown XSS\", \n  \"Content\": \"CVE ID : CVE-2025-46558 \nPublished : April 30, 2025, 7:15 p.m. | 37\u00a0minutes ago \nDescription : XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting (XSS) through HTML. In particular, using Markdown syntax, it's possible for any user to embed Javascript code that will then be executed on the browser of any other user visiting either the document or the comment that contains it. In the instance that this code is executed by a user with admins or programming rights, this issue compromises the confidentiality, integrity and availability of the whole XWiki installation. This issue has been patched in version 8.9. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T22:06:04.000000Z"}, {"uuid": "2acff4e0-7374-400b-beb5-aa57d60c6464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46557", "type": "seen", "source": "https://t.me/cvedetector/24131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46557 - XWiki Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46557 \nPublished : April 30, 2025, 7:15 p.m. | 37\u00a0minutes ago \nDescription : XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to before 16.10.0-rc-1, a user who can access pages located in the XWiki space (by default, anyone) can access the page XWiki.Authentication.Administration and (unless an authenticator is set in xwiki.cfg) switch to another installed authenticator. Note that, by default, there is only one authenticator available (Standard XWiki Authenticator). So, if no authenticator extension was installed, it's not really possible to do anything for an attacker. Also, in most cases, if an SSO authenticator is installed and utilized (like OIDC or LDAP for example), the worst an attacker can do is break authentication by switching back to the standard authenticator (that's because it's impossible to login to a user which does not have a stored password, and that's usually what SSO authenticator produce). This issue has been patched in versions 15.10.14, 16.4.6, and 16.10.0-rc-1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T22:05:57.000000Z"}, {"uuid": "3937f471-3b70-4cbf-92b8-91c680677712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46342", "type": "seen", "source": "https://t.me/cvedetector/24108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46342 - Kyverno Namespace Selector Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46342 \nPublished : April 30, 2025, 3:16 p.m. | 28\u00a0minutes ago \nDescription : Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.13.5 and 1.14.0, it may happen that policy rules using namespace selector(s) in their match statements are mistakenly not applied during admission review request processing due to a missing error propagation in function `GetNamespaceSelectorsFromNamespaceLister` in `pkg/utils/engine/labels.go`. As a consequence, security-critical mutations and validations are bypassed, potentially allowing attackers with K8s API access to perform malicious operations. This issue has been patched in versions 1.13.5 and 1.14.0. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:07.000000Z"}, {"uuid": "660171a3-659d-458a-9490-c41ecd9ffe36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46619", "type": "seen", "source": "https://t.me/cvedetector/24140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46619 - Couchbase Server File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46619 \nPublished : April 30, 2025, 6:15 p.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T22:06:10.000000Z"}, {"uuid": "c96b2c0e-c552-43a9-a670-23ff113c6779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46554", "type": "seen", "source": "https://t.me/cvedetector/24135", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46554 - XWiki Unauthenticated Attachment Metadata Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46554 \nPublished : April 30, 2025, 7:15 p.m. | 37\u00a0minutes ago \nDescription : XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.7.0, anyone can access the metadata of any attachment in the wiki using the wiki attachment REST endpoint. There is no filtering for the results depending on current user rights, meaning an unauthenticated user could exploit this even in a private wiki. This issue has been patched in versions 14.10.22, 15.10.12, 16.4.3, and 16.7.0. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T22:06:03.000000Z"}, {"uuid": "ea4379fe-35be-49dc-a05e-39f972db486d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46331", "type": "seen", "source": "https://t.me/cvedetector/24134", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46331 - OpenFGA Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46331 \nPublished : April 30, 2025, 7:15 p.m. | 37\u00a0minutes ago \nDescription : OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.10 to v1.3.6 (Helm chart <=<=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T22:05:59.000000Z"}, {"uuid": "c17ae02c-541f-4ae1-862f-b3d1e9c6688a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46761", "type": "seen", "source": "https://t.me/cvedetector/23967", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46761 - Apache HTTP Server Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-46761 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:45.000000Z"}, {"uuid": "3cfae0ff-a797-47b4-ad35-203e2d6a3b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46344", "type": "seen", "source": "https://t.me/cvedetector/24058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46344 - Auth0 Next.js SDK: JWE Token Expiration Claim Omission\", \n  \"Content\": \"CVE ID : CVE-2025-46344 \nPublished : April 29, 2025, 9:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke `.setExpirationTime` when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While the session cookie may expire or be cleared, the JWE remains valid. This issue has been patched in version 4.5.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T01:11:59.000000Z"}, {"uuid": "3b5f6e57-df74-49c7-9a96-ad72b61e2d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46550", "type": "seen", "source": "https://t.me/cvedetector/24055", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46550 - YesWiki Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46550 \nPublished : April 29, 2025, 9:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` endpoint and `idformulaire` parameter are vulnerable to cross-site scripting. An attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user\u2019s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T01:11:54.000000Z"}, {"uuid": "bdcc9d95-4753-4429-b319-7fd05bf881ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46549", "type": "seen", "source": "https://t.me/cvedetector/24054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46549 - YesWiki Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46549 \nPublished : April 29, 2025, 9:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user\u2019s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T01:11:53.000000Z"}, {"uuid": "9bec79d3-4436-44af-89f5-d52b03c32bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46349", "type": "seen", "source": "https://t.me/cvedetector/24040", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46349 - YesWiki Reflected Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46349 \nPublished : April 29, 2025, 6:15 p.m. | 39\u00a0minutes ago \nDescription : YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file upload form. This vulnerability allows any malicious unauthenticated user to create a link that can be clicked on by the victim to perform arbitrary actions. This issue has been patched in version 4.5.4. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T21:01:13.000000Z"}, {"uuid": "ee4908c5-a075-4602-9f67-267903790b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46348", "type": "seen", "source": "https://t.me/cvedetector/24053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46348 - YesWiki Unauthenticated Archive Creation and Download Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46348 \nPublished : April 29, 2025, 9:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the request to commence a site backup can be performed and downloaded without authentication. The archives are created with a predictable filename, so a malicious user could create and download an archive without being authenticated. This could result in a malicious attacker making numerous requests to create archives and fill up the file system, or by downloading the archive which contains sensitive site information. This issue has been patched in version 4.5.4. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T01:11:53.000000Z"}, {"uuid": "05927835-647c-46cf-acda-bb1bab981e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46782", "type": "seen", "source": "https://t.me/cvedetector/24070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46782 - Apache HTTP Server Unvalidated Request Parameter\", \n  \"Content\": \"CVE ID : CVE-2025-46782 \nPublished : April 30, 2025, 3:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T07:53:02.000000Z"}, {"uuid": "1b179920-a61a-4e83-beaf-1e2b88f8735f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46780", "type": "seen", "source": "https://t.me/cvedetector/24069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46780 - Apache HTTP Server Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-46780 \nPublished : April 30, 2025, 3:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T07:53:01.000000Z"}, {"uuid": "927e138d-40c6-4d89-8b16-49ba74899fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46779", "type": "seen", "source": "https://t.me/cvedetector/24068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46779 - Apache HTTP Server HTTP Header Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46779 \nPublished : April 30, 2025, 3:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T07:53:00.000000Z"}, {"uuid": "a646f7bf-c8bf-45e1-add3-ddc64b585d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46560", "type": "seen", "source": "https://t.me/cvedetector/24063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46560 - LLaMA LLM Multimodal Tokenizer Resource Exhaustion\", \n  \"Content\": \"CVE ID : CVE-2025-46560 \nPublished : April 30, 2025, 1:15 a.m. | 2\u00a0hours ago \nDescription : vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a critical performance vulnerability in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens (e.g., <|audio_|, <|image_|) with repeated tokens based on precomputed lengths. Due to \u200b\u200binefficient list concatenation operations\u200b\u200b, the algorithm exhibits \u200b\u200bquadratic time complexity (O(n\u00b2))\u200b\u200b, allowing malicious actors to trigger resource exhaustion via specially crafted inputs. This issue has been patched in version 0.8.5. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T05:22:33.000000Z"}, {"uuid": "5c9da94a-1631-4e23-931f-b859cab2b405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46552", "type": "seen", "source": "https://t.me/cvedetector/24061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46552 - GitHub KHC-INVITATION-AUTOMATION Unauthenticated User Data Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46552 \nPublished : April 29, 2025, 11:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : KHC-INVITATION-AUTOMATION is a GitHub automation script that automatically invites followers of a bot account to join your organization. In some commits on version 1.2, a vulnerability was identified where user data, including email addresses and Discord usernames, were exposed in API responses without proper access controls. This allowed unauthorized users to access sensitive user information by directly calling specific endpoints. This issue has been patched in a later commit on version 1.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T03:42:21.000000Z"}, {"uuid": "af49376b-5102-49c6-b600-23a3f8838263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46347", "type": "seen", "source": "https://t.me/cvedetector/24039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46347 - YesWiki Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46347 \nPublished : April 29, 2025, 6:15 p.m. | 39\u00a0minutes ago \nDescription : YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki vulnerable to remote code execution. An arbitrary file write can be used to write a file with a PHP extension, which then can be browsed to in order to execute arbitrary code on the server, resulting in a full compromise of the server. This could potentially be performed unwittingly by a user. This issue has been patched in version 4.5.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T21:01:12.000000Z"}, {"uuid": "aaac632f-02fb-4950-ac77-6b8e09a41d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46350", "type": "seen", "source": "https://t.me/cvedetector/24041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46350 - YesWiki Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46350 \nPublished : April 29, 2025, 6:15 p.m. | 39\u00a0minutes ago \nDescription : YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user\u2019s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T21:01:13.000000Z"}, {"uuid": "7c20fd5e-c1ea-4107-b3af-05b67844454f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46754", "type": "seen", "source": "https://t.me/cvedetector/23959", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46754 - Apache HTTP Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46754 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:37.000000Z"}, {"uuid": "1a3463ba-3a2f-4ab3-8d35-ee25691cb57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46328", "type": "seen", "source": "https://t.me/cvedetector/23957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46328 - Snowflake-Connector-Nodejs TOCTOU Race Condition Local File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46328 \nPublished : April 28, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 2.0.4. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T02:36:58.000000Z"}, {"uuid": "9825c850-72b8-4a17-adf9-5a5582fe1dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46327", "type": "seen", "source": "https://t.me/cvedetector/23956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46327 - Snowflake Golang Driver Local File Configuration TOCTOU\", \n  \"Content\": \"CVE ID : CVE-2025-46327 \nPublished : April 28, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 1.13.3. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T02:36:57.000000Z"}, {"uuid": "9d2caf29-49c9-4184-8987-970322165e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46346", "type": "seen", "source": "https://t.me/cvedetector/24022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46346 - YesWiki Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46346 \nPublished : April 29, 2025, 4:15 p.m. | 30\u00a0minutes ago \nDescription : YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting (XSS) vulnerability was discovered in the application\u2019s comments feature. This issue allows a malicious actor to inject JavaScript payloads that are stored and later executed in the browser of any user viewing the affected comment. The XSS occurs because the application fails to properly sanitize or encode user input submitted to the comments. Notably, the application sanitizes or does not allow execution of `\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T19:20:38.000000Z"}, {"uuid": "2c66a2e6-9f2f-4d2a-9b13-27bbafd221bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46330", "type": "seen", "source": "https://t.me/cvedetector/23982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46330 - Snowflake libsnowflakeclient HTTP Request Retry Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-46330 \nPublished : April 29, 2025, 5:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T08:28:16.000000Z"}, {"uuid": "5dfd5fe4-d99f-48fb-a9c8-cb8a3c8b5d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46329", "type": "seen", "source": "https://t.me/cvedetector/23981", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46329 - Snowflake libsnowflakeclient Sensitive Information Logging\", \n  \"Content\": \"CVE ID : CVE-2025-46329 \nPublished : April 29, 2025, 5:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server-side by Snowflake. This issue has been patched in version 2.2.0. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T08:28:15.000000Z"}, {"uuid": "3aa4084c-593e-48c8-9ee9-f49c286f906b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46757", "type": "seen", "source": "https://t.me/cvedetector/23962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46757 - Adobe Acrobat Deserialization\", \n  \"Content\": \"CVE ID : CVE-2025-46757 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:39.000000Z"}, {"uuid": "2b3e2da9-6b5b-4d0e-a25f-1bac28dff9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46755", "type": "seen", "source": "https://t.me/cvedetector/23961", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46755 - Apache HTTP Server SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46755 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:38.000000Z"}, {"uuid": "76677ab3-5429-47e2-b057-dbb9658d0eff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46756", "type": "seen", "source": "https://t.me/cvedetector/23960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46756 - Apache HTTP Server Unvalidated User Input\", \n  \"Content\": \"CVE ID : CVE-2025-46756 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:37.000000Z"}, {"uuid": "5da2fbce-ae0b-40b4-9da1-91d837fab598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46753", "type": "seen", "source": "https://t.me/cvedetector/23965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46753 - Cisco Webex Meeting Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46753 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:44.000000Z"}, {"uuid": "5c9853ba-93e4-472a-9a80-463f5d532ff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46758", "type": "seen", "source": "https://t.me/cvedetector/23963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46758 - Apache HTTP Server Arbitrary File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46758 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:39.000000Z"}, {"uuid": "fd7682a0-2601-431b-888f-8712915fdca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46338", "type": "seen", "source": "https://t.me/cvedetector/23980", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46338 - Audiobookshelf Reflected Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46338 \nPublished : April 29, 2025, 5:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the `/api/upload` endpoint allows an attacker to perform a reflected cross-site scripting (XSS) attack by submitting malicious payloads in the `libraryId` field. The unsanitized input is reflected in the server\u2019s error message, enabling arbitrary JavaScript execution in a victim's browser. This issue has been patched in version 2.21.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T08:28:15.000000Z"}, {"uuid": "11a9e112-33f0-4634-b9ce-688c99586380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46343", "type": "seen", "source": "https://t.me/cvedetector/23979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46343 - n8n Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46343 \nPublished : April 29, 2025, 5:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting (XSS) through the attachments view endpoint. n8n workflows can store and serve binary files, which are accessible to authenticated users. However, there is no restriction on the MIME type of uploaded files, and the MIME type could be controlled via a GET parameter. This allows the server to respond with any MIME type, potentially enabling malicious content to be interpreted and executed by the browser. An authenticated attacker with member-level permissions could exploit this by uploading a crafted HTML file containing malicious JavaScript. When another user visits the binary data endpoint with the MIME type set to text/html, the script executes in the context of the user\u2019s session. This script could send a request to change the user\u2019s email address in their account settings, effectively enabling account takeover. This issue has been patched in version 1.90.0. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T08:28:14.000000Z"}, {"uuid": "54cd617b-9855-498b-a44f-7d354191943a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46760", "type": "seen", "source": "https://t.me/cvedetector/23968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46760 - Apache HTTP Server Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46760 \nPublished : April 29, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T06:47:46.000000Z"}, {"uuid": "49a4fd7b-e89e-4d7e-99fb-8104b1cbecd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46326", "type": "seen", "source": "https://t.me/cvedetector/23955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46326 - Snowflake-Connector-Net TOCTOU Race Condition Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46326 \nPublished : April 28, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads logging configuration from a user-provided file. On Linux and macOS, the Connector verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Connector. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 4.4.1. