{"vulnerability": "CVE-2025-2524", "sightings": [{"uuid": "a4f415a0-fef1-41ef-93f3-bac0a882a03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113953250081835624", "content": "", "creation_timestamp": "2025-02-05T20:50:06.470060Z"}, {"uuid": "22f957f6-f60f-47b6-9ec4-db9f63b8ac08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhg4lw3ons2z", "content": "", "creation_timestamp": "2025-02-05T08:09:09.766346Z"}, {"uuid": "fced61b9-945a-4b9a-8bbe-80a49ecd702f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/113951565325340606", "content": "", "creation_timestamp": "2025-02-05T13:41:39.206963Z"}, {"uuid": "8f640b4b-f13c-49eb-8270-3c529068b56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113949465977567561", "content": "", "creation_timestamp": "2025-02-05T04:47:45.717279Z"}, {"uuid": "da13f3fe-61a1-4ffe-97a7-d430f8e04269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvyal5g2p", "content": "", "creation_timestamp": "2025-02-05T05:15:48.952540Z"}, {"uuid": "d7ac0b76-0443-4a9e-ad2a-ef981e07e0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113949941146080790", "content": "", "creation_timestamp": "2025-02-05T06:48:37.584117Z"}, {"uuid": "bcf6e962-e23a-4210-9825-6d419111e586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhoqsj2f5v2b", "content": "", "creation_timestamp": "2025-02-08T18:32:03.320394Z"}, {"uuid": "98941ff2-8941-4ecb-85c4-1aceedfbdda9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5g72me7f26", "content": "", "creation_timestamp": "2025-03-24T18:47:43.397187Z"}, {"uuid": "f512436f-217d-4708-9c0f-2e08f9495be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhskexvqmu2y", "content": "", "creation_timestamp": "2025-02-10T06:47:44.768184Z"}, {"uuid": "b8106c84-7362-41ff-8319-3a67c5fee30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113979337853157909", "content": "", "creation_timestamp": "2025-02-10T11:24:34.261908Z"}, {"uuid": "0a0a37b1-e33f-4faf-9ad7-b28f13f1c614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lht4qhsler22", "content": "", "creation_timestamp": "2025-02-10T12:16:18.324674Z"}, {"uuid": "958eb04d-25c1-44e7-8734-24766a529d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhtd3d5do32f", "content": "", "creation_timestamp": "2025-02-10T14:09:45.521716Z"}, {"uuid": "dc716012-829f-490c-a13f-5b9da0224793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lhtg3wpxp22o", "content": "", "creation_timestamp": "2025-02-10T15:03:48.353294Z"}, {"uuid": "4785560e-1e1c-4f9b-bf49-4c38481d1679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://nvd.nist.gov/vuln/detail/CVE-2025-25246", "content": "", "creation_timestamp": "2025-02-10T18:04:50.373411Z"}, {"uuid": "55614da9-8b5c-478b-b34c-8ac69823bccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuidjjek42i", "content": "", "creation_timestamp": "2025-02-11T01:16:28.777696Z"}, {"uuid": "c0af25c0-ca41-4697-af39-f06c1b8a8073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25241", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuidhelsq2o", "content": "", "creation_timestamp": "2025-02-11T01:16:25.776818Z"}, {"uuid": "14244c48-739b-486d-958c-dee81f4cd159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113982706822692310", "content": "", "creation_timestamp": "2025-02-11T01:41:20.895190Z"}, {"uuid": "e4b25686-67c3-40c9-be9c-22bd54200613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113982765819276646", "content": "", "creation_timestamp": "2025-02-11T01:56:20.908832Z"}, {"uuid": "80038b6e-5bb2-435e-a483-9af1e4878d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982969811104687", "content": "", "creation_timestamp": "2025-02-11T02:48:14.469513Z"}, {"uuid": "f7267cc0-e48b-4940-bc87-d82f6d9f7c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lk2ytj7eij2o", "content": "", "creation_timestamp": "2025-03-11T02:18:07.618331Z"}, {"uuid": "a4d43d44-e9bc-466a-a7c2-c4ff1100ea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3625v7l52s", "content": "", "creation_timestamp": "2025-03-11T03:51:19.008569Z"}, {"uuid": "8716f9c0-612d-4c6e-b4ad-8dce01977df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3626446q2n", "content": "", "creation_timestamp": "2025-03-11T03:51:20.143368Z"}, {"uuid": "57f35991-44a4-4607-86e0-b3454466a8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lianzgyusy2i", "content": "", "creation_timestamp": "2025-02-15T21:30:09.678951Z"}, {"uuid": "fdf66551-1d72-4ac4-9330-52e434e10068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd34sceo22g", "content": "", "creation_timestamp": "2026-01-13T17:25:04.108441Z"}, {"uuid": "b67006f2-09af-4de0-bd94-dca85b8e8751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcd3qaek542y", "content": "", "creation_timestamp": "2026-01-13T17:35:54.462141Z"}, {"uuid": "168acee9-fab6-47bc-b293-5930493f8554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mce6txmaok2q", "content": "", "creation_timestamp": "2026-01-14T04:04:20.660285Z"}, {"uuid": "d3f37399-6961-4b43-99c9-e206ccec9766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25249", "type": "seen", "source": "https://gist.github.com/Darkcrai86/45f4c256c8074121c8876b78492ca689", "content": "", "creation_timestamp": "2026-01-14T08:27:19.000000Z"}, {"uuid": "ece9b6cc-9264-4625-95f7-34c334484b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mciws5svuj2e", "content": "", "creation_timestamp": "2026-01-16T01:23:29.817794Z"}, {"uuid": "7827af80-9a2e-47ff-a34f-fc4576426c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcokosuzis2k", "content": "", "creation_timestamp": "2026-01-18T07:02:52.238110Z"}, {"uuid": "46f7864c-0ebc-426d-94f4-58905801787e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcolervvvc2k", "content": "", "creation_timestamp": "2026-01-18T07:15:10.499183Z"}, {"uuid": "d0ed5826-2930-4002-9bb4-b4e3978e1352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/52db1232-3e47-4bf4-a6ed-a4b863f96ab9", "content": "", "creation_timestamp": "2025-02-10T18:09:14.246689Z"}, {"uuid": "9bd64d31-4cea-47b8-aa06-1f61ccafe3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25244", "type": "seen", "source": "https://t.me/cvedetector/20024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25244 - SAP Business Warehouse Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25244 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : SAP Business Warehouse (Process Chains) allows an attacker to manipulate the process execution due to missing authorization check. An attacker with display authorization for the process chain object could set one or all processes to be skipped. This means corresponding activities, such as data loading, activation, or deletion, will not be executed as initially modeled. This could lead to unexpected results in business reporting leading to a significant impact on integrity. However, there is no impact on confidentiality or availability. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:48.000000Z"}, {"uuid": "5e19cfa7-1a2a-4cc2-9054-6c5e9fefe66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://t.me/cvedetector/20023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25242 - SAP NetWeaver Application Server ABAP Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25242 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:47.000000Z"}, {"uuid": "6c915809-5e48-4423-8b84-c991286e0cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25245", "type": "seen", "source": "https://t.me/cvedetector/20019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25245 - SAP BusinessObjects Business Intelligence Platform Web Intelligence Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-25245 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim\ufffds browser. There is no impact on availability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:41.000000Z"}, {"uuid": "4837fcaa-4adb-471e-a63c-58676292805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "https://t.me/cvedetector/17271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25246 - NETGEAR XR RCE\", \n  \"Content\": \"CVE ID : CVE-2025-25246 \nPublished : Feb. 5, 2025, 5:15 a.m. | 23\u00a0minutes ago \nDescription : NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T07:26:54.000000Z"}, {"uuid": "e01929d7-d65f-4794-a71d-5e52ec22294b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "https://t.me/cvedetector/17617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25243 - SAP Supplier Relationship Management (SRM) File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-25243 \nPublished : Feb. 11, 2025, 1:15 a.m. | 31\u00a0minutes ago \nDescription : SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T03:07:42.000000Z"}, {"uuid": "39707cba-f198-41df-9e8c-033fd849e538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25241", "type": "seen", "source": "https://t.me/cvedetector/17618", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25241 - Apache Application Missing Authorization Check Allows Employee Information Access\", \n  \"Content\": \"CVE ID : CVE-2025-25241 \nPublished : Feb. 11, 2025, 1:15 a.m. | 31\u00a0minutes ago \nDescription : Due to a missing authorization check, an attacker who is logged in to application can view/ delete \ufffdMy Overtime Requests\ufffd which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T03:07:42.000000Z"}, {"uuid": "f917514a-af09-46f3-904f-74f6e4baf0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "https://t.me/cvedetector/17553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25247 - Apache Felix Webconsole Cross-site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-25247 \nPublished : Feb. 10, 2025, 12:15 p.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix Webconsole.  \n  \nThis issue affects Apache Felix Webconsole 4.x up to 4.9.8 and 5.x up to 5.0.8.  \n  \nUsers are recommended to upgrade to version 4.9.10 or 5.0.10 or higher, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T14:34:45.000000Z"}, {"uuid": "c71ecfa6-43c6-49d9-a2a9-841b5ca996b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25242", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7099", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25242\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.\n\ud83d\udccf Published: 2025-03-11T00:32:28.733Z\n\ud83d\udccf Modified: 2025-03-11T02:13:11.225Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3562390\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T02:40:07.000000Z"}, {"uuid": "aa6f8c8d-88d1-43c1-aa1d-20bc19628254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25245", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25245\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim\ufffds browser. There is no impact on availability.\n\ud83d\udccf Published: 2025-03-11T00:34:56.115Z\n\ud83d\udccf Modified: 2025-03-11T02:10:07.773Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3557469\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T02:40:12.000000Z"}, {"uuid": "567bf7cf-9903-4981-9289-c1d17430bf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25244", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25244\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: SAP Business Warehouse (Process Chains) allows an attacker to manipulate the process execution due to missing authorization check. An attacker with display authorization for the process chain object could set one or all processes to be skipped. This means corresponding activities, such as data loading, activation, or deletion, will not be executed as initially modeled. This could lead to unexpected results in business reporting leading to a significant impact on integrity. However, there is no impact on confidentiality or availability.\n\ud83d\udccf Published: 2025-03-11T00:34:42.757Z\n\ud83d\udccf Modified: 2025-03-11T02:12:02.750Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3552144\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-03-11T02:40:09.000000Z"}, {"uuid": "56413d09-5b39-43cb-88f7-e152a3ec0420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2524", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2524\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Ninja Forms  WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-19T06:00:05.132Z\n\ud83d\udccf Modified: 2025-05-19T06:00:05.132Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/6e89ad2b-f12e-4b49-b34e-8da7d30629cd/", "creation_timestamp": "2025-05-19T06:38:51.000000Z"}, {"uuid": "4aa6fbda-6926-4916-844f-a175fa0fc4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25247", "type": "seen", "source": "Telegram/ILz_2WS40nKqReYb8y92vsgGbhhSplNBjrof2uaLIDf-KCFh", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}, {"uuid": "09041ccb-56fb-4d12-af8f-120feea31d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25243", "type": "seen", "source": "Telegram/fDpnFMDycR34vnlZyVn6O0P_sOi8Y8G1NOFj_RFl-QCg24A", "content": "", "creation_timestamp": "2025-02-11T03:01:32.000000Z"}, {"uuid": "c2e08de3-282e-45f4-ad7a-fd20ab0d1504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25246", "type": "seen", "source": "Telegram/WwqtEICyKU8cbOcVlgMoVXs3ldGPaOJgGec_vdN4FbMjm_A", "content": "", "creation_timestamp": "2025-02-05T06:30:19.000000Z"}, {"uuid": "eee82393-3855-418a-817b-4500451eae99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3muyv4iz2nk2q", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT", "creation_timestamp": "2026-09-08T11:09:33.498334Z"}, {"uuid": "8c9d4e16-866b-4b5f-b47f-7ca4ba1d4b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3muzctk7zya2o", "content": "FortiGate