{"vulnerability": "CVE-2025-4945", "sightings": [{"uuid": "d52bd3ea-2128-46ec-874d-4d2755dd9579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrb6uraelz2e", "content": "", "creation_timestamp": "2025-06-10T15:18:30.328565Z"}, {"uuid": "c4adb56d-faba-41e8-a1d7-1bebcde271d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrb7go3xra2m", "content": "", "creation_timestamp": "2025-06-10T15:29:31.071272Z"}, {"uuid": "498acc07-7628-4754-8fee-116503687543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49450", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqx44seehj2s", "content": "", "creation_timestamp": "2025-06-06T15:02:41.313870Z"}, {"uuid": "2c4c560a-fe4d-47ad-bceb-6a57497cf02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49453", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4u5f3hj2r", "content": "", "creation_timestamp": "2025-06-06T15:15:44.613326Z"}, {"uuid": "6b9904ff-fdd1-4ec8-be68-227e81e48e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyh4qjhfrl2p", "content": "", "creation_timestamp": "2025-09-10T01:52:40.426451Z"}, {"uuid": "67223514-b4c2-4174-a87b-eec8a036f03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49459", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyh4wiiylp2d", "content": "", "creation_timestamp": "2025-09-10T01:56:00.644338Z"}, {"uuid": "7dbb01af-0a6c-4786-8be1-73c091d14935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4945", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m4z5huxuko2b", "content": "", "creation_timestamp": "2025-11-07T03:34:26.493587Z"}, {"uuid": "a65fb8e8-63c2-48ae-9b42-9c03e2a883c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49459", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lytkzhaaxc2z", "content": "", "creation_timestamp": "2025-09-15T00:40:10.727775Z"}, {"uuid": "77d775a0-39c7-41d8-ac01-c25033ca4dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyj43aaqrs2g", "content": "", "creation_timestamp": "2025-09-10T20:46:10.140476Z"}, {"uuid": "dd67db07-b0c4-4e8b-9ff3-99fe48b082e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49456", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lw7mt4gp7g2q", "content": "", "creation_timestamp": "2025-08-12T15:28:46.053237Z"}, {"uuid": "fed7c687-cdc2-4d1f-adea-826329e90ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lw7mt7fbrk2a", "content": "", "creation_timestamp": "2025-08-12T15:28:49.100388Z"}, {"uuid": "1140c1d8-5b12-414a-8654-4b904ad161b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49457", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lwaoj4tieg24", "content": "", "creation_timestamp": "2025-08-13T01:31:39.442126Z"}, {"uuid": "4f80db6f-264a-4c00-abe0-aeae481ba40a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwb5qozwkw2f", "content": "", "creation_timestamp": "2025-08-13T06:04:18.575267Z"}, {"uuid": "4f10e231-4167-4604-8c91-f6b05fdc9d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "content": "", "creation_timestamp": "2025-08-13T11:19:00.000000Z"}, {"uuid": "8c12a0c6-ce7b-4f70-9302-8f71aeb5a298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49457", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115023030820091886", "content": "", "creation_timestamp": "2025-08-13T19:09:25.515172Z"}, {"uuid": "86310f01-95eb-4736-a633-9436dd693094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lwcjmr5qes2e", "content": "", "creation_timestamp": "2025-08-13T19:09:30.658780Z"}, {"uuid": "5b76b4a8-816b-40d4-8faf-ad9596e16019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwcrqas3a22j", "content": "", "creation_timestamp": "2025-08-13T21:34:39.056535Z"}, {"uuid": "e60acbbd-c3d7-43c7-9989-604a94dc8f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lwdzqledlj24", "content": "", "creation_timestamp": "2025-08-14T09:30:39.431696Z"}, {"uuid": "576327e2-ef34-4092-bead-d2ad4bd15a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115026869267002974", "content": "", "creation_timestamp": "2025-08-14T11:25:35.187782Z"}, {"uuid": "6a90d8b5-a152-413c-bacc-e578063d386f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lwea6dmwis26", "content": "", "creation_timestamp": "2025-08-14T11:25:44.071038Z"}, {"uuid": "de9b47a6-184d-49e2-8010-16cca5381177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115027123394975363", "content": "", "creation_timestamp": "2025-08-14T12:30:12.753674Z"}, {"uuid": "b4012972-27e6-4e6a-a1e4-ad758cd6a8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwedwppbvme2", "content": "", "creation_timestamp": "2025-08-14T12:33:16.303347Z"}, {"uuid": "d96539d8-c1ec-4675-ae35-06ccce4714ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49457", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwenbj6txa2q", "content": "", "creation_timestamp": "2025-08-14T15:20:09.150365Z"}, {"uuid": "9c86d594-6749-4278-95bb-aff31f387c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwesn4jp5g2r", "content": "", "creation_timestamp": "2025-08-14T16:56:07.