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T02:36:57.000000Z"}, {"uuid": "f0cda18d-b9e5-4143-8b9a-f25ef7cea3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/cibsecurity/84762", "content": "\ud83d\udd8b\ufe0f Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit \ud83d\udd8b\ufe0f\n\nSamsung has released software updates to address a critical security flaw in MagicINFO 9 Server that has been actively exploited in the wild. The vulnerability, tracked as CVE20254632 CVSS score 9.8, has been described as a path traversal flaw. \"Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-05-14T21:50:49.000000Z"}, {"uuid": "37fae475-ea77-40f5-b47b-2d7c450b2dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/cibsecurity/84761", "content": "\ud83d\udd8b\ufe0f Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit \ud83d\udd8b\ufe0f\n\nSamsung has released software updates to address a critical security flaw in MagicINFO 9 Server that has been actively exploited in the wild. The vulnerability, tracked as CVE20254632 CVSS score 9.8, has been described as a path traversal flaw. \"Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-05-14T21:50:49.000000Z"}, {"uuid": "49e0288b-278d-4c12-9e8d-c748f49121e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/cibsecurity/84760", "content": "\ud83d\udd8b\ufe0f Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit \ud83d\udd8b\ufe0f\n\nSamsung has released software updates to address a critical security flaw in MagicINFO 9 Server that has been actively exploited in the wild. The vulnerability, tracked as CVE20254632 CVSS score 9.8, has been described as a path traversal flaw. \"Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-05-14T21:05:52.000000Z"}, {"uuid": "dcdd7605-8f5a-43b1-b46c-2c28f704d315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/4148", "content": "Google Chrome Zero-Day Vulnerability (CVE-2025-4664) Actively Exploited in The Wild \u2013 gbhackers.com\n\nThu, 15 May 2025 14:25:12", "creation_timestamp": "2025-05-15T10:03:13.000000Z"}, {"uuid": "e67038d4-c83d-425c-a959-44fc0d1c41b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/4144", "content": "Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit \u2013 thehackernews.com\n\nThu, 15 May 2025 01:57:00", "creation_timestamp": "2025-05-14T22:03:33.000000Z"}, {"uuid": "44d380c4-eceb-4bcc-a586-444d182fcc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://t.me/CyberBulletin/3191", "content": "\u26a1\ufe0fCVE-2025-46762: Apache Parquet Java Flaw Allows Potential RCE via Avro Schema.\n\n#CyberBulletin", "creation_timestamp": "2025-05-05T06:59:22.000000Z"}, {"uuid": "6c553f47-ebc3-413e-8f0f-0dc14f3f0387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/CyberBulletin/3266", "content": "\u26a1\ufe0fSamsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit.\n\n#CyberBulletin", "creation_timestamp": "2025-05-15T05:09:07.000000Z"}, {"uuid": "05485960-4127-4a99-a7bb-58a2e6fa4c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "seen", "source": "https://t.me/CyberBulletin/3190", "content": "\u26a1\ufe0fCritical SQL Injection Vulnerability Found in ADOdb PHP Library \u2013 CVE-2025-46337 (CVSS 10.0).\n\n#CyberBulletin", "creation_timestamp": "2025-05-05T06:58:50.000000Z"}, {"uuid": "5b28782c-9baf-48ca-affe-886b80414def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/12956", "content": "Google Chrome Zero-Day Vulnerability (CVE-2025-4664) Actively Exploited in The Wild \u2013 gbhackers.com\n\nThu, 15 May 2025 14:25:12", "creation_timestamp": "2025-05-15T10:03:13.000000Z"}, {"uuid": "02522b7b-d69d-45b1-b82d-1a58c639914e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/12950", "content": "Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit \u2013 thehackernews.com\n\nThu, 15 May 2025 01:57:00", "creation_timestamp": "2025-05-14T22:03:33.000000Z"}, {"uuid": "b1dea0c9-bac1-46e4-85ac-b9d25a388fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46661", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/16546", "content": "\ud83d\udea8IPW Systems Metazo Vulnerability (CVE-2025-46661) Leads to Remote Code Execution via Template Injection\n\nCVSS: 10\n\nhttps://darkwebinformer.com/ipw-systems-metazo-vulnerability-cve-2025-46661-leads-to-remote-code-execution-via-template-injection/", "creation_timestamp": "2025-04-28T18:27:15.000000Z"}, {"uuid": "eb6e8531-956c-4e87-b9ea-defa42630c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/30991", "content": "Google Chrome Zero-Day Vulnerability (CVE-2025-4664) Actively Exploited in The Wild \u2013 gbhackers.com\n\nThu, 15 May 2025 14:25:12", "creation_timestamp": "2025-05-15T10:03:14.000000Z"}, {"uuid": "48b1034d-d838-48c8-9790-ea198445e494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/30984", "content": "Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit \u2013 thehackernews.com\n\nThu, 15 May 2025 01:57:00", "creation_timestamp": "2025-05-14T22:03:33.000000Z"}, {"uuid": "375cba1b-42c1-43a4-b370-1d92dfcc6484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46731", "type": "published-proof-of-concept", "source": "Telegram/FuukJpUcWm8W7_orzQKqRLhyowzFyoFldGzWwBVSPpd5oCA", "content": "", "creation_timestamp": "2025-05-05T22:30:27.000000Z"}, {"uuid": "46366d66-5df2-4007-9775-2482c32aac90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "published-proof-of-concept", "source": "Telegram/h03BTlMVhsmhX6D7e2vIwa5HqRH7sazB1QZ_U1Au3scT3K4", "content": "", "creation_timestamp": "2025-04-25T10:01:15.000000Z"}, {"uuid": "4a7ba73e-aa84-480c-bf4b-34612fdd1db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46617", "type": "published-proof-of-concept", "source": "Telegram/h03BTlMVhsmhX6D7e2vIwa5HqRH7sazB1QZ_U1Au3scT3K4", "content": "", "creation_timestamp": "2025-04-25T10:01:15.000000Z"}, {"uuid": "7a4df783-356d-40c7-b66b-6ad96b2fa24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46613", "type": "published-proof-of-concept", "source": "Telegram/8IwoWhZiAKbxjTlupBuXAluwjHl4CX-wAHfegaA8FtN0PbQ", "content": "", "creation_timestamp": "2025-04-25T09:00:38.000000Z"}, {"uuid": "73fb10a8-3b48-4224-90d0-d9fc1b0e9659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46397", "type": "published-proof-of-concept", "source": "Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0", "content": "", "creation_timestamp": "2025-04-24T00:02:03.000000Z"}, {"uuid": "adb78172-cfa3-4d7e-83bd-597379107246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46399", "type": "published-proof-of-concept", "source": "Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0", "content": "", "creation_timestamp": "2025-04-24T00:02:03.000000Z"}, {"uuid": "efe54c7d-4753-465d-9b6a-667ffb92691c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46400", "type": "published-proof-of-concept", "source": "Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0", "content": "", "creation_timestamp": "2025-04-24T00:02:03.000000Z"}, {"uuid": "f6b69b51-163b-434f-aad3-f07a15ef26f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46398", "type": "published-proof-of-concept", "source": "Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0", "content": "", "creation_timestamp": "2025-04-24T00:02:03.000000Z"}, {"uuid": "c4a7bafe-0256-4015-aa65-da6b2097e659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "published-proof-of-concept", "source": "Telegram/1FV0UW2Z7W3H1vZoLEV9oM9fSUQeb1XYT1w5GFoaXzZGsuI", "content": "", "creation_timestamp": "2025-05-08T09:00:07.000000Z"}, {"uuid": "59eeafc9-6279-47aa-a1eb-7c7eae09665c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46337", "type": "published-proof-of-concept", "source": "Telegram/QFVP5TcYkEi5fC3DYhpbJ3tJ8sPusYmL1ImuYd1RRjGW6cE", "content": "", "creation_timestamp": "2025-05-01T20:00:50.000000Z"}, {"uuid": "055d7564-f20a-4d07-b1f4-9d2851fbf49b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46568", "type": "published-proof-of-concept", "source": "Telegram/QFVP5TcYkEi5fC3DYhpbJ3tJ8sPusYmL1ImuYd1RRjGW6cE", "content": "", "creation_timestamp": "2025-05-01T20:00:50.000000Z"}, {"uuid": "0de657bd-bd64-425b-80a0-a9ba3e85a1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46737", "type": "seen", "source": "Telegram/Kd0Licvl05IL9dbcjAlnsxGJoQRH5VF3YgZ1kdqUOIQBjSo", "content": "", "creation_timestamp": "2025-05-12T18:30:33.000000Z"}, {"uuid": "5343bc59-0bf4-4c19-8753-0d914b8b427b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46820", "type": "published-proof-of-concept", "source": "Telegram/MtkbMjKHSfcOGeyYZKODgJ22yCGfMFI_St_Qez5BgCNBgxs", "content": "", "creation_timestamp": "2025-05-06T21:30:42.000000Z"}, {"uuid": "299fe740-2c86-41e6-8928-d24ccee8db7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46815", "type": "seen", "source": "Telegram/PwjyiTDmMCV8n5O4H8WYZUui8x-G-PcEgC06QwyqI9Pyxio", "content": "", "creation_timestamp": "2025-05-06T20:30:48.000000Z"}, {"uuid": "67b844a7-0cf8-4863-81d7-29aa4f321b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46584", "type": "published-proof-of-concept", "source": "Telegram/7zFVzqZFuQiG3D865QjZIIAAiukuTilZCAkXDIpVrxeZZHI", "content": "", "creation_timestamp": "2025-05-06T10:45:49.000000Z"}, {"uuid": "02d6a5be-572c-4a16-a56b-86b0da56f0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46342", "type": "seen", "source": "Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI", "content": "", "creation_timestamp": "2025-04-30T17:32:01.000000Z"}, {"uuid": "d91156d4-eb1e-4a0a-9e22-10a8dfe4f97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46816", "type": "published-proof-of-concept", "source": "Telegram/MtkbMjKHSfcOGeyYZKODgJ22yCGfMFI_St_Qez5BgCNBgxs", "content": "", "creation_timestamp": "2025-05-06T21:30:42.000000Z"}, {"uuid": "8879dc74-3ca5-4c2c-a9b9-e12e9ce7b042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46569", "type": "published-proof-of-concept", "source": "Telegram/0EwG4WR3r_yD8YYpC8nymf37rvRJ9lNf57cFzRcn8wtN8JQ", "content": "", "creation_timestamp": "2025-05-01T22:01:57.000000Z"}, {"uuid": "d5092926-f602-4392-aad0-3f1f11cbdd88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "published-proof-of-concept", "source": "Telegram/rp_aRF1ROHFn5L6t4wpgA6l7G_oKIqPULi5IyKcMa-c-7Hk", "content": "", "creation_timestamp": "2025-05-06T12:31:16.000000Z"}, {"uuid": "592e5c3c-a9e7-4f3a-bd73-ff8c1966f048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46728", "type": "seen", "source": "Telegram/6XDP4M1wkfL7m7vq90Tisvnt9Hir_tEqb2ho5KerLaKNi_8", "content": "", "creation_timestamp": "2025-05-06T04:01:13.000000Z"}, {"uuid": "2438078b-6301-4542-8ae3-fa61859bc9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46335", "type": "published-proof-of-concept", "source": "Telegram/bFFhDRsz5jITaIYyr2g-Li8Bq5utseX25ZdPNGHsnlhVzGo", "content": "", "creation_timestamp": "2025-05-06T03:23:35.000000Z"}, {"uuid": "52ec2cd2-521d-4cdc-9735-899a579a366e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46340", "type": "published-proof-of-concept", "source": "Telegram/bFFhDRsz5jITaIYyr2g-Li8Bq5utseX25ZdPNGHsnlhVzGo", "content": "", "creation_timestamp": "2025-05-06T03:23:35.000000Z"}, {"uuid": "3202313b-14f4-40ca-97fe-9076d120d338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46579", "type": "seen", "source": "Telegram/GpkMenJKORMRTyGn__tovnUC1GugUYF1oUM8Jfs6Z_XnWoI", "content": "", "creation_timestamp": "2025-04-27T04:30:49.000000Z"}, {"uuid": "fa0ccd00-c5ad-4acc-af2f-f9720feddbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46580", "type": "seen", "source": "Telegram/GpkMenJKORMRTyGn__tovnUC1GugUYF1oUM8Jfs6Z_XnWoI", "content": "", "creation_timestamp": "2025-04-27T04:30:49.000000Z"}, {"uuid": "0806d9cc-97c4-4148-92e1-5569ea5126fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46348", "type": "published-proof-of-concept", "source": "Telegram/B0mQm7D6n4K45Tyxh70ZGq4-hSEsF9uB1DRvduugCcWcgHU", "content": "", "creation_timestamp": "2025-04-29T23:00:34.000000Z"}, {"uuid": "5da7aaa4-5487-425a-a5ff-0b05a8470a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46349", "type": "published-proof-of-concept", "source": "Telegram/KFrCOSu3LGCSoC33LRQajUOfsycPM4aBiQ5_ifmvrLt0xH0", "content": "", "creation_timestamp": "2025-04-29T20:01:14.000000Z"}, {"uuid": "9548acbd-8c7d-44b0-89cf-483b70aae8c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46657", "type": "published-proof-of-concept", "source": "Telegram/0XgTWVmcgHyOPvQLLmK_qKt-N0-Y_aOiv1xluH_V5gQ5xjI", "content": "", "creation_timestamp": "2025-04-27T20:00:22.000000Z"}, {"uuid": "8de81dd7-44d9-4fc3-8448-606a4c90103f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46802", "type": "seen", "source": "https://t.me/proxy_bar/2615", "content": "GNU Screen !\n*\nCVE-2025-46802 - \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 TTY\nCVE-2025-46803 - \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0440\u0430\u0432 0622 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e PTY, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u044c \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0435\u0442\u043a\u0435 screen 5.0. \nCVE-2025-46804 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445 (SCREENDIR)\nCVE-2025-46805 - \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 SIGCONT \u0438 SIGHUP\n\n\u0425\u043e\u0442\u044c \u0432 arch, \u0445\u043e\u0442\u044c \u0432 ubuntu/debian, \u0445\u043e\u0442\u044c freebsd\n\n#multiplex", "creation_timestamp": "2025-05-13T16:45:54.000000Z"}, {"uuid": "26027d9d-0c82-44eb-b527-91f1e45e8561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46803", "type": "seen", "source": "https://t.me/proxy_bar/2615", "content": "GNU Screen !\n*\nCVE-2025-46802 - \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 TTY\nCVE-2025-46803 - \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0440\u0430\u0432 0622 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e PTY, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u044c \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0435\u0442\u043a\u0435 screen 5.0. \nCVE-2025-46804 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445 (SCREENDIR)\nCVE-2025-46805 - \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 SIGCONT \u0438 SIGHUP\n\n\u0425\u043e\u0442\u044c \u0432 arch, \u0445\u043e\u0442\u044c \u0432 ubuntu/debian, \u0445\u043e\u0442\u044c freebsd\n\n#multiplex", "creation_timestamp": "2025-05-13T16:45:54.000000Z"}, {"uuid": "77722746-da72-4a18-92ba-c5d99feafef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46805", "type": "seen", "source": "https://t.me/proxy_bar/2615", "content": "GNU Screen !\n*\nCVE-2025-46802 - \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 TTY\nCVE-2025-46803 - \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0440\u0430\u0432 0622 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e PTY, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u044c \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0435\u0442\u043a\u0435 screen 5.0. \nCVE-2025-46804 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445 (SCREENDIR)\nCVE-2025-46805 - \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 SIGCONT \u0438 SIGHUP\n\n\u0425\u043e\u0442\u044c \u0432 arch, \u0445\u043e\u0442\u044c \u0432 ubuntu/debian, \u0445\u043e\u0442\u044c freebsd\n\n#multiplex", "creation_timestamp": "2025-05-13T16:45:54.000000Z"}, {"uuid": "eccfc621-1ec1-4f88-a3b7-3ae94700c0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46804", "type": "seen", "source": "https://t.me/proxy_bar/2615", "content": "GNU Screen !\n*\nCVE-2025-46802 - \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 TTY\nCVE-2025-46803 - \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0440\u0430\u0432 0622 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e PTY, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u044c \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0435\u0442\u043a\u0435 screen 5.0. \nCVE-2025-46804 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445 (SCREENDIR)\nCVE-2025-46805 - \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 SIGCONT \u0438 SIGHUP\n\n\u0425\u043e\u0442\u044c \u0432 arch, \u0445\u043e\u0442\u044c \u0432 ubuntu/debian, \u0445\u043e\u0442\u044c freebsd\n\n#multiplex", "creation_timestamp": "2025-05-13T16:45:54.000000Z"}, {"uuid": "f1591dd9-3f64-42ab-9585-adf1c87721fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/true_secator/7034", "content": "Samsung \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 MagicINFO 9 Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-4632 (CVSS: 9,8) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 21.1052 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2025-4632 - \u044d\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f CVE-2024-7399, \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Samsung \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 30 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 SSD Disclosure \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 PoC CVE-2025-4632 \u0441\u0442\u0430\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f\u00a0\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0434\u0430\u0436\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Mirai.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-7399.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Huntress \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043f\u0440\u0438\u0447\u0438\u043d\u0443 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 MagicINFO 9 Server, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 21.1050.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442 9 \u043c\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Huntress \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0438\u00a0\u043e \u0442\u0440\u0435\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2025-4632.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435\u043e\u043f\u043e\u0437\u043d\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u043a\u043e\u043c\u0430\u043d\u0434 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a srvany.exe \u0438 services.exe \u043d\u0430 \u0434\u0432\u0443\u0445 \u0445\u043e\u0441\u0442\u0430\u0445 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u043d\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u043c.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Samsung MagicINFO 9 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0434\u0430\u0431\u044b \u043d\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0436\u0435\u0440\u0442\u0432.", "creation_timestamp": "2025-05-15T14:43:02.000000Z"}, {"uuid": "9b590e65-6dd9-49a4-83c7-e747c7e138c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/true_secator/7033", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-4664 (CVSS: 4,3) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f  \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Loader \u0432 Google Chrome \u0434\u043e 136.0.7103.113.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u00ab\u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443\u00bb \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGoogle \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e  Solidlab \u0412\u0441\u0435\u0432\u043e\u043b\u043e\u0434\u0443 \u041a\u043e\u043a\u043e\u0440\u0438\u043d\u0443 (slonser_), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432\u0448\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 X 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u0432\u043e\u0438 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2025-4664 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a\u0443\u044e \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0443 Google \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u0442\u044c CVE-2025-4664 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0441\u043b\u0435 CVE-2025-2783, \u043f\u043e\u043f\u0430\u0432\u0430\u0432\u0448\u0435\u0439 \u043f\u043e\u0434 \u00ab\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e\u00bb.\n\nSlonser\u00a0\u043f\u043e\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Link, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Chrome \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043f\u043e\u0434\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u0434\u043a\u043e \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0442\u0440\u044e\u043a \u0438\u043d\u043e\u0433\u0434\u0430 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 136.0.7103.113/.114 \u0434\u043b\u044f Windows \u0438 Mac \u0438 136.0.7103.113 \u0434\u043b\u044f Linux.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-15T12:51:17.000000Z"}, {"uuid": "db109100-a8b1-442c-b5a7-7ddf6f2aef37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/31352", "content": "Chrome 0-Day CVE-2025-4664 Exposes Windows, Linux Browser Activity \u2013 hackread.com\n\nFri, 23 May 2025 19:07:09", "creation_timestamp": "2025-05-23T14:03:23.000000Z"}, {"uuid": "647d4e26-6a9b-4697-bc58-e7ac5ca08fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "Telegram/3SuVspWY1fBnllgkZsllUbNpYkb61b6Zlacez5zqtt9vLES7", "content": "", "creation_timestamp": "2025-05-20T10:08:34.000000Z"}, {"uuid": "1d5a4681-d5be-49c5-8dee-4a390af3b51c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/4375", "content": "Chrome 0-Day CVE-2025-4664 Exposes Windows, Linux Browser Activity \u2013 hackread.com\n\nFri, 23 May 2025 19:07:09", "creation_timestamp": "2025-05-23T14:03:23.000000Z"}, {"uuid": "76aa00da-6a94-447e-a535-c00f6eb07ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/13394", "content": "Chrome 0-Day CVE-2025-4664 Exposes Windows, Linux Browser Activity \u2013 hackread.com\n\nFri, 23 May 2025 19:07:09", "creation_timestamp": "2025-05-23T14:03:23.000000Z"}, {"uuid": "9b7f4cd4-2a99-4b95-8380-938ca11075fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://t.me/thehackernews/6838", "content": "\ud83d\uded1 Actively Exploited Samsung Flaw Hits Critical Alert!\n\nPoC dropped. Exploits followed fast.\n\nA 9.8 CVSS bug in Samsung\u2019s MagicINFO 9 Server (CVE-2025-4632) is being used in the wild\u2014even to deploy Mirai malware.\n\nRead \u2192 https://thehackernews.com/2025/05/samsung-patches-cve-2025-4632-used-to.html", "creation_timestamp": "2025-05-14T20:04:53.000000Z"}, {"uuid": "74e57803-4cd5-414d-8e45-52f44f339542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/thehackernews/6839", "content": "\ud83d\udea8 Warning: A new high-severity Google Chrome flaw is being actively exploited in the wild.\n\nCVE-2025-4664 allows attackers to steal sensitive data like account credentials via crafted HTML + image traps.\n\nIt affects Chrome < 136.0.7103.113 \u2014 and likely other Chromium-based browsers.\n\n\ud83d\udd17 Details: https://thehackernews.com/2025/05/new-chrome-vulnerability-enables-cross.html", "creation_timestamp": "2025-05-15T08:29:44.000000Z"}, {"uuid": "d958139c-b56d-4f2f-892b-ef33407e26d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/S_E_Reborn/5624", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-4664 (CVSS: 4,3) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f  \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Loader \u0432 Google Chrome \u0434\u043e 136.0.7103.113.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u00ab\u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443\u00bb \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGoogle \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e  Solidlab \u0412\u0441\u0435\u0432\u043e\u043b\u043e\u0434\u0443 \u041a\u043e\u043a\u043e\u0440\u0438\u043d\u0443 (slonser_), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432\u0448\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 X 5 \u043c\u0430\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u0432\u043e\u0438 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2025-4664 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a\u0443\u044e \u0444\u043e\u0440\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u043a\u0443 Google \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u0442\u044c CVE-2025-4664 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0441\u043b\u0435 CVE-2025-2783, \u043f\u043e\u043f\u0430\u0432\u0430\u0432\u0448\u0435\u0439 \u043f\u043e\u0434 \u00ab\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e\u00bb.