Post-Exploitation RAT, PivotC2\u00a0Spotted by\u00a0SOCRadar\n\nThe SOCRadar Threat Research Unit (STRU) identified, with high confidence, exploitation of CVE-2025-25249, a heap-based buffer overflow vulnerability in FortiOS and FortiSwitchManager cw_acd daemon....", "creation_timestamp": "2026-09-08T15:15:05.898963Z"}, {"uuid": "d7ffcb3f-d6d8-48e0-927f-4f8d7d452bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3muzj6j3onp2t", "content": "FortiGate firewalls hit by CVE-2025-25249 exploit deploying PivotC2 malware at scale. #Security #FortiGate #NodeJS #PivotC2 #CyberAttack #Vulnerability thedailytechfeed.com/major-fortig...", "creation_timestamp": "2026-09-08T17:08:36.275133Z"}, {"uuid": "c35bb098-4c0e-4fa7-b53b-8d5495233ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-25249", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117236565143530281", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT#CVE_2025_25249 #PivotC2 https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/", "creation_timestamp": "2026-09-08T17:20:18.364292Z"}, {"uuid": "19db44aa-a754-4a8e-834d-40d0c5877f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-2524", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117236565143530281", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT#CVE_2025_25249 #PivotC2 https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/", "creation_timestamp": "2026-09-08T17:20:18.412224Z"}, {"uuid": "fd598703-4d95-452b-bb62-d2990a5d6758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muzonm45ls2t", "content": "CVE-2025-25249 is trending. Hype score 18, currently #1 on cvemon.\n\nA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-25249", "creation_timestamp": "2026-09-08T18:46:30.776318Z"}, {"uuid": "6d02165a-c389-4be6-8756-f208d9030ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/hacking_Attack/193561", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT\nhttps://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/\n\n  submitted by    /u/socradario  (https://www.reddit.com/user/socradario) \n [link] (https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/)", "creation_timestamp": "2026-09-08T20:00:04.289163Z"}, {"uuid": "e2474f46-672c-4b93-92ea-0ffd0ef6320a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "MISP/616cfae2-9da9-48bb-8be3-053d5b26bf13", "content": "", "creation_timestamp": "2026-09-10T12:15:02.476487Z"}, {"uuid": "21542173-a906-4ce5-8ee2-bd6d7ddfe8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/193561", "content": "CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT\nhttps://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/\n\n  submitted by    /u/socradario  (https://www.reddit.com/user/socradario) \n [link] (https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1wal658/cve202525249_exploitation_delivers_pivotc2_a/)", "creation_timestamp": "2026-09-09T00:00:25.880673Z"}, {"uuid": "1d54da21-3f50-4a18-89c9-187e31f47d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv2ybmykxe2x", "content": "FortiGate qurilmalari nishonda: CVE-2025-25249 orqali PivotC2 zararli dasturi tarqatilmoqda!\n\n", "creation_timestamp": "2026-09-09T07:11:26.302368Z"}, {"uuid": "210b823a-ba17-4a7c-955d-a45eae97cf88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/hack4career.com/post/3mv3lcu6r2k2j", "content": "\ud83d\udea8 New research from the SOCRadar Threat Research Unit!\n\nCVE-2025-25249 is being actively exploited to deploy PivotC2, a FortiGate-focused Node.js RAT.\n\n30K+ targets. 178 confirmed infections. AI-assisted development, tunneling & autonomous post-exploitation.