{"vulnerability": "CVE-2025-53779", "sightings": [{"uuid": "2dfef384-37b0-45f6-b411-6d5ec1026def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115016914865011965", "content": "", "creation_timestamp": "2025-08-12T17:14:03.389127Z"}, {"uuid": "2c3163ab-d18a-4d76-bae5-1c04a2d4a889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3lw7w3spdzhp2", "content": "", "creation_timestamp": "2025-08-12T18:14:44.756880Z"}, {"uuid": "f65d6628-ed55-4198-985a-f0e472c94083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3lw7ysce64772", "content": "", "creation_timestamp": "2025-08-12T19:03:21.365856Z"}, {"uuid": "48c0eae2-84ef-426d-b5fb-c7874bc481ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3lw7zjqdyg2k2", "content": "", "creation_timestamp": "2025-08-12T19:16:43.024173Z"}, {"uuid": "a4dda12a-9c1a-4893-91c7-48ae87a0a735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwa5dw3jf52d", "content": "", "creation_timestamp": "2025-08-12T20:24:29.655293Z"}, {"uuid": "f26e6a45-19cd-4ce0-ac3b-1640beb95465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/windowscult.com/post/3lwaba5l3622t", "content": "", "creation_timestamp": "2025-08-12T21:34:04.673542Z"}, {"uuid": "47e7e9e2-357f-4151-80d3-a0c8da762ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "ebb2cdd6-f8cc-4d69-80dd-e95f49bd2b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://krebsonsecurity.com/2025/08/microsoft-patch-tuesday-august-2025-edition/", "content": "", "creation_timestamp": "2025-08-12T20:14:41.000000Z"}, {"uuid": "064d1b31-6c1b-4ce1-b030-2446fe95b58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-537797", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0251", "content": "", "creation_timestamp": "2025-08-13T05:25:08.000000Z"}, {"uuid": "240d35ea-8d7c-42db-ab5b-153e866e2799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lwbt6ncyss23", "content": "", "creation_timestamp": "2025-08-13T12:27:59.265803Z"}, {"uuid": "acff86de-ff38-4651-a26b-d9a6179ad728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-53779", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwbtgjqqvho2", "content": "", "creation_timestamp": "2025-08-13T12:35:55.884817Z"}, {"uuid": "2e508742-4ded-4fa7-a284-2b114128f619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lwcarfa2zh2j", "content": "", "creation_timestamp": "2025-08-13T16:31:09.132829Z"}, {"uuid": "57c39966-2e11-471e-9366-c6c0caa12937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwebkpbt4c2d", "content": "", "creation_timestamp": "2025-08-14T11:50:31.793186Z"}, {"uuid": "f6e2c61a-5358-4672-a9b4-7ae492f9dcf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lwfhacjgr222", "content": "", "creation_timestamp": "2025-08-14T23:04:47.819009Z"}, {"uuid": "fef0c007-bea8-43c3-beeb-af4ee98be49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://gist.github.com/brandonwmichael/b516e7d2660c0f21b0603fa83862ddfa", "content": "", "creation_timestamp": "2025-08-27T12:53:34.000000Z"}, {"uuid": "e11ab926-8c55-49f1-90df-32e74d6205e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-53779", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3lxkvlng3rq25", "content": "", "creation_timestamp": "2025-08-29T20:30:08.231496Z"}, {"uuid": "7649c1e1-eafe-4cc0-ae72-b3cfbdd6bc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3lxmz57bkz32w", "content": "", "creation_timestamp": "2025-08-30T16:38:57.887781Z"}, {"uuid": "caf5188c-2e2d-454a-9749-a334412fbb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lxoc2c5f3c2k", "content": "", "creation_timestamp": "2025-08-31T04:51:06.375175Z"}, {"uuid": "be1bbe4b-40d0-4ca6-a4b1-60e4b88e3ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://bsky.app/profile/0xdf.bsky.social/post/3mja43k6pgm2a", "content": "", "creation_timestamp": "2026-04-11T15:00:36.605906Z"}, {"uuid": "bcc94729-2855-4c43-bce3-c2e8cd7d2a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60141", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)\nURL\uff1ahttps://github.com/b5null/Invoke-BadSuccessor.ps1\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-19T03:30:35.000000Z"}, {"uuid": "1bd8747d-637d-4e1c-999c-81f4ab97d020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/19237", "content": "HTB Eighteen. \u0417\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u043c \u0434\u043e\u043c\u0435\u043d \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c BadSuccessor #\u043d\u043e\u0432\u0438\u0447\u043a\u0430\u043c\n\n\ud83d\udc51 \u0421\u0442\u0430\u0442\u044c\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u043e\u0432\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u043f\u043e\u043a\u0430\u0436\u0443 \u043d\u0435\u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0439 \u0442\u0440\u044e\u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439: \u043a\u0430\u043a, \u0438\u043c\u0435\u044f \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430, \u043c\u043e\u0436\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c BadSuccessor (CVE-2025-53779) \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441\u0432\u043e\u044e dMSA \u0441\u00a0\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u0438\u00a0\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u043a\u043b\u044e\u0447\u0438 Kerberos. \u041f\u0435\u0440\u0435\u0434\u00a0\u044d\u0442\u0438\u043c \u043f\u0440\u043e\u0439\u0434\u0435\u043c \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443\u00a0\u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u00a0MS SQL, \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u00a0\u0432\u0445\u043e\u0434 \u043f\u043e\u00a0WinRM.