\n\nSlonser\u00a0\u043f\u043e\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Link, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 Chrome \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043f\u043e\u0434\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u0434\u043a\u043e \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0442\u0440\u044e\u043a \u0438\u043d\u043e\u0433\u0434\u0430 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 136.0.7103.113/.114 \u0434\u043b\u044f Windows \u0438 Mac \u0438 136.0.7103.113 \u0434\u043b\u044f Linux.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2025-05-15T14:52:51.000000Z"}, {"uuid": "1de0fcb9-014b-474c-b25f-909bf2420157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "exploited", "source": "https://t.me/CybNux/7944", "content": "\ud83d\udea8\u062a\u062d\u0630\u064a\u0631: \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u062c\u062f\u064a\u062f\u0629 \u0639\u0627\u0644\u064a\u0629 \u0627\u0644\u062e\u0637\u0648\u0631\u0629 \u0641\u064a Google Chrome \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629.\n\n\u064a\u062a\u064a\u062d CVE-2025-4664 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0633\u0631\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629 \u0645\u062b\u0644 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0627\u0644\u062d\u0633\u0627\u0628 \u0639\u0628\u0631 \u0645\u0635\u0627\u0626\u062f HTML + \u0627\u0644\u0635\u0648\u0631 \u0627\u0644\u0645\u0635\u0645\u0645\u0629.\n\n\u0625\u0646\u0647 \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 Chrome < 136.0.7103.113 \u2014 \u0648\u0645\u0646 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0623\u064a\u0636\u064b\u0627 \u0623\u0646 \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0627\u0644\u0645\u062a\u0635\u0641\u062d\u0627\u062a \u0627\u0644\u0623\u062e\u0631\u0649 \u0627\u0644\u0645\u0633\u062a\u0646\u062f\u0629 \u0625\u0644\u0649 Chromium.\n#\u0623\u062e\u0628\u0627\u0631", "creation_timestamp": "2025-05-15T21:38:06.000000Z"}, {"uuid": "1820d949-44c3-424c-abca-330afe61b9b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46625", "type": "seen", "source": "https://t.me/cvedetector/24268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46625 - Tenda RX2 Pro HTTPd Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46625 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the device by sending a crafted web request. This is persistent because the command injection is saved in the configuration of the device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:36.000000Z"}, {"uuid": "25fda4a5-3b94-4ba4-bc31-2417e69c93c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46626", "type": "seen", "source": "https://t.me/cvedetector/24269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46626 - Tenda RX2 Pro AES Key Reuse Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46626 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt, replay, and/or forge traffic to the service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:37.000000Z"}, {"uuid": "c16a19e7-3df5-47a1-b8af-ee4b46e10f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46335", "type": "seen", "source": "https://t.me/cvedetector/24484", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46335 - MobSF Stored XSS Vulnerability in Android APK Analysis\", \n  \"Content\": \"CVE ID : CVE-2025-46335 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. A Stored Cross-Site Scripting (XSS) vulnerability has been identified in MobSF versions up to and including 4.3.2. The vulnerability arises from improper sanitization of user-supplied SVG files during the Android APK analysis workflow. Version 4.3.3 fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:21.000000Z"}, {"uuid": "21d27c57-4c78-4da6-b62d-41f757de626f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46631", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/24263", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46631 - Tenda RX2 Pro Telnet Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46631 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:29.000000Z"}, {"uuid": "f72f57aa-bfe6-42c9-b125-c4f7d0e047d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46632", "type": "seen", "source": "https://t.me/cvedetector/24264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46632 - Tenda RX2 Pro Cryptographic IV Reuse Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46632 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between client and server. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:30.000000Z"}, {"uuid": "fd7aa4bd-c088-4bd1-b0f7-41454b99af60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46633", "type": "seen", "source": "https://t.me/cvedetector/24265", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46633 - Tenda RX2 Pro Information Leak\", \n  \"Content\": \"CVE ID : CVE-2025-46633 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:31.000000Z"}, {"uuid": "bb676ff8-04b9-4bcb-98b3-fc20217c3040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46634", "type": "seen", "source": "https://t.me/cvedetector/24266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46634 - Tenda RX2 Pro Password Hash Replay Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46634 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an unauthenticated attacker to authenticate to the web management portal by collecting credentials from observed/collected traffic. It implements encryption, but not until after the user has transmitted the hash of their password in cleartext. The hash can be replayed to authenticate. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:32.000000Z"}, {"uuid": "a5e419d6-a68d-483d-9e0f-4ee6f3e325c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46635", "type": "seen", "source": "https://t.me/cvedetector/24267", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46635 - Tenda RX2 Pro Router Guest Wi-Fi Network Isolation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46635 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : An issue was discovered on Tenda RX2 Pro 16.03.30.14 devices. Improper network isolation between the guest Wi-Fi network and other network interfaces on the router allows an attacker (who is authenticated to the guest Wi-Fi) to access resources on the router and/or resources and devices on other networks hosted by the router by configuring a static IP address (within the non-guest subnet) on their host. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:33.000000Z"}, {"uuid": "f78a61d0-5ec9-4666-9adc-d6984ffe03ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46627", "type": "seen", "source": "https://t.me/cvedetector/24270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46627 - Tenda RX2 Pro Weak Credential Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46627 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:38.000000Z"}, {"uuid": "a6d17ff7-870f-4a8a-822d-4803775e78d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46628", "type": "seen", "source": "https://t.me/cvedetector/24271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46628 - Tenda RX2 Pro Remote Root Shell Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46628 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shell access to the device by sending a crafted UDP packet to the 'ate' service when it is enabled. Authentication is not needed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:39.000000Z"}, {"uuid": "1f551fd5-f74f-4ae3-8737-5253db78ec4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46629", "type": "seen", "source": "https://t.me/cvedetector/24272", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46629 - Tenda RX2 Pro Remote Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46629 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where 'ate' has been enabled by sending a crafted UDP packet \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:39.000000Z"}, {"uuid": "55a641ba-b540-42ce-a841-d6f1608b3487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46630", "type": "seen", "source": "https://t.me/cvedetector/24273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46630 - Tenda RX2 Pro Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46630 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable 'ate' (a remote system management binary) by sending a /goform/ate web request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:43.000000Z"}, {"uuid": "0cb61f7b-8cb4-4a25-a4f8-48c613872e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46569", "type": "seen", "source": "https://t.me/cvedetector/24274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46569 - Open Policy Agent (OPA) HTTP Data API Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46569 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a single data document reference is constructed from the requested path. This query is then used for policy evaluation. A HTTP request path can be crafted in a way that injects Rego code into the constructed query. The evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results. Furthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack. This issue has been patched in version 1.4.0. A workaround involves having network access to OPA\u2019s RESTful APIs being limited to `localhost` and/or trusted networks, unless necessary for production reasons. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:44.000000Z"}, {"uuid": "8574edc8-e211-4b81-8802-a84491b53eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46723", "type": "seen", "source": "https://t.me/cvedetector/24380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46723 - OpenVM AUIPC Instruction Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46723 \nPublished : May 2, 2025, 11:15 p.m. | 17\u00a0minutes ago \nDescription : OpenVM is a performant and modular zkVM framework built for customization and extensibility. In version 1.0.0, OpenVM is vulnerable to overflow through byte decomposition of pc in AUIPC chip. A typo results in the highest limb of pc being range checked to 8-bits instead of 6-bits. This results in the if statement never being triggered because the enumeration gives i=0,1,2, when instead the enumeration should give i=1,2,3, leaving pc_limbs[3] range checked to 8-bits instead of 6-bits. This leads to a vulnerability where the pc_limbs decomposition differs from the true pc, which means a malicious prover can make the destination register take a different value than the AUIPC instruction dictates, by making the decomposition overflow the BabyBear field. This issue has been patched in version 1.1.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T01:59:27.000000Z"}, {"uuid": "2f0acd38-d080-4e45-82a4-f8ca7b79543a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46332", "type": "seen", "source": "https://t.me/cvedetector/24371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46332 - Vercel Flags SDK Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46332 \nPublished : May 2, 2025, 5:15 p.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : Flags SDK is an open-source feature flags toolkit for Next.js and SvelteKit. Impacted versions include flags from 3.2.0 and prior and @vercel/flags from 3.1.1 and prior as certain circumstances allows a bad actor with detailed knowledge of the vulnerability to list all flags returned by the flags discovery endpoint (.well-known/vercel/flags). This vulnerability allows for information disclosure, where a bad actor could gain access to a list of all feature flags exposed through the flags discovery endpoint, including the flag names, flag descriptions, available options and their labels (e.g. true, false), and default flag values. This issue has been patched in flags@4.0.0, users of flags and @vercel/flags should also migrate to flags@4.0.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T21:48:53.000000Z"}, {"uuid": "39faf55e-df32-4be7-b680-98bc6df9fccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46571", "type": "seen", "source": "https://t.me/cvedetector/24476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46571 - Open WebUI Unauthenticated JavaScript File Upload to Admin RCE\", \n  \"Content\": \"CVE ID : CVE-2025-46571 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged users can upload HTML files which contain JavaScript code via the `/api/v1/files/` backend endpoint. This endpoint returns a file id, which can be used to open the file in the browser and trigger the JavaScript code in the user's browser. Under the default settings, files uploaded by low-privileged users can only be viewed by admins or themselves, limiting the impact of this vulnerability. A link to such a file can be sent to an admin, and if clicked, will give the low-privileged user complete control over the admin's account, ultimately enabling RCE via functions. Version 0.6.6 contains a fix for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:12.000000Z"}, {"uuid": "bec352dc-3df7-4417-a0c6-11787dc5c0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46719", "type": "seen", "source": "https://t.me/cvedetector/24477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46719 - Open WebUI JavaScript Injection and Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46719 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, a vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be executed in the user's browser every time that chat transcript is opened, allowing attackers to retrieve the user's access token and gain full control over their account. Chat transcripts can be shared with other users in the same server, or with the whole open-webui community if \"Enable Community Sharing\" is enabled in the admin panel. If this exploit is used against an admin user, it is possible to achieve Remote Code Execution on the server where the open-webui backend is hosted. This can be done by creating a new function which contains malicious python code. This vulnerability also affects chat transcripts uploaded to ``, allowing for wormable stored XSS in https[:]//openwebui[.]com. Version 0.6.6 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:13.000000Z"}, {"uuid": "10f7d5e9-94c0-4000-8aaf-0408c0b025a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46730", "type": "seen", "source": "https://t.me/cvedetector/24503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46730 - \"MobSF ZIP Bomb Denial of Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-46730 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : MobSF is a mobile application security testing tool used. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web applications. Access to the MobSF web interface is often granted to internal security teams, audit teams, and external vendors.  MobSF provides a feature that allows users to upload ZIP files for static analysis. Upon upload, these ZIP files are automatically extracted and stored within the MobSF directory. However, in versions up to and including 4.3.2, this functionality lacks a check on the total uncompressed size of the ZIP file, making it vulnerable to a ZIP of Death (zip bomb) attack. Due to the absence of safeguards against oversized extractions, an attacker can craft a specially prepared ZIP file that is small in compressed form but expands to a massive size upon extraction. Exploiting this, an attacker can exhaust the server's disk space, leading to a complete denial of service (DoS) not just for MobSF, but also for any other applications or websites hosted on the same server. This vulnerability can lead to complete server disruption in an organization which can affect other internal portals and tools too (which are hosted on the same server). If some organization has created their customized cloud based mobile security tool using MobSF core then an attacker can exploit this vulnerability to crash their servers. Commit 6987a946485a795f4fd38cebdb4860b368a1995d fixes this issue. As an additional mitigation, it is recommended to implement a safeguard that checks the total uncompressed size of any uploaded ZIP file before extraction. If the estimated uncompressed size exceeds a safe threshold (e.g., 100 MB), MobSF should reject the file and notify the user. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:13.000000Z"}, {"uuid": "4cbae161-9ac0-42e9-9fee-021e5a2af9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46731", "type": "seen", "source": "https://t.me/cvedetector/24504", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46731 - Craft CMS SSTI Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46731 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work. Users should update to the patched versions 4.14.13 or 5.6.15 to mitigate the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:14.000000Z"}, {"uuid": "f74d1c16-87c4-4cdc-82e7-3c0b2f936ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46734", "type": "seen", "source": "https://t.me/cvedetector/24505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46734 - League Commonmark Attributes Extension Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46734 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : league/commonmark is a PHP Markdown parser. A cross-site scripting (XSS) vulnerability in the Attributes extension of the league/commonmark library (versions 1.5.0 through 2.6.x) allows remote attackers to insert malicious JavaScript calls into HTML. The league/commonmark library provides configuration options such as `html_input: 'strip'` and `allow_unsafe_links: false` to mitigate cross-site scripting (XSS) attacks by stripping raw HTML and disallowing unsafe links. However, when the Attributes Extension is enabled, it introduces a way for users to inject arbitrary HTML attributes into elements via Markdown syntax using curly braces. Version 2.7.0 contains three changes to prevent this XSS attack vector: All attributes starting with `on` are considered unsafe and blocked by default; support for an explicit allowlist of allowed HTML attributes; and manually-added `href` and `src` attributes now respect the existing `allow_unsafe_links` configuration option. If upgrading is not feasible, please consider disabling the `AttributesExtension` for untrusted users and/or filtering the rendered HTML through a library like HTMLPurifier. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:15.000000Z"}, {"uuid": "cccfa824-c14b-4f7e-b3f8-e592575b5b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46813", "type": "seen", "source": "https://t.me/cvedetector/24506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46813 - Discourse Data Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46813 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Discourse is an open-source community platform. A data leak vulnerability affects sites deployed between commits 10df7fdee060d44accdee7679d66d778d1136510 and 82d84af6b0efbd9fa2aeec3e91ce7be1a768511b. On login-required sites, the leak meant that some content on the site's homepage could be visible to unauthenticated users. Only login-required sites that got deployed during this timeframe are affected, roughly between April 30 2025 noon EDT and May 2 2025, noon EDT. Sites on the stable branch are unaffected. Private content on an instance's homepage could be visible to unauthenticated users on login-required sites. Versions of 3.5.0.beta4 after commit 82d84af6b0efbd9fa2aeec3e91ce7be1a768511b are not vulnerable to the issue. No workarounds are available. Sites must upgrade to a non-vulnerable version of Discourse. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:19.000000Z"}, {"uuid": "19a1431b-4763-40eb-b247-672836996314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46720", "type": "seen", "source": "https://t.me/cvedetector/24478", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46720 - Keystone Node.js Oracle Filter Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46720 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : Keystone is a content management system for Node.js. Prior to version 6.5.0, `{field}.isFilterable` access control can be bypassed in `update` and `delete` mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields. Specifically, when a mutation includes a `where` clause with multiple unique filters (e.g. `id` and `email`), Keystone will attempt to match records even if filtering by the latter fields would normally be rejected by `field.isFilterable` or `list.defaultIsFilterable`. This can allow malicious actors to infer the presence of a particular field value when a filter is successful in returning a result. This affects any project relying on the default or dynamic `isFilterable` behavior (at the list or field level) to prevent external users from using the filtering of fields as a discovery mechanism. While this access control is respected during `findMany` operations, it was not completely enforced during `update` and `delete` mutations when accepting more than one unique `where` values in filters. This has no impact on projects using `isFilterable: false` or `defaultIsFilterable: false` for sensitive fields, or for those who have otherwise omitted filtering by these fields from their GraphQL schema. This issue has been patched in `@keystone-6/core` version 6.5.0. To mitigate this issue in older versions where patching is not a viable pathway, set `isFilterable: false` statically for relevant fields to prevent filtering by them earlier in the access control pipeline (that is, don't use functions); set `{field}.graphql.omit.read: true` for relevant fields, which implicitly removes filtering by these fields from the GraphQL schema; and/or deny `update` and `delete` operations for the relevant lists completely. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:13.000000Z"}, {"uuid": "36f1f66e-a5d0-41b7-9968-6f8d83107653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46340", "type": "seen", "source": "https://t.me/cvedetector/24485", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46340 - Misskey CSS Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46340 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : Misskey is an open source, federated social media platform. Starting in version 12.0.0 and prior to version 2025.4.1, due to an oversight in the validation performed in `UrlPreviewService` and `MkUrlPreview`, it is possible for an attacker to inject arbitrary CSS into the `MkUrlPreview` component. `UrlPreviewService.wrap` falls back to returning the original URL if it's using a protocol that is likely to not be understood by Misskey, IE something other than `http` or `https`. This both can de-anonymize users and_allow further attacks in the client. Additionally, `MkUrlPreview` doesn't escape CSS when applying a `background-image` property, allowing an attacker to craft a URL that applies arbitrary styles to the preview element. Theoretically, an attacker can craft a CSS injection payload to create a fake error message that can deceive the user into giving away their credentials or similar sensitive information. Version 2025.4.1 contains a patch for the issue. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:22.000000Z"}, {"uuid": "98320d6d-27bd-46b1-b4c4-d381f3eb24ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46553", "type": "seen", "source": "https://t.me/cvedetector/24486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46553 - Misskey/summaly Allow Redirects Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46553 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : @misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, isn't enforced. Misskey will follow redirects, despite explicitly requesting not to. Version 5.2.1 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:26.000000Z"}, {"uuid": "87f8f025-46d7-4e2a-a62e-ab121c0b5772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46559", "type": "seen", "source": "https://t.me/cvedetector/24487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46559 - Misskey AiScript Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2025-46559 \nPublished : May 5, 2025, 7:15 p.m. | 20\u00a0minutes ago \nDescription : Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in `Mk:api` allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. The missing validation allows malicious AiScript code to prefix a URL with `../` to step out of the `/api` directory, thereby being able to make requests to other endpoints, such as `/files`, `/url`, and `/proxy`. Version 2025.4.1 fixes the issue. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T21:44:26.000000Z"}, {"uuid": "8c5770fc-263b-4b21-b8cc-c23538f1c87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46726", "type": "seen", "source": "https://t.me/cvedetector/24502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46726 - Langroid XMLToolMessage XML External Entity (XXE) Denial of Service (DoS) and Local File Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-46726 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Version 0.53.4 fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:13.000000Z"}, {"uuid": "56aaa003-a93d-43fe-8318-28751bff1298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46736", "type": "seen", "source": "https://t.me/cvedetector/24621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46736 - Umbraco Account Existence Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46736 \nPublished : May 6, 2025, 5:16 p.m. | 50\u00a0minutes ago \nDescription : Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8.10 and 13.8.1. No known workarounds are available. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:11.000000Z"}, {"uuid": "81b8406a-e60d-4368-b651-5602444e5312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46735", "type": "seen", "source": "https://t.me/cvedetector/24623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46735 - Terraform WinDNS Provider Authenticated Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-46735 \nPublished : May 6, 2025, 5:16 p.m. | 50\u00a0minutes ago \nDescription : Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:12.000000Z"}, {"uuid": "668a74d8-d903-4b30-ad84-42a1cd7d1507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46728", "type": "seen", "source": "https://t.me/cvedetector/24527", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46728 - cpp-httplib Chunked Request Body Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-46728 \nPublished : May 6, 2025, 1:15 a.m. | 26\u00a0minutes ago \nDescription : cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce configured size limits on incoming request bodies when `Transfer-Encoding: chunked` is used or when no `Content-Length` header is provided. A remote attacker can send a chunked request without the terminating zero-length chunk, causing uncontrolled memory allocation on the server. This leads to potential exhaustion of system memory and results in a server crash or unresponsiveness. Version 0.20.1 fixes the issue by enforcing limits during parsing. If the limit is exceeded at any point during reading, the connection is terminated immediately. A short-term workaround through a Reverse Proxy is available. If updating the library immediately is not feasible, deploy a reverse proxy (e.g., Nginx, HAProxy) in front of the `cpp-httplib` application. Configure the proxy to enforce maximum request body size limits, thereby stopping excessively large requests before they reach the vulnerable library code. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T04:26:11.000000Z"}, {"uuid": "5ca71369-98f5-47f1-897a-3d965391fa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46820", "type": "seen", "source": "https://t.me/cvedetector/24641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46820 - GitHub phpgt/Dom GitHub Token Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46820 \nPublished : May 6, 2025, 7:16 p.m. | 58\u00a0minutes ago \nDescription : phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUB_TOKEN in the Dom workflow run artifact. The ci.yml workflow file uses actions/upload-artifact@v4 to upload the build artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the GitHub API to push malicious code or rewrite release commits in your repository. Any downstream user of the repository may be affected, but the token should only be valid for the duration of the workflow run, limiting the time during which exploitation could occur. Version 4.1.8 fixes the issue. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T22:51:05.000000Z"}, {"uuid": "d310e646-2c16-4804-a639-73402330aae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46584", "type": "seen", "source": "https://t.me/cvedetector/24559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46584 - Apache File System Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46584 \nPublished : May 6, 2025, 7:15 a.m. | 34\u00a0minutes ago \nDescription : Vulnerability of improper authentication logic implementation in the file system module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T10:17:44.000000Z"}, {"uuid": "6eafd349-32a4-4b15-b831-875541c45a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46762", "type": "seen", "source": "https://t.me/cvedetector/24595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46762 - Apache Parquet Parquet-avro Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46762 \nPublished : May 6, 2025, 10:15 a.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code.  \n  \nWhile 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be executed.  \n  \nThe exploit is only applicable if the client code of parquet-avro uses the \"specific\" or the \"reflect\" models deliberately for reading Parquet files. (\"generic\" model is not impacted)  \n  \nUsers are recommended to upgrade to 1.15.2 or set the system property \"org.apache.parquet.avro.SERIALIZABLE_PACKAGES\" to an empty string on 1.15.1. Both are sufficient to fix the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T14:29:01.000000Z"}, {"uuid": "d00305aa-fd37-4ada-9531-9de51d418f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46585", "type": "seen", "source": "https://t.me/cvedetector/24560", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46585 - Linux Kernel Out-of-bounds Array Read/Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46585 \nPublished : May 6, 2025, 7:15 a.m. | 34\u00a0minutes ago \nDescription : Out-of-bounds array read/write vulnerability in the kernel module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T10:17:45.000000Z"}, {"uuid": "c1c10841-48d8-44a3-9b84-25da4356bfc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46586", "type": "seen", "source": "https://t.me/cvedetector/24561", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46586 - \"Apache Contacts Module Permission Control Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-46586 \nPublished : May 6, 2025, 7:15 a.m. | 34\u00a0minutes ago \nDescription : Permission control vulnerability in the contacts module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T10:17:46.000000Z"}, {"uuid": "ceafc913-600b-4abd-a876-e91d2b7e1110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46816", "type": "seen", "source": "https://t.me/cvedetector/24640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46816 - \"goshs Command Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-46816 \nPublished : May 6, 2025, 7:16 p.m. | 58\u00a0minutes ago \nDescription : goshs is a SimpleHTTPServer written in Go. Starting in version 0.3.4 and prior to version 1.0.5, running goshs without arguments makes it possible for anyone to execute commands on the server. The function `dispatchReadPump` does not checks the option cli `-c`, thus allowing anyone to execute arbitrary command through the use of websockets. Version 1.0.5 fixes the issue. \nSeverity: 9.4 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T22:51:05.000000Z"}, {"uuid": "630fa0ea-daed-4e81-8acf-cee2b5541567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46814", "type": "seen", "source": "https://t.me/cvedetector/24614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46814 - FastAPI Guard HTTP Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46814 \nPublished : May 6, 2025, 3:16 p.m. | 46\u00a0minutes ago \nDescription : FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially inject arbitrary IP addresses into the request. This vulnerability can allow attackers to bypass IP-based access controls, mislead logging systems, and impersonate trusted clients. It is especially impactful when the application relies on the X-Forwarded-For header for IP-based authorization or authentication. Users should upgrade to FastAPI Guard version 2.0.0 to receive a fix. \nSeverity: 3.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T18:39:51.000000Z"}, {"uuid": "7a88a6af-f140-4e27-a9de-4e4877915e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46815", "type": "seen", "source": "https://t.me/cvedetector/24645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46815 - ZITADEL IdP Intent Session Token Abuse\", \n  \"Content\": \"CVE ID : CVE-2025-46815 \nPublished : May 6, 2025, 6:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : The identity infrastructure software ZITADEL offers developers the ability to manage user sessions using the Session API. This API enables the use of IdPs for authentication, known as idp intents. Following a successful idp intent, the client receives an id and token on a predefined URI. These id and token can then be used to authenticate the user or their session. However, prior to versions 3.0.0, 2.71.9, and 2.70.10, it was possible to exploit this feature by repeatedly using intents. This allowed an attacker with access to the application\u2019s URI to retrieve the id and token, enabling them to authenticate on behalf of the user. It's important to note that the use of additional factors (MFA) prevents a complete authentication process and, consequently, access to the ZITADEL API. Versions 3.0.0, 2.71.9, and 2.70.10 contain a fix for the issue. No known workarounds other than upgrading are available. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T22:51:12.000000Z"}, {"uuid": "05c50aef-d71d-432c-b019-33b348f8cf2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46572", "type": "seen", "source": "https://t.me/cvedetector/24647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46572 - Auth0 Passport-wsfed-saml2 SAML Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-46572 \nPublished : May 6, 2025, 9:16 p.m. | 59\u00a0minutes ago \nDescription : passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user in the Auth0 tenant during SAML authentication by crafting a SAMLResponse. This can be done by using a valid SAML object that was signed by the configured IdP. Users are affected specifically when the service provider is using passport-wsfed-saml2 and a valid SAML document signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T00:31:23.000000Z"}, {"uuid": "db1447f9-b7cb-4d3d-b650-e3c0c2a8571f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46573", "type": "seen", "source": "https://t.me/cvedetector/24648", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46573 - OpenSAMLPassport-WSFed Impersonation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46573 \nPublished : May 6, 2025, 9:16 p.m. | 59\u00a0minutes ago \nDescription : passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. Users are affected specifically when the service provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T00:31:23.000000Z"}, {"uuid": "edd09c0e-d62c-477d-946a-c0fe466af269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46828", "type": "seen", "source": "https://t.me/cvedetector/24735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46828 - WeGIA Web Manager SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46828 \nPublished : May 7, 2025, 6:15 p.m. | 26\u00a0minutes ago \nDescription : WeGIA is a web manager for charitable institutions.  An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint `/html/socio/sistema/get_socios.php`, specifically in the query parameter. This issue allows attackers to inject and execute arbitrary SQL statements against the application's underlying database. As a result, it may lead to data exfiltration, authentication bypass, or complete database compromise. Version 3.3.1 fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T21:31:33.000000Z"}, {"uuid": "d6eb8efd-1b99-47b0-9a9a-fdd3536736be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46827", "type": "seen", "source": "https://t.me/cvedetector/24715", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46827 - Graylog HTML Form Cookie Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46827 \nPublished : May 7, 2025, 4:15 p.m. | 25\u00a0minutes ago \nDescription : Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with permissions to create event definitions, while the user must have permissions to view alerts. Additionally, an active Input must be present on the Graylog server that is capable of receiving form data (e.g. a HTTP input, TCP raw or syslog etc). Versions 6.0.14, 6.1.10, and 6.2.0 fix the issue. No known workarounds are available, as long as the relatively rare prerequisites are met. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T19:00:36.000000Z"}, {"uuid": "98edc79d-5a8d-4859-892b-0d39887e454a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46824", "type": "seen", "source": "https://t.me/cvedetector/24742", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46824 - Discourse Code Review Plugin Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-46824 \nPublished : May 7, 2025, 6:15 p.m. | 26\u00a0minutes ago \nDescription : The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacker can execute arbitrary JavaScript on users' browsers by posting links to malicious GitHub commits. This problem is patched in commit eed3a80 of the discourse-code-review plugin. As a workaround, one may disable the plugin. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T21:31:41.000000Z"}, {"uuid": "3282e079-6be9-41c1-9898-7676d270980f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46265", "type": "seen", "source": "https://t.me/cvedetector/24763", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46265 - F5OS Improper Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46265 \nPublished : May 7, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T00:52:36.000000Z"}, {"uuid": "7d21caa4-7405-479f-95da-879ce3dc635d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46821", "type": "seen", "source": "https://t.me/cvedetector/24764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46821 - Envoy URI Template Path Matching Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46821 \nPublished : May 7, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the `*` character from a set of valid characters in the URI path. As a result URI path containing the `*` character will not match a URI template expressions. This can result in bypass of RBAC rules when configured using the `uri_template` permissions. This vulnerability is fixed in Envoy versions v1.34.1, v1.33.3, v1.32.6, v1.31.8. As a workaround, configure additional RBAC permissions using `url_path` with `safe_regex` expression. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T00:52:37.000000Z"}, {"uuid": "100fcb64-4062-419d-85c0-e82c7601bfd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46826", "type": "seen", "source": "https://t.me/cvedetector/24765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46826 - INSA Rouen insa-auth Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-46826 \nPublished : May 7, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, was never exploited, and had limited impact. A fix was implemented promptly on May 3, 2025. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T00:52:38.000000Z"}, {"uuid": "e30ae13c-e0a7-48d8-ae03-1c41eff5b8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46727", "type": "seen", "source": "https://t.me/cvedetector/24783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46727 - Rack Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46727 \nPublished : May 7, 2025, 11:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters, allowing attackers to send requests with extremely large numbers of parameters. The vulnerability arises because `Rack::QueryParser` iterates over each `&`-separated key-value pair and adds it to a Hash without enforcing an upper bound on the total number of parameters. This allows an attacker to send a single request containing hundreds of thousands (or more) of parameters, which consumes excessive memory and CPU during parsing. An attacker can trigger denial of service by sending specifically crafted HTTP requests, which can cause memory exhaustion or pin CPU resources, stalling or crashing the Rack server. This results in full service disruption until the affected worker is restarted. Versions 2.2.14, 3.0.16, and 3.1.14 fix the issue. Some other mitigations are available. One may use middleware to enforce a maximum query string size or parameter count, or employ a reverse proxy (such as Nginx) to limit request sizes and reject oversized query strings or bodies. Limiting request body sizes and query string lengths at the web server or CDN level is an effective mitigation. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T03:23:23.000000Z"}, {"uuid": "bf0862a7-d0fc-4cd4-bcf1-e15eae656468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46811", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkp3bfrk7y27", "content": "\ud83d\udea8 New Exploit: SUSE Manager 4.3.15 - Code Execution\n\ud83d\udccb CVE: CVE-2025-46811\n\ud83d\udc64 Author: wjmaj98\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52527\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2025-46811", "creation_timestamp": "2026-04-30T07:21:06.823304Z"}, {"uuid": "efee50b5-fd5d-4a47-ba15-f4abb6b68205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbtea75l32g", "content": "This addresses the following vulnerabilities: CVE-2025-58188 CVE-2025-58187 CVE-2026-34040 CVE-2026-33997 CVE-2026-33186 CVE-2026-25679 CVE-2026-24051 CVE-2026-0915 CVE-2026-0861 CVE-2025-68119 CVE-2025-61732 CVE-2025-61731 CVE-2025-61729 CVE-2025-61726 CVE-2025-4674", "creation_timestamp": "2026-05-07T18:20:09.199349Z"}, {"uuid": "bc32eeea-b2bd-496c-ae35-665ec630e34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4611", "type": "seen", "source": "Telegram/1ntteSDNdPxs32IUiQdBAZyZztmyxGolb6r3UtF0KH6NiwM", "content": "", "creation_timestamp": "2026-08-29T23:00:17.975210Z"}, {"uuid": "3a45e166-5bd2-4580-a629-8c2d40514887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "Telegram/N1Jo8qZWaWReiL_t-N5l6uzcgIVKcO6O8PdoiYgN9aP0HPY", "content": "", "creation_timestamp": "2026-05-07T03:00:06.000000Z"}, {"uuid": "f8eb430c-b319-4dff-b6d0-5a54fa75b889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4611", "type": "seen", "source": "Telegram/1ntteSDNdPxs32IUiQdBAZyZztmyxGolb6r3UtF0KH6NiwM", "content": "", "creation_timestamp": "2026-08-30T00:00:26.284979Z"}, {"uuid": "8d78ed19-7b29-427c-a533-a9063ebe8a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4677", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-132-06", "content": "View CSAF\n\nSummary\n\nABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue for the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with access to local network who successfully exploited this vulnerability could have - Unauthorized access - Insufficient Session Expiration leading to resource unavailability - Uncontrolled Resource Consumption leading to DOS attack ABB strongly advises customers to update the latest firmware of affected products.\n\nThe following versions of ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities are affected:\n\n\n\nWebPro SNMP Card <=1.1.8.k, 1.1.8.p\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 8.8\nABB\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\nImproper Check for Unusual or Exceptional Conditions, Incorrect Implementation of Authentication Algorithm, Insufficient Session Expiration\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Chemical, Communications, Critical Manufacturing, Dams, Energy, Healthcare and Public Health, Information Technology, Water and Wastewater\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Switzerland\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4675\n<div class=\"csaf-accordion-content\">\n\nModus(slave) protocol was implemented incorrectly in the device, port 502 becomes unstable and Modbus service is unavailable until manual reboot of the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-754 Improper Check for Unusual or Exceptional Conditions\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4676\n<div class=\"csaf-accordion-content\">\n\nDevice web HMI authenticates user by validating the first character of the session cookie and authentication token. So, if only the first characters of the session cookie and token are correct, a user will be validated. An attacker can easily brute force the first character of both session cookie and bearer token. This vulnerability allows an attacker to easily bypass the authentication implemented on the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-303 Incorrect Implementation of Authentication Algorithm\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4677\n<div class=\"csaf-accordion-content\">\n\nIdle session timeout is not configured for port 23 and 502 in device, due to which an attacker can make number of connections to the device and since device is not destroying the connections, it can lead to unavailability of the resources from the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-613 Insufficient Session Expiration\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nABB PSIRT reported these vulnerabilities to CISA.