205080Z"}, {"uuid": "db586024-c24b-4945-b575-55a44aa7f4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/dtpnews.bsky.social/post/3lweupeourk2j", "content": "", "creation_timestamp": "2025-08-14T17:33:10.057513Z"}, {"uuid": "fcbef515-44d1-4185-af48-dfdf64afad21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/oknews.bsky.social/post/3lweupku6ao2l", "content": "", "creation_timestamp": "2025-08-14T17:33:16.094973Z"}, {"uuid": "79f2ee91-3335-4570-a7b8-f6a3c23d69b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://threatintel.cc/2025/08/14/zoom-patches-critical-windows-flaw.html", "content": "", "creation_timestamp": "2025-08-14T10:30:18.000000Z"}, {"uuid": "f7a2d85a-9532-4061-aa0c-e94e3cfb6c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwg53jglws2d", "content": "", "creation_timestamp": "2025-08-15T05:35:46.704794Z"}, {"uuid": "8ce551a6-b859-4549-b25c-64ac468bb5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwhqqhloqmz2", "content": "", "creation_timestamp": "2025-08-15T21:00:31.708885Z"}, {"uuid": "75b3c4cc-ab6c-4f93-9d96-79ad74b2a7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwkfd4xwls2d", "content": "", "creation_timestamp": "2025-08-16T22:13:54.430211Z"}, {"uuid": "428d3f42-08ff-492e-ab6b-bde21fa68835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwp7cghf3c25", "content": "", "creation_timestamp": "2025-08-18T20:09:25.777411Z"}, {"uuid": "4fc8c754-3a7b-433d-92d4-cbc207c25429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49458", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lyf72fjwle2d", "content": "", "creation_timestamp": "2025-09-09T07:28:39.993200Z"}, {"uuid": "aad7dc73-b2fc-48b1-8fcc-c73bbda89dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49459", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lyf72hip6x2s", "content": "", "creation_timestamp": "2025-09-09T07:28:41.735482Z"}, {"uuid": "0590f8f6-61da-4ac1-8893-ce9ac8f1e0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4945", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ly4rs4jqps23", "content": "", "creation_timestamp": "2025-09-05T23:10:08.592165Z"}, {"uuid": "10248fe5-3987-43d4-be9f-7d9ceba63442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4945", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ly4u6zoen223", "content": "", "creation_timestamp": "2025-09-05T23:53:08.317097Z"}, {"uuid": "1f763849-68c0-4086-bd09-bceec57d2cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4945", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ly4urwcl7k23", "content": "", "creation_timestamp": "2025-09-06T00:03:42.647909Z"}, {"uuid": "b36f9195-a18f-4a73-ac65-b364027ff15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49452", "type": "seen", "source": "Telegram/VViQQA05ZTfWMIgnP1njeoZjb6_CaMk4xQkJ0gjICjaj4YA", "content": "", "creation_timestamp": "2025-06-17T16:18:04.000000Z"}, {"uuid": "7ba50e80-4927-481d-9850-be751c858e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49451", "type": "seen", "source": "Telegram/VViQQA05ZTfWMIgnP1njeoZjb6_CaMk4xQkJ0gjICjaj4YA", "content": "", "creation_timestamp": "2025-06-17T16:18:04.000000Z"}, {"uuid": "0ce1dc4e-9348-4103-adf8-82d738b106c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4945", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16900", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4945\n\ud83d\udd25 CVSS Score: 3.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The issue stems from improper validation of large integer inputs during date arithmetic operations within the cookie parsing routines.\n\ud83d\udccf Published: 2025-05-19T17:03:09.472Z\n\ud83d\udccf Modified: 2025-05-19T17:03:09.472Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-4945\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2367175", "creation_timestamp": "2025-05-19T17:39:14.000000Z"}, {"uuid": "8a25a914-cf35-4378-877f-157629ed83a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49454", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17878", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49454\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean TinySalt allows PHP Local File Inclusion.This issue affects TinySalt: from n/a before 3.10.0.\n\ud83d\udccf Published: 2025-06-10T12:44:32.257Z\n\ud83d\udccf Modified: 2025-06-10T13:15:55.006Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/theme/tinysalt/vulnerability/wordpress-tinysalt-3-10-0-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-10T13:30:07.000000Z"}, {"uuid": "0ab6488a-ba9b-47b2-90e0-1cdfade4fa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49455", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17881", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49455\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in LoftOcean TinySalt allows Object Injection.This issue affects TinySalt: from n/a before 3.10.0.