\n\nRead more \ud83d\udc47\nsocradar.io/blog/cve-202...", "creation_timestamp": "2026-09-09T12:52:11.141285Z"}, {"uuid": "6946cbd4-bb92-4739-a13c-761cc7d07af0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64f2d211-92cd-4826-92a9-c4f61659b1fb", "content": "", "creation_timestamp": "2026-09-09T16:00:29.476863Z"}, {"uuid": "8f2c9f6d-9eb8-4a2a-b9c0-cb17a0012995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ci5kpcz2z", "content": "\ud83d\uded1 CVE-2025-25249\nFortinet Multiple Products\nCVSS 8.1 / EPSS 1% / KEV \u2705\nTL;DR: A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3\u2026\nhttps://cvesentinel.com/report/CVE-2025-25249?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-09T19:46:42.167525Z"}, {"uuid": "ed495074-3cbe-4ad7-b57d-b92a36751184", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/76235c89-e484-4042-96ad-26f9515fbf7e", "content": "", "creation_timestamp": "2026-09-09T20:00:03.901162Z"}, {"uuid": "9fccd02a-5a74-4b84-a734-7cf94401d22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g", "content": "~Cisa~\nCISA added four actively exploited Fortinet, Citrix, Chromium, and Cisco vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2025-25249, CVE-2026-19490, CVE-2026-87491\n-\n#CVE #Cybersecurity #ThreatIntel", "creation_timestamp": "2026-09-09T20:06:36.584623Z"}, {"uuid": "52c0703d-8a65-4d9b-9f91-f7169d51337b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mv4hhopzom2k", "content": "\ud83d\udce1 CVE-2025-25249: A Patched FortiGate Flaw Is Now Delivering a Custom RAT Called PivotC2", "creation_timestamp": "2026-09-09T21:15:55.142974Z"}, {"uuid": "8303a3ad-bc82-4882-8965-5879ded174d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxuum2m2l", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2025-25249", "creation_timestamp": "2026-09-09T22:36:33.786647Z"}, {"uuid": "a2ba173a-21ac-4556-be65-9bb0dd768f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/ViralCyber/26157", "content": "\ud83d\udfe2\u0648\u0642\u062a\u06cc \u06a9\u0647 Fortigate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0645\u06cc\u0634\u0648\u062f!\n\ud83d\udd34\u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 FortiGate\n\ud83d\udd34\u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f SOCRadar \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-25249 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0645\u062d\u0628\u0648\u0628 Fortinet \u062e\u0628\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\u061b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0627\u06cc \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0648\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\ud83d\udd34\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0647 FortiGate \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u06cc \u0628\u0647 \u0646\u0627\u0645 PivotC2 \u0631\u0627 \u0631\u0648\u06cc \u0622\u0646 \u0646\u0635\u0628 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0631\u0648\u06cc Firewall \u0641\u0639\u0627\u0644\u06cc\u062a \u06a9\u0631\u062f\u0647 \u0648 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0627\u06cc\u062c\u0627\u062f Reverse Shell\u060c \u062a\u0648\u0646\u0644\u200c\u0633\u0627\u0632\u06cc \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc\u060c Port Scanning\u060c \u0633\u0631\u0642\u062a Configuration \u0648 Credentials \u0648 \u062d\u0631\u06a9\u062a \u062c\u0627\u0646\u0628\u06cc (Lateral Movement) \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0645\u0647\u0627\u062c\u0645 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f!\n\ud83d\udd34\u0628\u0631 \u0627\u0633\u0627\u0633 \u06af\u0632\u0627\u0631\u0634 SOCRadar\u060c \u0628\u06cc\u0634 \u0627\u0632 \u06f3\u06f0 \u0647\u0632\u0627\u0631 IP \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0648 \u062d\u062f\u0627\u0642\u0644 \u06f1\u06f7\u06f8 \u062f\u0633\u062a\u06af\u0627\u0647 FortiGate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 PivotC2 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0646\u06cc\u0632 \u062d\u062f\u0627\u0642\u0644 \u0627\u0632 \u062c\u0648\u0644\u0627\u06cc \u06f2\u06f0\u06f2\u06f6 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u0627\u0646 \u0627\u062f\u0627\u0645\u0647 \u062f\u0627\u0631\u062f.\n\ud83d\udd34 \u0646\u06a9\u062a\u0647 \u0639\u062c\u06cc\u0628 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062e\u0648\u062f Firewall \u06a9\u0647 \u0639\u0644\u06cc \u0627\u0644\u0627\u0635\u0648\u0644 \u0628\u0627\u06cc\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u062f\u0641\u0627\u0639\u06cc \u0628\u0627\u0634\u062f \u0628\u0647 \u0646\u0642\u0637\u0647 \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0648 Pivot \u0645\u0647\u0627\u062c\u0645 \u062a\u0628\u062f\u06cc\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f!  