\n\n\n\n\nNotice\n\nThe information in this document is subject to change without notice, and should not be construed as a commitment by ABB. ABB provides no warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall ABB or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software described in this document, even if ABB or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from ABB, and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.\n\n\n\nFrequently Asked Questions\n\nWhat causes the vulnerability? - The vulnerabilities are caused by code defects allowing the attacker to do various unintended, unauthorized actions on the target device. Please look at the description of the respective vulnerabilities in section \u201cVulnerability severity and details\u201d for further details. What is WebPro SNMP Card PowerValue? - The WebPro SNMP Card PowerValue provide web server to monitor and manage multiple UPS products in networked environment. It can detect temperature and humidity for the environment via connecting to EMD (Environmental Monitoring Device). It can not only prevent data loss from power outage and safely shutdown systems but also store programming data and scheduled shut down the UPS. All UPS warning and fault event records can be kept in WebPro SNMP Card PowerValue. What might an attacker use the vulnerability to do? - If mentioned vulnerabilities have been successfully exploited by an attacker, this could allow the attacker to take control of the target WebPro SNMP Card PowerValue device. How could an attacker exploit the vulnerability? - An attacker could try to exploit the vulnerability by creating a specially crafted message and sending the message to WebPro SNMP Card PowerValue device. This would require that the attacker has access to the system network, by connecting to the network either directly or through a wrongly configured or penetrated security system. Could the vulnerability be exploited remotely? - Yes, an attacker who has network access to an affected system node could exploit this vulnerability. Recommended practices include that User\u2019s network systems are physically protected, have no direct connections to the Internet nor any other untrusted network, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed. What does the update do? - WebPro SNMP Card PowerValue v1.1.8.p update has fixes for all the vulnerabilities mentioned in \u201cVulnerability severity and details\u201d section. When this security advisory was issued, had this vulnerability been publicly disclosed? - No, the vulnerabilities have not been publicly disclosed. When this security advisory was issued, had ABB received any reports that this vulnerability was being exploited? - No, ABB had not received any information indicating that this vulnerability had been exploited when this security advisory was originally issued.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of ABB PSIRT 2CRT000009 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact ABB PSIRT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-01-07\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-01-07\n1\nInitial version.\n\n\n2026-05-12\n2\nInitial CISA Republication of ABB PSIRT 2CRT000009 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-12T10:00:00.000000Z"}, {"uuid": "ee4c40f8-77f4-4e0e-ada9-20716741c611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4675", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-132-06", "content": "View CSAF\n\nSummary\n\nABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue for the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with access to local network who successfully exploited this vulnerability could have - Unauthorized access - Insufficient Session Expiration leading to resource unavailability - Uncontrolled Resource Consumption leading to DOS attack ABB strongly advises customers to update the latest firmware of affected products.\n\nThe following versions of ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities are affected:\n\n\n\nWebPro SNMP Card <=1.1.8.k, 1.1.8.p\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 8.8\nABB\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\nImproper Check for Unusual or Exceptional Conditions, Incorrect Implementation of Authentication Algorithm, Insufficient Session Expiration\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Chemical, Communications, Critical Manufacturing, Dams, Energy, Healthcare and Public Health, Information Technology, Water and Wastewater\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Switzerland\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4675\n<div class=\"csaf-accordion-content\">\n\nModus(slave) protocol was implemented incorrectly in the device, port 502 becomes unstable and Modbus service is unavailable until manual reboot of the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-754 Improper Check for Unusual or Exceptional Conditions\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4676\n<div class=\"csaf-accordion-content\">\n\nDevice web HMI authenticates user by validating the first character of the session cookie and authentication token. So, if only the first characters of the session cookie and token are correct, a user will be validated. An attacker can easily brute force the first character of both session cookie and bearer token. This vulnerability allows an attacker to easily bypass the authentication implemented on the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-303 Incorrect Implementation of Authentication Algorithm\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4677\n<div class=\"csaf-accordion-content\">\n\nIdle session timeout is not configured for port 23 and 502 in device, due to which an attacker can make number of connections to the device and since device is not destroying the connections, it can lead to unavailability of the resources from the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-613 Insufficient Session Expiration\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nABB PSIRT reported these vulnerabilities to CISA.\n\n\n\n\nNotice\n\nThe information in this document is subject to change without notice, and should not be construed as a commitment by ABB. ABB provides no warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall ABB or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software described in this document, even if ABB or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from ABB, and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.\n\n\n\nFrequently Asked Questions\n\nWhat causes the vulnerability? - The vulnerabilities are caused by code defects allowing the attacker to do various unintended, unauthorized actions on the target device. Please look at the description of the respective vulnerabilities in section \u201cVulnerability severity and details\u201d for further details. What is WebPro SNMP Card PowerValue? - The WebPro SNMP Card PowerValue provide web server to monitor and manage multiple UPS products in networked environment. It can detect temperature and humidity for the environment via connecting to EMD (Environmental Monitoring Device). It can not only prevent data loss from power outage and safely shutdown systems but also store programming data and scheduled shut down the UPS. All UPS warning and fault event records can be kept in WebPro SNMP Card PowerValue. What might an attacker use the vulnerability to do? - If mentioned vulnerabilities have been successfully exploited by an attacker, this could allow the attacker to take control of the target WebPro SNMP Card PowerValue device. How could an attacker exploit the vulnerability? - An attacker could try to exploit the vulnerability by creating a specially crafted message and sending the message to WebPro SNMP Card PowerValue device. This would require that the attacker has access to the system network, by connecting to the network either directly or through a wrongly configured or penetrated security system. Could the vulnerability be exploited remotely? - Yes, an attacker who has network access to an affected system node could exploit this vulnerability. Recommended practices include that User\u2019s network systems are physically protected, have no direct connections to the Internet nor any other untrusted network, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed. What does the update do? - WebPro SNMP Card PowerValue v1.1.8.p update has fixes for all the vulnerabilities mentioned in \u201cVulnerability severity and details\u201d section. When this security advisory was issued, had this vulnerability been publicly disclosed? - No, the vulnerabilities have not been publicly disclosed. When this security advisory was issued, had ABB received any reports that this vulnerability was being exploited? - No, ABB had not received any information indicating that this vulnerability had been exploited when this security advisory was originally issued.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of ABB PSIRT 2CRT000009 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact ABB PSIRT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-01-07\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-01-07\n1\nInitial version.\n\n\n2026-05-12\n2\nInitial CISA Republication of ABB PSIRT 2CRT000009 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-12T10:00:00.000000Z"}, {"uuid": "9967b998-2c55-4625-a701-7f2ae52ac71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4676", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-132-06", "content": "View CSAF\n\nSummary\n\nABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue for the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with access to local network who successfully exploited this vulnerability could have - Unauthorized access - Insufficient Session Expiration leading to resource unavailability - Uncontrolled Resource Consumption leading to DOS attack ABB strongly advises customers to update the latest firmware of affected products.\n\nThe following versions of ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities are affected:\n\n\n\nWebPro SNMP Card <=1.1.8.k, 1.1.8.p\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 8.8\nABB\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\nImproper Check for Unusual or Exceptional Conditions, Incorrect Implementation of Authentication Algorithm, Insufficient Session Expiration\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Chemical, Communications, Critical Manufacturing, Dams, Energy, Healthcare and Public Health, Information Technology, Water and Wastewater\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Switzerland\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4675\n<div class=\"csaf-accordion-content\">\n\nModus(slave) protocol was implemented incorrectly in the device, port 502 becomes unstable and Modbus service is unavailable until manual reboot of the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-754 Improper Check for Unusual or Exceptional Conditions\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4676\n<div class=\"csaf-accordion-content\">\n\nDevice web HMI authenticates user by validating the first character of the session cookie and authentication token. So, if only the first characters of the session cookie and token are correct, a user will be validated. An attacker can easily brute force the first character of both session cookie and bearer token. This vulnerability allows an attacker to easily bypass the authentication implemented on the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-303 Incorrect Implementation of Authentication Algorithm\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-4677\n<div class=\"csaf-accordion-content\">\n\nIdle session timeout is not configured for port 23 and 502 in device, due to which an attacker can make number of connections to the device and since device is not destroying the connections, it can lead to unavailability of the resources from the device.\n\nView CVE Details\n\n\n\nAffected Products\n\nABB WebPro SNMP Card PowerValue Multiple Vulnerabilities\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:ABB</div>\n<div class=\"ics-version\">Product Version:ABB WebPro SNMP Card PowerValue <=1.1.8.k</div>\n<div class=\"ics-status\">Product Status:fixed, known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixThe problem is corrected in the following product versions: WebPro SNMP card PowerValue version 1.1.8.p ABB advises users of the affected product versions to reach out to ABB Digital Service Support (ch.ups.digital@abb.com) for guidance and recommended actions. Additionally, ABB recommends implementing defensive measures to reduce the risk of vulnerability exploitation, as outlined in the product instruction manual. Please refer to the section \u201cMitigation factors\u201d for more information.\n\nMitigationMitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. In case customer cannot opt for not to upgrade the firmware or it is not feasible then please immediately apply mitigating factors mentioned in \u201cGeneral security recommendations\u201d.\n</div>\n\nRelevant CWE: CWE-613 Insufficient Session Expiration\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:U\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nABB PSIRT reported these vulnerabilities to CISA.\n\n\n\n\nNotice\n\nThe information in this document is subject to change without notice, and should not be construed as a commitment by ABB. ABB provides no warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall ABB or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software described in this document, even if ABB or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from ABB, and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.\n\n\n\nFrequently Asked Questions\n\nWhat causes the vulnerability? - The vulnerabilities are caused by code defects allowing the attacker to do various unintended, unauthorized actions on the target device. Please look at the description of the respective vulnerabilities in section \u201cVulnerability severity and details\u201d for further details. What is WebPro SNMP Card PowerValue? - The WebPro SNMP Card PowerValue provide web server to monitor and manage multiple UPS products in networked environment. It can detect temperature and humidity for the environment via connecting to EMD (Environmental Monitoring Device). It can not only prevent data loss from power outage and safely shutdown systems but also store programming data and scheduled shut down the UPS. All UPS warning and fault event records can be kept in WebPro SNMP Card PowerValue. What might an attacker use the vulnerability to do? - If mentioned vulnerabilities have been successfully exploited by an attacker, this could allow the attacker to take control of the target WebPro SNMP Card PowerValue device. How could an attacker exploit the vulnerability? - An attacker could try to exploit the vulnerability by creating a specially crafted message and sending the message to WebPro SNMP Card PowerValue device. This would require that the attacker has access to the system network, by connecting to the network either directly or through a wrongly configured or penetrated security system. Could the vulnerability be exploited remotely? - Yes, an attacker who has network access to an affected system node could exploit this vulnerability. Recommended practices include that User\u2019s network systems are physically protected, have no direct connections to the Internet nor any other untrusted network, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed. What does the update do? - WebPro SNMP Card PowerValue v1.1.8.p update has fixes for all the vulnerabilities mentioned in \u201cVulnerability severity and details\u201d section. When this security advisory was issued, had this vulnerability been publicly disclosed? - No, the vulnerabilities have not been publicly disclosed. When this security advisory was issued, had ABB received any reports that this vulnerability was being exploited? - No, ABB had not received any information indicating that this vulnerability had been exploited when this security advisory was originally issued.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of ABB PSIRT 2CRT000009 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact ABB PSIRT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-01-07\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-01-07\n1\nInitial version.\n\n\n2026-05-12\n2\nInitial CISA Republication of ABB PSIRT 2CRT000009 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-12T10:00:00.000000Z"}, {"uuid": "04aa8731-44da-4092-81e1-9758483f90cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "View CSAF\n\nSummary\n\nRuggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens Ruggedcom Rox are affected:\n\n\n\nRUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.8\nSiemens\nSiemens Ruggedcom Rox\nUncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13103\n<div class=\"csaf-accordion-content\">\n\nA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13104\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13106\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14192\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14193\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14194\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14195\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14196\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14197\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.0\n9.1\nCRITICAL\nCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14198\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14199\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14200\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14201\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14202\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14203\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14204\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2020-10648\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-2347\n<div class=\"csaf-accordion-content\">\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30552\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30790\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-34835\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the \"i2c md\" command enables the corruption of the return address pointer of the do_i2c_md function.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-3019\n<div class=\"csaf-accordion-content\">\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-27043\n<div class=\"csaf-accordion-content\">\n\nThe email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-3447\n<div class=\"csaf-accordion-content\">\n\nA heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-22365\n<div class=\"csaf-accordion-content\">\n\nlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57256\n<div class=\"csaf-accordion-content\">\n\nAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57258\n<div class=\"csaf-accordion-content\">\n\nInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-0395\n<div class=\"csaf-accordion-content\">\n\nWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-131 Incorrect Calculation of Buffer Size\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-3576\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-328 Use of Weak Hash\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6020\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9714\n<div class=\"csaf-accordion-content\">\n\nUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-46836\n<div class=\"csaf-accordion-content\">\n\nnet-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49794\n<div class=\"csaf-accordion-content\">\n\nA use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-825 Expired Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49796\n<div class=\"csaf-accordion-content\">\n\nA vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-577017 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-577017 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "6fb1247b-14cd-4fbc-b201-68788e6f59e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46822", "type": "seen", "source": "Telegram/Otu6Jbe8lDXdP_SNoyBScRz6BIgHRvrsI4mTky3IQgsujWk", "content": "", "creation_timestamp": "2026-05-23T07:00:10.000000Z"}, {"uuid": "77c4b154-ae2a-48c7-b2f2-5cbc3d100fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmrlpedbp52k", "content": "CVE-2025-46273 - Critical Supply Chain Attack in Uni. Hard-coded credentials expose all managed devices to admin takeover. CVSS 9.8. No patch available yet. Isolate systems now. #CVE #infosec #supplychain\n\nhttps://www.valtersit.com/cve/CVE-2025-46273/", "creation_timestamp": "2026-05-26T18:10:57.702289Z"}, {"uuid": "489bd7b2-d034-4b6f-a22c-0b43a91f6975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4606", "type": "seen", "source": "Telegram/13iWv8cmBzG87md-kXQ45AYnHBM4WRnfa04R3so7hiGk5PU", "content": "", "creation_timestamp": "2026-08-18T13:00:05.774283Z"}, {"uuid": "6a2678cb-11b5-45a4-ace4-927c614e33b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46551", "type": "published-proof-of-concept", "source": "https://github.com/jruby/jruby-openssl/security/advisories/GHSA-72qj-48g4-5xgx", "content": "", "creation_timestamp": "2025-05-07T16:05:29.000000Z"}, {"uuid": "12cfbd8d-7054-4b05-bec3-1353a1520487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46816", "type": "published-proof-of-concept", "source": "https://github.com/patrickhener/goshs/security/advisories/GHSA-rwj2-w85g-5cmm", "content": "", "creation_timestamp": "2025-05-06T10:14:14.000000Z"}, {"uuid": "45a5fe61-c9ed-494b-a59b-67e5e5b71363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46335", "type": "published-proof-of-concept", "source": "https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-mwfg-948f-2cc5", "content": "", "creation_timestamp": "2025-05-04T23:34:03.000000Z"}, {"uuid": "ec958dec-6af3-44e5-8243-01c1e1bb4789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46724", "type": "published-proof-of-concept", "source": "https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj", "content": "", "creation_timestamp": "2025-05-20T15:54:09.000000Z"}, {"uuid": "e37e5442-d107-4b25-91c4-169ac81a7eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46567", "type": "published-proof-of-concept", "source": "https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-f2f7-gj54-6vpv", "content": "", "creation_timestamp": "2025-04-23T08:41:15.000000Z"}, {"uuid": "bdd88bc3-79b4-4e95-9816-9e2a2d1f7e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46726", "type": "published-proof-of-concept", "source": "https://github.com/langroid/langroid/security/advisories/GHSA-pw95-88fg-3j6f", "content": "", "creation_timestamp": "2025-05-05T16:03:18.000000Z"}, {"uuid": "273bc9fd-5be1-40e3-a5c8-4b0cce4a1613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46553", "type": "published-proof-of-concept", "source": "https://github.com/misskey-dev/summaly/security/advisories/GHSA-7899-w6c4-vqc4", "content": "", "creation_timestamp": "2025-05-05T11:11:51.000000Z"}, {"uuid": "b1666e7b-1d33-4661-bb9d-70079789d06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46565", "type": "published-proof-of-concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-859w-5945-r5v3", "content": "", "creation_timestamp": "2025-04-30T08:11:08.000000Z"}, {"uuid": "1547a321-fdff-4b78-a2a0-342c932e98c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46560", "type": "published-proof-of-concept", "source": "https://github.com/vllm-project/vllm/security/advisories/GHSA-vc6m-hm49-g9qg", "content": "", "creation_timestamp": "2025-04-29T13:18:40.000000Z"}, {"uuid": "d1f4e517-3994-4d6f-9c2a-48d30a9d22da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46550", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-ggqx-43h2-55jp", "content": "", "creation_timestamp": "2025-04-28T16:52:49.000000Z"}, {"uuid": "58d21959-3865-4bc7-b4f1-348a4f1671de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46549", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r9gv-qffm-xw6f", "content": "", "creation_timestamp": "2025-04-28T16:52:26.000000Z"}, {"uuid": "6beb5638-58f5-49cc-af02-b764a056048b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46348", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-wc9g-6j9w-hr95", "content": "", "creation_timestamp": "2025-04-28T16:51:05.000000Z"}, {"uuid": "7dd2278d-feae-4763-a394-339f43d5e28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46417", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-93mv-x874-956g", "content": "", "creation_timestamp": "2025-04-07T18:52:47.000000Z"}, {"uuid": "134403e5-7e5c-4eaa-bfe1-a4b6c15dbd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://t.me/purp_sec/1280", "content": "\u2705 \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9-10\n\n\ud83d\udd35 CVE-2025-11367 \u2014 RCE \u0432 N-central Windows Software Probe (CVSS 10,0), \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u0432 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f (CWE-502) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 probe.