\n\ud83d\udccf Published: 2025-06-10T12:43:42.832Z\n\ud83d\udccf Modified: 2025-06-10T12:43:42.832Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/theme/tinysalt/vulnerability/wordpress-tinysalt-3-10-0-php-object-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-10T13:30:10.000000Z"}, {"uuid": "bcc06f45-b40f-4c1a-b070-871c44d7313d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49451", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18634", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49451\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Path Traversal vulnerability in yannisraft Aeroscroll Gallery \u2013 Infinite Scroll Image Gallery & Post Grid with Photo Gallery allows Path Traversal. This issue affects Aeroscroll Gallery \u2013 Infinite Scroll Image Gallery & Post Grid with Photo Gallery: from n/a through 1.0.12.\n\ud83d\udccf Published: 2025-06-17T15:01:42.375Z\n\ud83d\udccf Modified: 2025-06-17T17:22:45.373Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/aeroscroll-gallery/vulnerability/wordpress-aeroscroll-gallery-infinite-scroll-image-gallery-post-grid-with-photo-gallery-1-0-12-directory-traversal-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-17T17:42:15.000000Z"}, {"uuid": "37578623-1532-405b-bb07-07035ce88817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "published-proof-of-concept", "source": "https://t.me/cKure/15218", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.\n\nThe vulnerability impacting Zoom Clients for Windows, tracked as CVE-2025-49457 (CVSS score: 9.6), relates to a case of an untrusted search path that could pave the way for privilege escalation.\n\nOther vulnerabilities:\n\nCVE-2025-8355 (CVSS score: 7.5) - XML External Entity (XXE) injection vulnerability leading to server-side request forgery (SSRF)\n\nCVE-2025-8356 (CVSS score: 9.8) - Path traversal vulnerability leading to remote code execution\n\nhttps://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf\n\nhttps://www.zoom.com/en/trust/security-bulletin/zsb-25030/\n\nhttps://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html", "creation_timestamp": "2025-08-20T11:13:15.000000Z"}, {"uuid": "f037c3da-3228-4c15-a9cb-99d5583e8e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "Telegram/KG2TpkTqLkrKcco6tldEMvACucw_WlYwXkvKrU8wVoi4yw", "content": "", "creation_timestamp": "2025-08-13T21:10:12.000000Z"}, {"uuid": "f9ac72d3-8063-4915-b84d-d52dc668e3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://t.me/DarkWebInformer_News/7374", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-49457: Zoom Clients for Windows: Untrusted Search Path Vulnerability\nLink: https://darkwebinformer.com/cve-2025-49457-zoom-clients-for-windows-untrusted-search-path-vulnerability/", "creation_timestamp": "2025-08-13T19:10:20.000000Z"}, {"uuid": "553dd446-102e-4c6e-bf3b-b3969ec4f84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "Telegram/e8Gfpk_ScLgRYm5TLKfxZ4PuCVECC1brGgRA0F6XawO4MHc", "content": "", "creation_timestamp": "2026-07-20T20:00:04.630991Z"}, {"uuid": "10fbf154-afd3-4d9c-a137-5922e70f65ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "Telegram/e8Gfpk_ScLgRYm5TLKfxZ4PuCVECC1brGgRA0F6XawO4MHc", "content": "", "creation_timestamp": "2026-07-21T00:00:19.854056Z"}, {"uuid": "fa75b46d-2dc9-41d1-a682-39825a957d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-07-29T12:01:56.869226Z"}, {"uuid": "72813889-0854-407e-b871-ac91e1986965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49457", "type": "seen", "source": "https://t.me/cyberdom_business/1383", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoom \u0438 Xerox: \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\nZoom \u0438 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0431\u0430\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\n\nZoom (CVE-2025-49457, CVSS 9.6)\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Offensive Security \u0431\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f Windows. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u044d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438:\n\u27a1\ufe0f Zoom Workplace \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Workplace VDI \u0434\u043e 6.3.10 (\u043a\u0440\u043e\u043c\u0435 6.1.16 \u0438 6.2.12)\n\u27a1\ufe0f Zoom Rooms \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Rooms Controller \u0434\u043e 6.3.10\n\u27a1\ufe0f Zoom Meeting SDK \u0434\u043e 6.3.10\n\nXerox FreeFlow Core\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u27a1\ufe0f CVE-2025-8355 (CVSS 7.5) \u2014 XXE-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a SSRF\n\u27a1\ufe0f CVE-2025-8356 (CVSS 9.8) \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 Horizon 3 AI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: The Hackers News\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438_\u0418\u0411\n\n\ud83c\udfe0 \u041a\u0438\u0431\u0435\u0440\u0434\u043e\u043c\u0430", "creation_timestamp": "2026-07-30T00:02:07.661766Z"}]}