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0635\u0631\u0641\u0627\u064b Patch \u06a9\u0631\u062f\u0646 \u062a\u062c\u0647\u06cc\u0632 \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0628\u0644\u06cc \u0627\u0632 \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0631\u0631\u0633\u06cc \u0627\u062d\u062a\u0645\u0627\u0644 Compromise \u0646\u06cc\u0632 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a.\n\u2705 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0645\u062f\u06cc\u0631\u0627\u0646 \u0634\u0628\u06a9\u0647:\n\u26ab\ufe0f\u0646\u0633\u062e\u0647 FortiOS \u0648 FortiSwitchManager \u0631\u0627 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\u26ab\ufe0f \u062f\u0633\u062a\u0631\u0633\u06cc CAPWAP / UDP 5246 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u0637\u0645\u0626\u0646 \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u0644\u0627\u06af\u0647\u0627\u060c Configuration\u060c \u062d\u0633\u0627\u0628\u200c\u0647\u0627 \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062e\u0631\u0648\u062c\u06cc \u063a\u06cc\u0631\u0639\u0627\u062f\u06cc Firewall \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u062f\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0645\u0634\u06a9\u0648\u06a9\u060c \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0631\u0642\u062a Credential \u0648 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n#FortiGate #Fortinet #CyberSecurity #CVE #Firewall #PivotC2\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-09T23:00:04.572058Z"}, {"uuid": "90c04f83-b9e6-40be-a136-9e83a918bc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://t.me/ViralCyber/26157", "content": "\ud83d\udfe2\u0648\u0642\u062a\u06cc \u06a9\u0647 Fortigate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0645\u06cc\u0634\u0648\u062f!\n\ud83d\udd34\u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 FortiGate\n\ud83d\udd34\u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f SOCRadar \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-25249 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0645\u062d\u0628\u0648\u0628 Fortinet \u062e\u0628\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f\u061b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0627\u06cc \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0631\u0648\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\ud83d\udd34\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0647 FortiGate \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062c\u062f\u06cc\u062f\u06cc \u0628\u0647 \u0646\u0627\u0645 PivotC2 \u0631\u0627 \u0631\u0648\u06cc \u0622\u0646 \u0646\u0635\u0628 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0631\u0648\u06cc Firewall \u0641\u0639\u0627\u0644\u06cc\u062a \u06a9\u0631\u062f\u0647 \u0648 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0627\u06cc\u062c\u0627\u062f Reverse Shell\u060c \u062a\u0648\u0646\u0644\u200c\u0633\u0627\u0632\u06cc \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc\u060c Port Scanning\u060c \u0633\u0631\u0642\u062a Configuration \u0648 Credentials \u0648 \u062d\u0631\u06a9\u062a \u062c\u0627\u0646\u0628\u06cc (Lateral Movement) \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0645\u0647\u0627\u062c\u0645 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f!\n\ud83d\udd34\u0628\u0631 \u0627\u0633\u0627\u0633 \u06af\u0632\u0627\u0631\u0634 SOCRadar\u060c \u0628\u06cc\u0634 \u0627\u0632 \u06f3\u06f0 \u0647\u0632\u0627\u0631 IP \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0648 \u062d\u062f\u0627\u0642\u0644 \u06f1\u06f7\u06f8 \u062f\u0633\u062a\u06af\u0627\u0647 FortiGate \u0622\u0644\u0648\u062f\u0647 \u0628\u0647 PivotC2 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0646\u06cc\u0632 \u062d\u062f\u0627\u0642\u0644 \u0627\u0632 \u062c\u0648\u0644\u0627\u06cc \u06f2\u06f0\u06f2\u06f6 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0647\u0645\u0686\u0646\u0627\u0646 \u0627\u062f\u0627\u0645\u0647 \u062f\u0627\u0631\u062f.