\n\n\ud83d\udd35 CVE-2025-11366 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 N-central Server \u0447\u0435\u0440\u0435\u0437 path traversal (CVSS 9,4, CWE-22). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041a\u0430\u043a \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-46608 \u2014 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Dell Data Lakehouse (CVSS 9,1, CWE-284). \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd35 CVE-2025-60724 \u2014 heap overflow \u0432 Microsoft Graphics Component (GDI+, CVSS 9.8). \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043c\u0435\u0442\u0430\u0444\u0430\u0439\u043b\u043e\u043c \u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u044b, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n\ud83d\udd35 CVE-2025-59367 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 ASUS DSL-\u0441\u0435\u0440\u0438\u0438 (CVSS 9,8, CWE-288). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u0442\u0440\u0430\u0444\u0438\u043a\u0443 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043b\u0430\u0442\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:04.896690Z"}, {"uuid": "8dad32b4-bc5b-4a97-9a8c-4a5d7e0bacca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46818", "type": "seen", "source": "https://t.me/purp_sec/1189", "content": "\ud83d\udee1 \u0412\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u043c Lua-\u0434\u0432\u0438\u0436\u043a\u0435 Redis 7.4.5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\nCVE-2025-49844 \u2014 \u0431\u0430\u0433 \u0442\u0438\u043f\u0430 use-after-free. \u041f\u0430\u0440\u0441\u0435\u0440 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 luaS_new(L, name) \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f TString \u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u0430, \u043d\u0435 \u043f\u043e\u043c\u0435\u0449\u0430\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u0441\u0442\u0435\u043a Lua \u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u044f\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 GS. \u041f\u0440\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0438\u043b\u0438 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u041f\u042b \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0430\u0440\u0441\u0435\u0440 \u0441\u0441\u044b\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0435, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0441\u043b\u043e\u0432\u0438\u0435 use-after-free \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE.\n\nCVE-2025-46817 \u2014 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 unpack() \u0441 \u0440\u0438\u0441\u043a\u043e\u043c \u043f\u043e\u0440\u0447\u0438 \u0441\u0442\u0435\u043a\u0430 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e RCE. \u0424\u0443\u043d\u043a\u0446\u0438\u044f unpack() \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u0435\u0442 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u0442\u0430\u0431\u043b\u0438\u0446\u044b; \u0435\u0441\u043b\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b i \u0438 e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0430\u0440\u0438\u0444\u043c\u0435\u0442\u0438\u043a\u0430 (32-/64-\u0431\u0438\u0442) \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u0441\u044f \u0438\u043b\u0438 \u0434\u0430\u0442\u044c \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442. \u0412\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u043e\u0440\u0440\u0443\u043c\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u043e\u043a\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\nCVE-2025-46818 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0442\u0438\u043f\u043e\u0432, \u0434\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u2014 \u044d\u0442\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0437\u0430\u0434\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430\u0434 \u0442\u0438\u043f\u043e\u043c. \u0415\u0441\u043b\u0438 \u043b\u044e\u0431\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c __index, __newindex \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043f\u0440\u0430\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u0430\u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0442\u0438\u043f\u0430 string/number/nil, \u0442\u043e \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u044d\u0442\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u044b \u0438 \u0442.\u0434. \u0412 multi-tenant \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445 \u044d\u0442\u043e \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0447\u0443\u0436\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd35 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 (\u0441 PoC).\n\n#blue_team #CVE #Redis", "creation_timestamp": "2026-08-14T16:00:05.898195Z"}, {"uuid": "e968164a-1500-4b71-9dad-53aecc094e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://t.me/purp_sec/1189", "content": "\ud83d\udee1 \u0412\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u043c Lua-\u0434\u0432\u0438\u0436\u043a\u0435 Redis 7.4.5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\nCVE-2025-49844 \u2014 \u0431\u0430\u0433 \u0442\u0438\u043f\u0430 use-after-free. \u041f\u0430\u0440\u0441\u0435\u0440 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 luaS_new(L, name) \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f TString \u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u0430, \u043d\u0435 \u043f\u043e\u043c\u0435\u0449\u0430\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u0441\u0442\u0435\u043a Lua \u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u044f\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 GS. \u041f\u0440\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0438\u043b\u0438 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u041f\u042b \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0430\u0440\u0441\u0435\u0440 \u0441\u0441\u044b\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0435, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0441\u043b\u043e\u0432\u0438\u0435 use-after-free \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE.\n\nCVE-2025-46817 \u2014 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 unpack() \u0441 \u0440\u0438\u0441\u043a\u043e\u043c \u043f\u043e\u0440\u0447\u0438 \u0441\u0442\u0435\u043a\u0430 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e RCE. \u0424\u0443\u043d\u043a\u0446\u0438\u044f unpack() \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u0435\u0442 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u0442\u0430\u0431\u043b\u0438\u0446\u044b; \u0435\u0441\u043b\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b i \u0438 e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0430\u0440\u0438\u0444\u043c\u0435\u0442\u0438\u043a\u0430 (32-/64-\u0431\u0438\u0442) \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u0441\u044f \u0438\u043b\u0438 \u0434\u0430\u0442\u044c \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442. \u0412\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u043e\u0440\u0440\u0443\u043c\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u043e\u043a\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\nCVE-2025-46818 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0442\u0438\u043f\u043e\u0432, \u0434\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u2014 \u044d\u0442\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0437\u0430\u0434\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430\u0434 \u0442\u0438\u043f\u043e\u043c. \u0415\u0441\u043b\u0438 \u043b\u044e\u0431\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c __index, __newindex \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043f\u0440\u0430\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u0430\u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0442\u0438\u043f\u0430 string/number/nil, \u0442\u043e \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u044d\u0442\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u044b \u0438 \u0442.\u0434. \u0412 multi-tenant \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445 \u044d\u0442\u043e \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0447\u0443\u0436\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd35 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 (\u0441 PoC).\n\n#blue_team #CVE #Redis", "creation_timestamp": "2026-08-14T16:00:05.939402Z"}, {"uuid": "a566a2c8-1176-4844-9ee9-bd8d38c7e8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://t.me/purp_sec/945", "content": "\ud83d\udd12 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 Forescout SecureConnector \u043e\u0442 Forescout (CVE-2025-4660)\n\nSecureConnector \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b _FS_SC_UNINSTALL_PIPE \u0434\u043b\u044f \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u0442\u043e\u0442 \u043a\u0430\u043d\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 (\u0432 \u0442.\u0447. \u043d\u0435\u0430\u0434\u043c\u0438\u043d\u0430\u043c), \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f forescout server \u043f\u043e HTTPS.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043b\u044e\u0431\u043e\u0439 Windows \u043c\u0430\u0448\u0438\u043d\u043e\u0439 \u0432 \u0441\u0435\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043a\u0430\u043d\u0430\u043b\u0443 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0433\u043e redirect-\u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442 \u0430\u0433\u0435\u043d\u0442\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 C2-\u0441\u0435\u0440\u0432\u0435\u0440. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0445\u044d\u0448-\u0441\u0443\u043c\u043c\u0443 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 thumbprint, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0443\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0443\u043b\u0435\u0439. \u0412 \u043d\u043e\u0440\u043c\u0435, \u0435\u0441\u043b\u0438 thumbprint \u043d\u0435 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u0435\u0442 \u2014 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u043c \u043e\u0434\u043d\u0438 \u043d\u0443\u043b\u0438.\n\n\u0410\u0433\u0435\u043d\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0441\u044f \u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 HTTPS-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 TLS-\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430, \u043e\u043d \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u00ab\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u00bb forescout-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team", "creation_timestamp": "2026-08-14T16:00:09.612775Z"}, {"uuid": "a956f82b-3c14-4939-a395-5f8c30494d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mngqggeqet2i", "content": "7/19\n\nThis update fixes a security issue:\n  interface.c: Stack-based Buffer Overflow in get_name().\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2025-46836\n  (* Security fix *)\nn/proftpd-1.3.9b-x86_64-1.txz:  Upgraded.\n  This update fixes a security issue:", "creation_timestamp": "2026-06-04T04:01:21.134625Z"}, {"uuid": "5d3fe4a7-d44c-4865-8d6e-6e7ccb73655f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4647", "type": "seen", "source": "https://t.me/purp_sec/623", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27920 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0432 Output Messenger. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \"../\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-4647 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Centreon. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e SVG-\u0444\u0430\u0439\u043b\u0430, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-42999 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Metadata Uploader \u0432 SAP NetWeaver Visual Composer. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-4632 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Samsung MagicINFO 9, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-22249 \u2014 DOM-based XSS \u0432 VMware Aria Automation. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0431\u0443\u0434\u0438\u0432 \u0438\u0445 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:15.565279Z"}, {"uuid": "eaf048f2-d668-427c-9530-db883436ed46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/purp_sec/633", "content": "\ud83d\udd12 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0434\u043b\u044f Windows, macOS \u0438 Linux. CVE-2025-4664, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041e\u0431\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u043c\u0430\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-4664 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-4609 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \n\n#blue_team #CVE #Google", "creation_timestamp": "2026-08-14T16:00:15.600216Z"}, {"uuid": "2bc59863-a7b1-417d-b17a-228e2ecfd05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/purp_sec/633", "content": "\ud83d\udd12 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0434\u043b\u044f Windows, macOS \u0438 Linux. CVE-2025-4664, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041e\u0431\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u043c\u0430\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-4664 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-4609 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \n\n#blue_team #CVE #Google", "creation_timestamp": "2026-08-14T16:00:15.639496Z"}, {"uuid": "becc5f89-a760-4028-8839-11bc1f699270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://t.me/purp_sec/623", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27920 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0432 Output Messenger. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \"../\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-4647 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Centreon. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e SVG-\u0444\u0430\u0439\u043b\u0430, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-42999 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Metadata Uploader \u0432 SAP NetWeaver Visual Composer. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-4632 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Samsung MagicINFO 9, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-22249 \u2014 DOM-based XSS \u0432 VMware Aria Automation. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0431\u0443\u0434\u0438\u0432 \u0438\u0445 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:15.798738Z"}, {"uuid": "d2efc11b-5033-4828-bd7e-7cc13860e921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.546218Z"}, {"uuid": "f4fb5118-d687-4e52-9dc3-0b073913025f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.588617Z"}, {"uuid": "c4cd5e8e-7549-4274-80bc-5f87635210fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.664684Z"}, {"uuid": "ed6a0943-1752-435d-9965-b00b4f526237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.734990Z"}, {"uuid": "d91bd317-2eba-4129-86e2-233415433ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.902221Z"}, {"uuid": "7a90633e-9ec0-42f0-bd99-827e4505171e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://t.me/purp_sec/570", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-6235 \u2014 \u200b\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Citrix NetScaler, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\u200b\n\n\ud83d\udd35 CVE-2025-32818 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 SSLVPN Virtual Office \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SonicWall. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.\u200b\n\n\ud83d\udd35 CVE-2024-53104 \u2014 \u0432\u044b\u043f\u0443\u0449\u0435\u043d PoC \u0434\u043b\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Android \u0438\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-46616 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Quantum StorNext Web GUI API, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 StorNext RYO, StorNext Xcellis Workflow Director \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ActiveScale.\n\n\ud83d\udd35 CVE-2025-46273 \u2014 UNI-NMS-Lite \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c UNI-NMS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.929645Z"}, {"uuid": "e09cc174-e149-4a8e-9c92-d16ebe71834f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://t.me/purp_sec/570", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-6235 \u2014 \u200b\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Citrix NetScaler, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\u200b\n\n\ud83d\udd35 CVE-2025-32818 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 SSLVPN Virtual Office \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SonicWall. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.\u200b\n\n\ud83d\udd35 CVE-2024-53104 \u2014 \u0432\u044b\u043f\u0443\u0449\u0435\u043d PoC \u0434\u043b\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Android \u0438\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-46616 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Quantum StorNext Web GUI API, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 StorNext RYO, StorNext Xcellis Workflow Director \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ActiveScale.\n\n\ud83d\udd35 CVE-2025-46273 \u2014 UNI-NMS-Lite \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c UNI-NMS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.959425Z"}, {"uuid": "a3ec4118-082c-4f15-a81d-096b7a5078d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116719508098466554", "content": "#OT #Advisory VDE-2026-064METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3\nMultiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases.#CVE CVE-2025-68121, CVE-2018-15727, CVE-2025-15467, CVE-2023-36414, CVE-2024-0056, CVE-2025-68154, CVE-2026-24737, CVE-2021-24112, CVE-2025-58187, CVE-2025-9230, CVE-2025-15281, CVE-2026-21218, CVE-2026-26127, CVE-2026-26130, CVE-2026-0915, CVE-2026-2391, CVE-2026-22036, CVE-2024-43483, CVE-2023-29331, CVE-2025-69419, CVE-2025-46817\nhttps://certvde.com/en/advisories/vde-2026-064/\n#CSAF https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-064.json", "creation_timestamp": "2026-06-09T09:46:03.013272Z"}, {"uuid": "4a199fad-4153-4dd0-8a9b-3c6c4cea354b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46315", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mocfixq3r52y", "content": "\ud83d\udfe0 CVE-2025-46315 - High (7.5)\n\nA permissions issue was addressed with additional restrictions. This issue is fixed in macOS Taho...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-46315/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T04:00:28.713511Z"}, {"uuid": "a51770a4-9f0e-4d21-9d20-05018ba3caed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://t.me/purp_sec/570", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-6235 \u2014 \u200b\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Citrix NetScaler, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\u200b\n\n\ud83d\udd35 CVE-2025-32818 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 SSLVPN Virtual Office \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SonicWall. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.\u200b\n\n\ud83d\udd35 CVE-2024-53104 \u2014 \u0432\u044b\u043f\u0443\u0449\u0435\u043d PoC \u0434\u043b\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Android \u0438\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-46616 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Quantum StorNext Web GUI API, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 StorNext RYO, StorNext Xcellis Workflow Director \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ActiveScale.\n\n\ud83d\udd35 CVE-2025-46273 \u2014 UNI-NMS-Lite \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c UNI-NMS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:05.658806Z"}, {"uuid": "b7a5e428-223c-4bd7-9533-87daee6d4074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46616", "type": "seen", "source": "https://t.me/purp_sec/570", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-6235 \u2014 \u200b\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Citrix NetScaler, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\u200b\n\n\ud83d\udd35 CVE-2025-32818 \u2014 \u0431\u0430\u0433 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 SSLVPN Virtual Office \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SonicWall. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.\u200b\n\n\ud83d\udd35 CVE-2024-53104 \u2014 \u0432\u044b\u043f\u0443\u0449\u0435\u043d PoC \u0434\u043b\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Android \u0438\u0437 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Google.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-46616 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Quantum StorNext Web GUI API, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 StorNext RYO, StorNext Xcellis Workflow Director \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ActiveScale.\n\n\ud83d\udd35 CVE-2025-46273 \u2014 UNI-NMS-Lite \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a\u043e \u0432\u0441\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c UNI-NMS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:05.726154Z"}, {"uuid": "15667828-a13c-4986-9d0d-b9e4493aa181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46836", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mojjkpdg5u2a", "content": "19/36\n\nn/net-tools-20181103_0eebece-x86_64-5.txz:  Rebuilt.\n  The upstream patch for CVE-2025-46836 introduced a regression that broke\n  packet and byte reporting. Thanks to jtsn for a working alternate patch.\nn/timedated-2026.06.02-x86_64-1.txz:  Added.", "creation_timestamp": "2026-06-18T00:01:38.942527Z"}, {"uuid": "08264358-7b39-4988-bd6a-d30f78321af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46273", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.102642Z"}, {"uuid": "2cb6184d-7edf-408c-ad86-8b1f4ac9e6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46272", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.151988Z"}, {"uuid": "d714b875-df81-446b-9db9-5ab9d28604c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46274", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.242377Z"}, {"uuid": "b659ec61-d1ae-4085-b4ac-ada8dcb389c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46271", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.326157Z"}, {"uuid": "5b6bf326-027f-4216-a4e3-3658f5c4f0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46275", "type": "seen", "source": "https://t.me/purp_sec/576", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.369638Z"}, {"uuid": "665db3f1-2f04-4784-a44f-e53c5fcd6425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/purp_sec/633", "content": "\ud83d\udd12 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0434\u043b\u044f Windows, macOS \u0438 Linux. CVE-2025-4664, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041e\u0431\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u043c\u0430\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-4664 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-4609 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \n\n#blue_team #CVE #Google", "creation_timestamp": "2026-08-15T00:00:07.218075Z"}, {"uuid": "448e54da-1eed-476c-8df6-35dfd25811fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/purp_sec/633", "content": "\ud83d\udd12 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0434\u043b\u044f Windows, macOS \u0438 Linux. CVE-2025-4664, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041e\u0431\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u043c\u0430\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2025-4664 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Loader. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-4609 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Mojo. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \n\n#blue_team #CVE #Google", "creation_timestamp": "2026-08-15T00:00:07.255803Z"}, {"uuid": "b2e57168-bec9-4d20-8fbc-c2f42b1cbccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://t.me/purp_sec/623", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27920 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0432 Output Messenger. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \"../\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-4647 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Centreon. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e SVG-\u0444\u0430\u0439\u043b\u0430, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-42999 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Metadata Uploader \u0432 SAP NetWeaver Visual Composer. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-4632 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Samsung MagicINFO 9, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-22249 \u2014 DOM-based XSS \u0432 VMware Aria Automation. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0431\u0443\u0434\u0438\u0432 \u0438\u0445 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:07.397507Z"}, {"uuid": "e4c08375-8b5b-41dd-9726-2bf701693bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4647", "type": "seen", "source": "https://t.me/purp_sec/623", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27920 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0432 Output Messenger. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \"../\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-4647 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Centreon. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e SVG-\u0444\u0430\u0439\u043b\u0430, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83d\udd35 CVE-2025-42999 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Metadata Uploader \u0432 SAP NetWeaver Visual Composer. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-4632 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Samsung MagicINFO 9, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35 CVE-2025-22249 \u2014 DOM-based XSS \u0432 VMware Aria Automation. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443 \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0431\u0443\u0434\u0438\u0432 \u0438\u0445 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:07.433557Z"}, {"uuid": "7e02cca1-6421-4dfc-9571-6972e6ba7fa0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/61444ce0-5e5a-4abb-84dd-5f0f7a3cfdde", "content": "", "creation_timestamp": "2026-06-19T12:45:27.957284Z"}, {"uuid": "09a512a4-c1ae-4e0f-835c-f47a7f3e5a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4660", "type": "seen", "source": "https://t.me/purp_sec/945", "content": "\ud83d\udd12 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 Forescout SecureConnector \u043e\u0442 Forescout (CVE-2025-4660)\n\nSecureConnector \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b _FS_SC_UNINSTALL_PIPE \u0434\u043b\u044f \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u0442\u043e\u0442 \u043a\u0430\u043d\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 (\u0432 \u0442.\u0447. \u043d\u0435\u0430\u0434\u043c\u0438\u043d\u0430\u043c), \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f forescout server \u043f\u043e HTTPS.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043b\u044e\u0431\u043e\u0439 Windows \u043c\u0430\u0448\u0438\u043d\u043e\u0439 \u0432 \u0441\u0435\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043a\u0430\u043d\u0430\u043b\u0443 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0433\u043e redirect-\u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442 \u0430\u0433\u0435\u043d\u0442\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 C2-\u0441\u0435\u0440\u0432\u0435\u0440. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0445\u044d\u0448-\u0441\u0443\u043c\u043c\u0443 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 thumbprint, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0443\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0443\u043b\u0435\u0439. \u0412 \u043d\u043e\u0440\u043c\u0435, \u0435\u0441\u043b\u0438 thumbprint \u043d\u0435 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u0435\u0442 \u2014 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u043e. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u043c \u043e\u0434\u043d\u0438 \u043d\u0443\u043b\u0438.\n\n\u0410\u0433\u0435\u043d\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0441\u044f \u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 HTTPS-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 TLS-\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430, \u043e\u043d \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u00ab\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u00bb forescout-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team", "creation_timestamp": "2026-08-15T00:00:13.509044Z"}, {"uuid": "c2143f39-4b66-42e0-aee2-305936c337cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46817", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1189", "content": "\ud83d\udee1 \u0412\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u043c Lua-\u0434\u0432\u0438\u0436\u043a\u0435 Redis 7.4.5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\nCVE-2025-49844 \u2014 \u0431\u0430\u0433 \u0442\u0438\u043f\u0430 use-after-free. \u041f\u0430\u0440\u0441\u0435\u0440 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 luaS_new(L, name) \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f TString \u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u0430, \u043d\u0435 \u043f\u043e\u043c\u0435\u0449\u0430\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u0441\u0442\u0435\u043a Lua \u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u044f\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 GS. \u041f\u0440\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0438\u043b\u0438 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u041f\u042b \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0430\u0440\u0441\u0435\u0440 \u0441\u0441\u044b\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0435, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0441\u043b\u043e\u0432\u0438\u0435 use-after-free \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE.\n\nCVE-2025-46817 \u2014 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 unpack() \u0441 \u0440\u0438\u0441\u043a\u043e\u043c \u043f\u043e\u0440\u0447\u0438 \u0441\u0442\u0435\u043a\u0430 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e RCE. \u0424\u0443\u043d\u043a\u0446\u0438\u044f unpack() \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u0435\u0442 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u0442\u0430\u0431\u043b\u0438\u0446\u044b; \u0435\u0441\u043b\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b i \u0438 e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0430\u0440\u0438\u0444\u043c\u0435\u0442\u0438\u043a\u0430 (32-/64-\u0431\u0438\u0442) \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u0441\u044f \u0438\u043b\u0438 \u0434\u0430\u0442\u044c \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442. \u0412\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u043e\u0440\u0440\u0443\u043c\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u043e\u043a\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\nCVE-2025-46818 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0442\u0438\u043f\u043e\u0432, \u0434\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u2014 \u044d\u0442\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0437\u0430\u0434\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430\u0434 \u0442\u0438\u043f\u043e\u043c. \u0415\u0441\u043b\u0438 \u043b\u044e\u0431\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c __index, __newindex \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043f\u0440\u0430\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u0430\u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0442\u0438\u043f\u0430 string/number/nil, \u0442\u043e \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u044d\u0442\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u044b \u0438 \u0442.\u0434. \u0412 multi-tenant \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445 \u044d\u0442\u043e \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0447\u0443\u0436\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd35 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 (\u0441 PoC).\n\n#blue_team #CVE #Redis", "creation_timestamp": "2026-08-15T00:00:16.165131Z"}, {"uuid": "ca5f831d-e95c-4117-b6c9-fb198c4b33a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46818", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1189", "content": "\ud83d\udee1 \u0412\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u043c Lua-\u0434\u0432\u0438\u0436\u043a\u0435 Redis 7.4.5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\nCVE-2025-49844 \u2014 \u0431\u0430\u0433 \u0442\u0438\u043f\u0430 use-after-free. \u041f\u0430\u0440\u0441\u0435\u0440 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 luaS_new(L, name) \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f TString \u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u0430, \u043d\u0435 \u043f\u043e\u043c\u0435\u0449\u0430\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u0441\u0442\u0435\u043a Lua \u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u044f\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 GS. \u041f\u0440\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0438\u043b\u0438 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u041f\u042b \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0430\u0440\u0441\u0435\u0440 \u0441\u0441\u044b\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0435, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0441\u043b\u043e\u0432\u0438\u0435 use-after-free \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE.\n\nCVE-2025-46817 \u2014 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 unpack() \u0441 \u0440\u0438\u0441\u043a\u043e\u043c \u043f\u043e\u0440\u0447\u0438 \u0441\u0442\u0435\u043a\u0430 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e RCE. \u0424\u0443\u043d\u043a\u0446\u0438\u044f unpack() \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u0435\u0442 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u0442\u0430\u0431\u043b\u0438\u0446\u044b; \u0435\u0441\u043b\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b i \u0438 e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0430\u0440\u0438\u0444\u043c\u0435\u0442\u0438\u043a\u0430 (32-/64-\u0431\u0438\u0442) \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u0441\u044f \u0438\u043b\u0438 \u0434\u0430\u0442\u044c \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442. \u0412\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0445 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u043e\u0440\u0440\u0443\u043c\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u043e\u043a\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\nCVE-2025-46818 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0442\u0438\u043f\u043e\u0432, \u0434\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041c\u0435\u0442\u0430\u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u2014 \u044d\u0442\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0437\u0430\u0434\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430\u0434 \u0442\u0438\u043f\u043e\u043c. \u0415\u0441\u043b\u0438 \u043b\u044e\u0431\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c __index, __newindex \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043f\u0440\u0430\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u0430\u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0442\u0438\u043f\u0430 string/number/nil, \u0442\u043e \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u044d\u0442\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u044b \u0438 \u0442.\u0434. \u0412 multi-tenant \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445 \u044d\u0442\u043e \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0447\u0443\u0436\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd35 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 (\u0441 PoC).\n\n#blue_team #CVE #Redis", "creation_timestamp": "2026-08-15T00:00:16.121433Z"}, {"uuid": "a8a77ac4-5966-43d0-acc0-af6a69a5532a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8d27ec3-cb8a-4f14-9ed4-af94c82cca74", "content": "", "creation_timestamp": "2026-06-23T14:03:53.180965Z"}, {"uuid": "9e1e1fcb-5b18-4bc9-949b-e151fad792c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://t.me/purp_sec/1280", "content": "\u2705 \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9-10\n\n\ud83d\udd35 CVE-2025-11367 \u2014 RCE \u0432 N-central Windows Software Probe (CVSS 10,0), \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u0432 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f (CWE-502) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 probe.\n\n\ud83d\udd35 CVE-2025-11366 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 N-central Server \u0447\u0435\u0440\u0435\u0437 path traversal (CVSS 9,4, CWE-22). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041a\u0430\u043a \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-46608 \u2014 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Dell Data Lakehouse (CVSS 9,1, CWE-284). \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd35 CVE-2025-60724 \u2014 heap overflow \u0432 Microsoft Graphics Component (GDI+, CVSS 9.8). \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043c\u0435\u0442\u0430\u0444\u0430\u0439\u043b\u043e\u043c \u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u044b, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n\ud83d\udd35 CVE-2025-59367 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 ASUS DSL-\u0441\u0435\u0440\u0438\u0438 (CVSS 9,8, CWE-288). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u0442\u0440\u0430\u0444\u0438\u043a\u0443 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043b\u0430\u0442\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:33.514751Z"}, {"uuid": "4f14dea9-b8b1-4977-9e21-027011967f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4606", "type": "seen", "source": "Telegram/13iWv8cmBzG87md-kXQ45AYnHBM4WRnfa04R3so7hiGk5PU", "content": "", "creation_timestamp": "2026-08-19T00:00:26.155180Z"}, {"uuid": "eefa4ed0-7433-4493-9481-f32c8779f397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4674", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116838675578498232", "content": "#OT #Advisory VDE-2026-049Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01\nSecurity advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.#CVE CVE-2025-68121, CVE-2026-1229, CVE-2025-41115, CVE-2025-15467, CVE-2023-3128, CVE-2022-28660, CVE-2022-26148, CVE-2018-15727, CVE-2020-27846, CVE-2024-9264, CVE-2024-1442, CVE-2022-28391, CVE-2022-24812, CVE-2022-23498, CVE-2022-21703, CVE-2022-31097, CVE-2025-61732, CVE-2025-4674, CVE-2022-29170, CVE-2024-56406\nhttps://certvde.com/en/advisories/vde-2026-049/\n#CSAF https://balluff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-049.json", "creation_timestamp": "2026-06-30T10:51:46.774870Z"}, {"uuid": "cc2d1e87-f29c-42de-a85a-f12e7c674505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-4673", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1940", "content": "", "creation_timestamp": "2026-07-01T02:36:14.949934Z"}, {"uuid": "18b461a0-279c-4564-b425-fee7b1b52641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.495697Z"}, {"uuid": "b10b3b13-6c30-44d0-9c82-945602ceb019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46206", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxflzdkzb2g", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-46206 \u0432 Artifex MuPDF: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u0432 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AD8BEB85-7E82-4EE2-8D32-24EAE708D0F6", "creation_timestamp": "2026-07-06T05:53:18.455704Z"}, {"uuid": "d026ce00-af16-4997-bf45-1d97b4df9b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46719", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq35dpjux42h", "content": "CVE-2025-46719 - open-webui\nAttackers can inject malicious code into chat messages, allowing them to steal user access tokens and take control of user accounts. This can lead to full account takeover and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openwebui #pip #CVE #infosec", "creation_timestamp": "2026-07-07T17:36:06.420062Z"}, {"uuid": "526bec03-c7c1-4b27-8113-280fdffc4417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46719", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-9f4f-jv96-8766", "content": "", "creation_timestamp": "2026-07-07T18:35:09.347531Z"}, {"uuid": "339d855a-2a5b-43cf-b9fb-ef00fe823a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-46571", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-8gh5-qqh8-hq3x", "content": "", "creation_timestamp": "2026-07-07T18:35:11.523072Z"}, {"uuid": "e88e274c-9586-45c7-8bc2-0af9d0b18b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:35.050938Z"}, {"uuid": "21c0bfcd-5cf4-4a55-8fe0-a2face220e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17062", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with public Proof-of-Concept repositories on GitHub, useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2025-4632\n\ud83c\udfaf Grafana Path Traversal Vulnerability\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Chocapikk/CVE-2025-4632\n\n\ud83e\udde0 Overview\nA path traversal vulnerability in Grafana allows attackers to access sensitive files on the server by manipulating request paths.