\n\ud83d\udd34 \u0646\u06a9\u062a\u0647 \u0639\u062c\u06cc\u0628 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062e\u0648\u062f Firewall \u06a9\u0647 \u0639\u0644\u06cc \u0627\u0644\u0627\u0635\u0648\u0644 \u0628\u0627\u06cc\u062f \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u062f\u0641\u0627\u0639\u06cc \u0628\u0627\u0634\u062f \u0628\u0647 \u0646\u0642\u0637\u0647 \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0648 Pivot \u0645\u0647\u0627\u062c\u0645 \u062a\u0628\u062f\u06cc\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f!  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0635\u0631\u0641\u0627\u064b Patch \u06a9\u0631\u062f\u0646 \u062a\u062c\u0647\u06cc\u0632 \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0628\u0644\u06cc \u0627\u0632 \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0631\u0631\u0633\u06cc \u0627\u062d\u062a\u0645\u0627\u0644 Compromise \u0646\u06cc\u0632 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a.\n\u2705 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0645\u062f\u06cc\u0631\u0627\u0646 \u0634\u0628\u06a9\u0647:\n\u26ab\ufe0f\u0646\u0633\u062e\u0647 FortiOS \u0648 FortiSwitchManager \u0631\u0627 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\u26ab\ufe0f \u062f\u0633\u062a\u0631\u0633\u06cc CAPWAP / UDP 5246 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u0637\u0645\u0626\u0646 \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u0644\u0627\u06af\u0647\u0627\u060c Configuration\u060c \u062d\u0633\u0627\u0628\u200c\u0647\u0627 \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u062e\u0631\u0648\u062c\u06cc \u063a\u06cc\u0631\u0639\u0627\u062f\u06cc Firewall \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n\u26ab\ufe0f \u062f\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0645\u0634\u06a9\u0648\u06a9\u060c \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0631\u0642\u062a Credential \u0648 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n#FortiGate #Fortinet #CyberSecurity #CVE #Firewall #PivotC2\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-10T00:00:09.001792Z"}, {"uuid": "2b1ff1c0-f03a-41ea-90dc-d36d2c5f4dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-023", "content": "", "creation_timestamp": "2026-09-10T00:15:03.634376Z"}, {"uuid": "869cd1ed-bc4a-4dca-a5d6-7b24aaddc566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mv4w4ep6jy22", "content": "CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Hea...\n\n\ud83d\udd17 https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-10T01:38:43.980658Z"}, {"uuid": "9ea845bc-59d1-468e-91ed-92d30264b0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv5ghp55dx2e", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2025-25249: \u26a0\ufe0f CVE-2025-25249: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.8%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2025-25249-a-heap-based-buffer-overflow-vulnerability-in", "creation_timestamp": "2026-09-10T06:30:41.897508Z"}, {"uuid": "e713ce9f-454c-4edd-ace8-c10c3dc6ed2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mv5h5wzbmi23", "content": "Threat actors exploit CVE-2025-25249 in Fortinet devices to deploy PivotC2 RAT, enabling post-exploitation capabilities and data theft, prompting urgent patching.\n", "creation_timestamp": "2026-09-10T06:43:08.756883Z"}, {"uuid": "a8e56699-3a1d-4c4a-9108-1155ced16156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mv5h5zb7p22g", "content": "Threat actors exploit CVE-2025-25249 in Fortinet devices to deploy PivotC2 RAT, enabling post-exploitation capabilities and data theft, prompting urgent patching.\n", "creation_timestamp": "2026-09-10T06:43:14.333987Z"}, {"uuid": "f286a6da-b7a4-49e9-893f-7db1dbcc9bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv5h6lqcya25", "content": "Threat actors exploit CVE-2025-25249 in Fortinet devices to deploy PivotC2 RAT, enabling post-exploitation capabilities and data theft, prompting urgent patching.\n", "creation_timestamp": "2026-09-10T06:43:30.545317Z"}, {"uuid": "24f1a5a5-e669-42a7-b779-fb5e84527e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/", "content": "The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\n\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-10T07:00:38.564700Z"}, {"uuid": "47b24f9f-5ef7-4861-aa49-208e5ee0f365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/information_security_channel/55882", "content": "Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\nhttps://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/\n\nThe high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks (https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T11:00:03.462609Z"}, {"uuid": "2fd51f9b-77ef-4121-9213-69b90648c324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5wqwbd6i2k", "content": "Fortinet flaw CVE-2025-25249 is fueling PivotC2 RAT attacks despite being patched months ago. Clearly nobody felt like applying it.\n\n#PatchYourFlaws #JustAnotherDay", "creation_timestamp": "2026-09-10T11:22:11.025828Z"}, {"uuid": "ac02b782-02fa-4ecc-b7db-c1937c2f0863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5wqylcql2w", "content": "Just another Tuesday in IT, as unpatched Fortinet appliances deliver PivotC2 remote access trojans right into victim networks. This high-severity, unauthenticated CVE-2025-25249 flaw was patched way back in January 2026, yet here we are watching attacks happen anyway. Protecting ...\n\nRead full story", "creation_timestamp": "2026-09-10T11:22:13.268386Z"}, {"uuid": "355f7a36-5555-40b1-ba99-7ecaaf03dbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/pphm_HackerNews/3088", "content": "\ud83d\udd34 Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\n\nThreat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports.\n\nTracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug was patched in January in FortiOS and FortiSwitchManager.\n\nThe flaw \u201cmay allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests,\u201d Fortinet noted in its advisory.", "creation_timestamp": "2026-09-10T14:00:04.528284Z"}, {"uuid": "5d9e58b2-75cc-43df-97dd-c87586fc6b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mv77e7pfru2s", "content": "CISA Warns of Fortinet Heap-based Buffer Overflow Flaw Exploited in\u00a0Attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency has added a critical Fortinet vulnerability, tracked as CVE-2025-25249, to its Known Exploited Vulnerabilities catalog after confirming evidence of active\u2026", "creation_timestamp": "2026-09-10T23:28:48.811423Z"}, {"uuid": "0e314286-4907-4872-af5b-07ff75eb685a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3088", "content": "\ud83d\udd34 Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\n\nThreat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports.\n\nTracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug was patched in January in FortiOS and FortiSwitchManager.\n\nThe flaw \u201cmay allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests,\u201d Fortinet noted in its advisory.", "creation_timestamp": "2026-09-11T00:00:36.194204Z"}, {"uuid": "dacdc565-b56c-483c-8693-883c878ba800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://t.me/information_security_channel/55882", "content": "Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\nhttps://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/\n\nThe high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks (https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-11T00:00:41.214408Z"}, {"uuid": "225d3f7c-d516-4f0b-a681-0aff95a08fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/", "content": "The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.\n\nThe post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-11T01:00:34.803717Z"}, {"uuid": "73518126-d2e3-4dee-91d6-201d0590d36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvaorgcxme2v", "content": "\ud83d\udea8 CRITICAL THREAT BRIEF: CVE-2025-25249 (Fortinet FortiOS & Gateway Infrastructure)\n\nActive exploitation verified by the CISA KEV matrix has placed enterprise network perimeters at risk due to a critical heap-based buffer overflow vulnerability.\n\n\ud83d\udd17 Read the full intelligence brief:\u2026", "creation_timestamp": "2026-09-11T13:37:17.674823Z"}, {"uuid": "44c784c2-0bec-4736-b31d-61a91df64773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvdd4saj4f25", "content": "\ud83d\udd34 EXPLOITED\n\nCVE-2025-25249: Fortinet FortiOS and FortiSwitchManager contain a heap-based buffer overflow that allows an attacker to execute unauthorized code via specially crafted packets. The flaw is listed in CISA KEV. Fortinet has released fixed versions; update affected installations.", "creation_timestamp": "2026-09-12T14:46:53.323605Z"}]}