\nThe vulnerability can expose configuration files, credentials, or other sensitive data stored on the system.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Configuration leakage\n\u2022 Potential lateral movement\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-49144\n\ud83c\udfaf Roundcube Webmail \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/numanturle/CVE-2025-49144\n\n\ud83e\udde0 Overview\nA vulnerability in Roundcube Webmail allows attackers to achieve remote code execution through crafted input handling in specific components of the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Webmail server compromise\n\u2022 Potential mail system takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-34028\n\ud83c\udfaf GLPI IT Asset Management \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/h4x0r-dz/CVE-2025-34028\n\n\ud83e\udde0 Overview\nA file upload vulnerability affecting GLPI IT management platform allows attackers to upload malicious files that can lead to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-30208\n\ud83c\udfaf Next.js Middleware Security Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/chebuya/CVE-2025-30208\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js middleware handling allows attackers to bypass certain security checks due to improper request validation.\n\n\u2699\ufe0f Impact\n\u2022 Security control bypass\n\u2022 Authentication logic manipulation\n\u2022 Potential access control issues\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-24054\n\ud83c\udfaf Windows NTLM Relay Attack\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fortra/impacket\n\n\ud83e\udde0 Overview\nA vulnerability related to NTLM authentication relay attacks in Windows environments allows attackers to relay authentication attempts and gain unauthorized access to services.\n\n\u2699\ufe0f Impact\n\u2022 Credential relay attack\n\u2022 Unauthorized authentication\n\u2022 Lateral movement in networks\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories can be useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.466127Z"}, {"uuid": "123e0e77-af81-442e-ae48-11f5219d3dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/libs_of_hackers/910", "content": "\u0412 Chrome \u043f\u0430\u0442\u0447\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u043c\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nhttps://xakep.ru/2025/05/16/chrome-cve-2025-4664\n\n@libs_of_hackers", "creation_timestamp": "2026-07-16T07:00:05.213154Z"}, {"uuid": "f185030b-cc65-48e5-87e5-1c419aed521a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:09.090749Z"}, {"uuid": "f51e68d4-d864-4cb4-884e-19c863533248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "published-proof-of-concept", "source": "https://t.me/libs_of_hackers/910", "content": "\u0412 Chrome \u043f\u0430\u0442\u0447\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u043c\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nhttps://xakep.ru/2025/05/16/chrome-cve-2025-4664\n\n@libs_of_hackers", "creation_timestamp": "2026-07-17T00:00:55.843329Z"}, {"uuid": "73dcda61-d812-437a-94f9-cc50ac81cd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46359", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-26T00:00:10.742167Z"}, {"uuid": "4aad6d9a-b0bc-461c-b2f7-de311ca92d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46445", "type": "seen", "source": "https://t.me/ProfessorDiscussions/30213", "content": "\u062d\u0644\u0644 CVE-2025-46445", "creation_timestamp": "2026-08-28T13:00:05.948904Z"}, {"uuid": "6560681b-8c87-48e8-b74f-a2fd7deb647b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46445", "type": "seen", "source": "Telegram/h_Qtzv6DL4WYG9-NneOqiV4_oOQsP1iV4KS9tubsFUfnleU", "content": "", "creation_timestamp": "2026-08-28T13:00:05.984345Z"}, {"uuid": "3dcde89b-b8be-4801-8e01-4a05c6970d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46445", "type": "seen", "source": "Telegram/h_Qtzv6DL4WYG9-NneOqiV4_oOQsP1iV4KS9tubsFUfnleU", "content": "", "creation_timestamp": "2026-08-29T00:00:08.752087Z"}, {"uuid": "106c6970-9f8e-49a7-b8c7-a8346ba57742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46445", "type": "seen", "source": "https://t.me/ProfessorDiscussions/30213", "content": "\u062d\u0644\u0644 CVE-2025-46445", "creation_timestamp": "2026-08-29T00:00:08.896626Z"}, {"uuid": "1519a0e1-f78a-415e-aeff-b1ad68d3493e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043d\u043e\u0433\u043e - 1091. \u0418\u0437 \u043d\u0438\u0445 716 \u0432 Linux Kernel. \ud83e\udd2f \u0414\u043b\u044f 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e:\n\n\ud83d\udd3b RCE - PHP CSS Parser (CVE-2020-13756). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b DoS - Apache ActiveMQ (CVE-2025-27533). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b SFB - Chromium (CVE-2025-4664). \u0412 CISA KEV.\n\ud83d\udd3b PathTrav - buildkit (CVE-2024-23652) \u0438 MemCor - buildkit (CVE-2024-23651). \u0412 \u0411\u0414\u0423 \u0424\u0421\u0422\u042d\u041a.\n\n\u0415\u0449\u0451 \u0434\u043b\u044f 52 (\u2757\ufe0f) \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0418\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c 2 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435:\n\n\ud83d\udd38 RCE - Kubernetes \"IngressNightmare\" (CVE-2025-1974 \u0438 4 \u0434\u0440\u0443\u0433\u0438\u0445)\n\ud83d\udd38 RCE - Erlang/OTP (CVE-2025-32433)\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f: \n\n\ud83d\udd38 EoP - Linux Kernel (CVE-2023-53033)\n\ud83d\udd38 XSS - Horde IMP (CVE-2025-30349)\n\ud83d\udd38 PathTrav - tar-fs (CVE-2024-12905)\n\ud83d\udd38 SFB - kitty (CVE-2025-43929) \n\ud83d\udd38 DoS - libxml2 (CVE-2025-32414)\n\n\ud83d\uddd2 \u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 Vulristics\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #Kubernetes #IngressNightmare #Erlang #ErlangOTP", "creation_timestamp": "2026-07-26T02:00:12.388638Z"}, {"uuid": "3d3c4d40-cc13-46ec-adb2-2ec225690313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4664", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043d\u043e\u0433\u043e - 1091. \u0418\u0437 \u043d\u0438\u0445 716 \u0432 Linux Kernel. \ud83e\udd2f \u0414\u043b\u044f 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e:\n\n\ud83d\udd3b RCE - PHP CSS Parser (CVE-2020-13756). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b DoS - Apache ActiveMQ (CVE-2025-27533). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b SFB - Chromium (CVE-2025-4664). \u0412 CISA KEV.\n\ud83d\udd3b PathTrav - buildkit (CVE-2024-23652) \u0438 MemCor - buildkit (CVE-2024-23651). \u0412 \u0411\u0414\u0423 \u0424\u0421\u0422\u042d\u041a.\n\n\u0415\u0449\u0451 \u0434\u043b\u044f 52 (\u2757\ufe0f) \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0418\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c 2 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435:\n\n\ud83d\udd38 RCE - Kubernetes \"IngressNightmare\" (CVE-2025-1974 \u0438 4 \u0434\u0440\u0443\u0433\u0438\u0445)\n\ud83d\udd38 RCE - Erlang/OTP (CVE-2025-32433)\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f: \n\n\ud83d\udd38 EoP - Linux Kernel (CVE-2023-53033)\n\ud83d\udd38 XSS - Horde IMP (CVE-2025-30349)\n\ud83d\udd38 PathTrav - tar-fs (CVE-2024-12905)\n\ud83d\udd38 SFB - kitty (CVE-2025-43929) \n\ud83d\udd38 DoS - libxml2 (CVE-2025-32414)\n\n\ud83d\uddd2 \u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 Vulristics\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #Kubernetes #IngressNightmare #Erlang #ErlangOTP", "creation_timestamp": "2026-07-27T00:00:30.323890Z"}, {"uuid": "7abe5883-b252-470a-bbe3-2e7605c2601b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46812", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.007886Z"}, {"uuid": "3796bcd4-0ece-47d7-b352-a5f04956d66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17062", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with public Proof-of-Concept repositories on GitHub, useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2025-4632\n\ud83c\udfaf Grafana Path Traversal Vulnerability\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Chocapikk/CVE-2025-4632\n\n\ud83e\udde0 Overview\nA path traversal vulnerability in Grafana allows attackers to access sensitive files on the server by manipulating request paths.\nThe vulnerability can expose configuration files, credentials, or other sensitive data stored on the system.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Configuration leakage\n\u2022 Potential lateral movement\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-49144\n\ud83c\udfaf Roundcube Webmail \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/numanturle/CVE-2025-49144\n\n\ud83e\udde0 Overview\nA vulnerability in Roundcube Webmail allows attackers to achieve remote code execution through crafted input handling in specific components of the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Webmail server compromise\n\u2022 Potential mail system takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-34028\n\ud83c\udfaf GLPI IT Asset Management \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/h4x0r-dz/CVE-2025-34028\n\n\ud83e\udde0 Overview\nA file upload vulnerability affecting GLPI IT management platform allows attackers to upload malicious files that can lead to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-30208\n\ud83c\udfaf Next.js Middleware Security Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/chebuya/CVE-2025-30208\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js middleware handling allows attackers to bypass certain security checks due to improper request validation.\n\n\u2699\ufe0f Impact\n\u2022 Security control bypass\n\u2022 Authentication logic manipulation\n\u2022 Potential access control issues\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-24054\n\ud83c\udfaf Windows NTLM Relay Attack\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fortra/impacket\n\n\ud83e\udde0 Overview\nA vulnerability related to NTLM authentication relay attacks in Windows environments allows attackers to relay authentication attempts and gain unauthorized access to services.\n\n\u2699\ufe0f Impact\n\u2022 Credential relay attack\n\u2022 Unauthorized authentication\n\u2022 Lateral movement in networks\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories can be useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.772187Z"}, {"uuid": "46c373b4-3f4d-4516-8f2c-a4e43b836cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46359", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-25T11:00:03.542640Z"}, {"uuid": "e7a30da9-b783-4e4d-8092-5d00c458024b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4611", "type": "published-proof-of-concept", "source": "Telegram/1ntteSDNdPxs32IUiQdBAZyZztmyxGolb6r3UtF0KH6NiwM", "content": "", "creation_timestamp": "2026-08-31T00:00:43.368222Z"}, {"uuid": "e07b9e57-f8d5-4fb1-aa26-fae638207d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/hacking_Attack/172128", "content": "The $250,000 Bug \u2014 My Journey Unpacking CVE-2025-4609\n\nA beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-01T20:00:17.830833Z"}, {"uuid": "ede4d283-b7de-4962-977b-8298d723c2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/hacking_Attack/172139", "content": "The $250,000 Bug\u200a\u2014\u200aMy Journey Unpacking CVE-2025-4609\nhttps://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:17.872372Z"}, {"uuid": "c27775c8-6def-4c58-969d-ddf441992df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/hacking_Attack/172141", "content": "A beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb (https://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:17.580083Z"}, {"uuid": "708cac06-078a-411a-ad56-7e4c5ef8fe2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/hacking_Attack/172141", "content": "A beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb (https://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:34.265888Z"}, {"uuid": "df3d8aca-a77b-48d6-9911-941405cded93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/hacking_Attack/172128", "content": "The $250,000 Bug \u2014 My Journey Unpacking CVE-2025-4609\n\nA beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-02T01:00:34.561250Z"}, {"uuid": "054b4f9f-e0cf-427e-9e67-d6c6eb8f7951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "seen", "source": "https://t.me/hacking_Attack/172139", "content": "The $250,000 Bug\u200a\u2014\u200aMy Journey Unpacking CVE-2025-4609\nhttps://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:34.602568Z"}, {"uuid": "0ec15e83-8f35-4499-b3ef-b7f4b9781630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46418", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mujeiininy2l", "content": "\ud83d\udfe0 CVE-2025-46418 - High (7.6)\n\nWestermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-46418/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T07:02:07.598066Z"}, {"uuid": "cf38db4a-f3b9-439d-a146-a785e6cc94c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/172139", "content": "The $250,000 Bug\u200a\u2014\u200aMy Journey Unpacking CVE-2025-4609\nhttps://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T03:00:05.951220Z"}, {"uuid": "7e90164e-adcf-4245-8d58-68ef0fb1c7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/172128", "content": "The $250,000 Bug \u2014 My Journey Unpacking CVE-2025-4609\n\nA beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-03T03:00:06.004077Z"}, {"uuid": "ae69b009-fb2f-43d0-926d-ab1b080fc8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/172141", "content": "A beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb (https://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T03:00:06.313088Z"}, {"uuid": "6e1146d5-2389-4c3a-b902-2f24cd273313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/172139", "content": "The $250,000 Bug\u200a\u2014\u200aMy Journey Unpacking CVE-2025-4609\nhttps://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:01:03.717440Z"}, {"uuid": "a30643fb-f1e4-405d-b6d4-52e88fba45c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/172128", "content": "The $250,000 Bug \u2014 My Journey Unpacking CVE-2025-4609\n\nA beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-04T00:01:03.766279Z"}, {"uuid": "b8631e09-b459-416b-9a69-7b43ad2f0155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/172141", "content": "A beginner-oriented technical breakdown of CVE-2025\u20134609: how an ipcz deserialization bug allowed a renderer to duplicate a browser processContinue reading on Medium \u00bb (https://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:04.105482Z"}, {"uuid": "b5dc9569-fb90-42c6-8010-9276bcb2da6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "Telegram/PY8bWpO043D-Z_8Y-HNjpKbgrcjpV_8amEBJErFv8jCkTtc", "content": "", "creation_timestamp": "2026-09-04T05:00:05.221999Z"}, {"uuid": "b6b86ece-cdb6-44a0-8117-9951b31b209a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46820", "type": "published-proof-of-concept", "source": "Telegram/_CQMtoE_EbSJ7yTkSwzPGTr5n5cXGRrCDjqhXlQyTvYmv40", "content": "", "creation_timestamp": "2026-09-04T12:00:13.684396Z"}, {"uuid": "ab7368ef-8ffa-4e94-b7c9-1b4357c119ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46721", "type": "seen", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "content": "", "creation_timestamp": "2026-09-05T01:00:05.592305Z"}, {"uuid": "ed6dcdad-82d9-4dfe-8c06-aac51f4f1428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46820", "type": "published-proof-of-concept", "source": "Telegram/_CQMtoE_EbSJ7yTkSwzPGTr5n5cXGRrCDjqhXlQyTvYmv40", "content": "", "creation_timestamp": "2026-09-05T01:00:30.415331Z"}, {"uuid": "a1bc0984-6351-415d-85f5-3371ebe65374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "published-proof-of-concept", "source": "Telegram/PY8bWpO043D-Z_8Y-HNjpKbgrcjpV_8amEBJErFv8jCkTtc", "content": "", "creation_timestamp": "2026-09-05T01:00:37.893687Z"}, {"uuid": "1787064f-f262-4e9e-a794-6f5ddd6bf1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46721", "type": "published-proof-of-concept", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "content": "", "creation_timestamp": "2026-09-06T00:01:02.709939Z"}, {"uuid": "9ffad68b-9c35-4f12-8b22-2e400de74978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4653", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_itsm_auth_rce_cve_2025_4653.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die-gr3y \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Pandora ITSM is a platform for Service Management & Support including a Helpdesk for support\\n          and customer service teams, aligned with ITIL processes.\\n          This module exploits a command injection vulnerability in the `name` backup setting at the\\n          application setup page of Pandora ITSM. This can be triggered by generating a backup with a\\n          malicious payload injected at the `name` parameter.\\n          You need to have admin access at the Pandora ITSM  Web application in order to execute this RCE.\\n          This access can be achieved by knowing the admin credentials to access the web application or\\n          leveraging a default password vulnerability in Pandora ITSM that allows an attacker to access\\n          the Pandora FMS ITSM database, create a new admin user and gain administrative access to the\\n          Pandora ITSM Web application. This attack can be remotely executed over the WAN as long as the\\n          MySQL services are exposed to the outside world.\\n          This issue affects all ITSM Enterprise editions up to `5.0.105` and is patched at `5.0.106`.\", \"disclosure_date\": \"2025-06-10\", \"fullname\": \"exploit/linux/http/pandora_itsm_auth_rce_cve_2025_4653\", \"is_install_path\": true, \"mod_time\": \"2026-02-09 15:17:23 +0000\", \"name\": \"Pandora ITSM authenticated command injection leading to RCE via the backup function\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/pandora_itsm_auth_rce_cve_2025_4653.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/pandora_itsm_auth_rce_cve_2025_4653\", \"references\": [\"CVE-2025-4653\", \"URL-https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/\", \"GHSA-m4f8-9c8x-8f3f\", \"URL-https://attackerkb.com/topics/wgCb1QQm1t/cve-2025-4653\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix/Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.839066Z"}, {"uuid": "826522ae-2eeb-458c-8b46-fb89bcaa83c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2386", "content": "\u2728 Network Security \u2728\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PAN-OS Palo Alto Networks \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b\n\n\u2014\n\nSummary:\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Palo Alto Networks \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 PAN-OS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-4619, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u0435\u0440\u0441\u0438\u0439 PAN-OS, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 PA-Series \u0438 VM-Series, \u0430 \u0442\u0430\u043a\u0436\u0435 Prisma Access. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-14 06:54 | Author: Vulner Queen\n\n#panos #network_security #palo\n\nhttps://1275.ru/vulnerability/uyazvimost-v-pan-os-palo-alto-networks-pozvolyaet-atakuyuschim-prinuditelno-perezagruzhat-mezhsetevye-ekrany_16324", "creation_timestamp": "2026-09-09T05:00:11.796925Z"}, {"uuid": "aa59b0b8-6ac6-43a8-99c4-bce2a02fa6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2344", "content": "\u2728 General Cyber News \u2728\n\nCritical Dell Data Lakehouse Flaw Allows Remote Attackers to Escalate Privileges\n\n\u2014\n\nSummary:\nDell Technologies has disclosed a critical security vulnerability affecting its Data Lakehouse platform that could allow attackers with high-level privileges to escalate their access and compromise system integrity. The flaw, tracked as CVE-2025-46608, carries a maximum CVSS severity score of 9.1, indicating an exceptionally high risk to affected environments. CVE ID Product Affected Versions Remediated [\u2026]\nThe post Critical Dell Data Lakehouse Flaw Allows Remote Attackers to Escalate...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-13 07:20 | Author: Divya\n\n#general_cyber_news #critical #dell\n\nhttps://gbhackers.com/critical-dell-data-lakehouse-flaw/", "creation_timestamp": "2026-09-09T05:00:12.203808Z"}, {"uuid": "444903a0-2635-4365-9c27-eb8905e1f639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46608", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/2344", "content": "\u2728 General Cyber News \u2728\n\nCritical Dell Data Lakehouse Flaw Allows Remote Attackers to Escalate Privileges\n\n\u2014\n\nSummary:\nDell Technologies has disclosed a critical security vulnerability affecting its Data Lakehouse platform that could allow attackers with high-level privileges to escalate their access and compromise system integrity. The flaw, tracked as CVE-2025-46608, carries a maximum CVSS severity score of 9.1, indicating an exceptionally high risk to affected environments. CVE ID Product Affected Versions Remediated [\u2026]\nThe post Critical Dell Data Lakehouse Flaw Allows Remote Attackers to Escalate...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-13 07:20 | Author: Divya\n\n#general_cyber_news #critical #dell\n\nhttps://gbhackers.com/critical-dell-data-lakehouse-flaw/", "creation_timestamp": "2026-09-10T00:00:41.259738Z"}, {"uuid": "33d2c903-cfd2-48b0-9d02-4643d3f36b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4619", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/2386", "content": "\u2728 Network Security \u2728\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PAN-OS Palo Alto Networks \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b\n\n\u2014\n\nSummary:\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Palo Alto Networks \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0438\u043f\u0430 \u00ab\u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 PAN-OS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-4619, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u0435\u0440\u0441\u0438\u0439 PAN-OS, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 PA-Series \u0438 VM-Series, \u0430 \u0442\u0430\u043a\u0436\u0435 Prisma Access. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-14 06:54 | Author: Vulner Queen\n\n#panos #network_security #palo\n\nhttps://1275.ru/vulnerability/uyazvimost-v-pan-os-palo-alto-networks-pozvolyaet-atakuyuschim-prinuditelno-perezagruzhat-mezhsetevye-ekrany_16324", "creation_timestamp": "2026-09-10T00:00:41.946393Z"}]}