\n\nhttps://xakep.ru/2026/04/13/htb-eighteen/", "creation_timestamp": "2026-04-13T13:43:21.000000Z"}, {"uuid": "53521652-90e8-4d95-931a-7037ca788fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "Telegram/ENc2-GZXFoucTwlUK9HucR-s1xNUw6l6ByiWpjk7D57EB2A", "content": "", "creation_timestamp": "2025-11-19T09:00:05.000000Z"}, {"uuid": "9de343dd-7c96-4562-b389-c38bc26d2041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/codeby_sec/9316", "content": "\ud83d\udcbb Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 111 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Windows Kerberos, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0446\u0435\u043b\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b Active Directory.\n\n\ud83d\udccc \u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0446\u0435\u043b\u043e\u0433\u043e \u0440\u044f\u0434\u0430 \u0438\u0437 111 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u043e \u0432\u0441\u0435\u043c \u0441\u0432\u043e\u0435\u043c \u043f\u043e\u0440\u0442\u0444\u043e\u043b\u0438\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0431\u0449\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430.\n\n1\ufe0f\u20e3\u0418\u0437 111 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 16 \u0438\u043c\u0435\u044e\u0442 \u0441\u0442\u0430\u0442\u0443\u0441 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445\u00bb, 92 \u2014 \u00ab\u0432\u0430\u0436\u043d\u044b\u0445\u00bb, \u0434\u0432\u0435 \u2014 \u00ab\u0443\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445\u00bb \u0438 \u043e\u0434\u043d\u0430 \u2014 \u00ab\u043d\u0438\u0437\u043a\u0438\u0445\u00bb. \u0421\u043e\u0440\u043e\u043a \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (35), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (18), \u0441\u043f\u0443\u0444\u0438\u043d\u0433 (8) \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (4).\n\u042d\u0442\u043e \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Microsoft Edge \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Patch Tuesday \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044b, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Edge \u0434\u043b\u044f Android.\n\n2\ufe0f\u20e3\u0412 \u0447\u0438\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u0445\u043e\u0434\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Microsoft Exchange Server (CVE-2025-53786, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,0), \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 CVE-2025-53779 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,2) \u2014 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows Kerberos, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438. \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e Akamai \u042e\u0432\u0430\u043b\u0443 \u0413\u043e\u0440\u0434\u043e\u043d\u0443.\n\n3\ufe0f\u20e3\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0435\u0449\u0451 \u0432 \u043c\u0430\u0435 2025 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432\u0435\u0431-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c BadSuccessor. \u041d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f, \u043f\u043e \u0441\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u043c\u0435\u043d Active Directory (AD), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0434\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043b\u0443\u0436\u0431 (dMSA).\n\n4\ufe0f\u20e3\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Azure OpenAI, Azure Portal \u0438 Microsoft 365 Copilot BizChat, \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.", "creation_timestamp": "2025-08-19T15:04:21.000000Z"}, {"uuid": "63b3cafc-8cbe-400b-b0dc-b1b3f084190e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/ics_cert/1306", "content": "\ud83d\udd25 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u06f1\u06f0\u06f7 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f \u06a9\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0642\u0628\u0644 \u0627\u0632 \u0631\u0641\u0639 \u0634\u062f\u0646 \u0627\u0641\u0634\u0627 \u0634\u062f\u0647 \u0628\u0648\u062f \u0648 \u062f\u0648\u0627\u0632\u062f\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u06cc\u06af\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u06f4\u06f4 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632\u060c \u06f3\u06f5 \u0645\u0648\u0631\u062f \u0628\u0647 RCE\u060c \u06f1\u06f8 \u0645\u0648\u0631\u062f \u0628\u0647 \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u060c \u06f4 \u0645\u0648\u0631\u062f \u0628\u0647 DoS \u0648 \u06f9 \u0645\u0648\u0631\u062f \u0628\u0647 \u062c\u0639\u0644 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-53779 (CVSS 7.2) \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0633\u0631\u0648\u06cc\u0633 Kerberos \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0632 \u0645\u0627\u0647 \u0645\u0647 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a - \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 BadSuccessor \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u062a\u0627\u0628\u0639 dMSA \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0633\u0631\u0648\u0631 \u06f2\u06f0\u06f2\u06f5 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u0645\u0627\u0647 \u0645\u0647\u060c \u0631\u062f\u0645\u0648\u0646\u062f \u0642\u0648\u0644 \u062f\u0627\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u062f \u0648 \u0633\u0631\u0627\u0646\u062c\u0627\u0645 \u06cc\u06a9 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0627\u06cc\u0646 \u0645\u0627\u0647 \u0628\u0633\u06cc\u0627\u0631 \u062a\u0631\u0633\u0646\u0627\u06a9 \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc\u200c\u0631\u0633\u0646\u062f.\n\nCVE-2025-50165 \u0648 CVE-2025-53766 (\u0647\u0631 \u062f\u0648 \u0628\u0627 CVSS 9.8) \u06a9\u062f\u0647\u0627\u06cc RCE \u062f\u0631 \u0632\u06cc\u0631\u0633\u06cc\u0633\u062a\u0645 \u06af\u0631\u0627\u0641\u06cc\u06a9\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 GDI+ \u0647\u0633\u062a\u0646\u062f. \u0628\u0647 \u0639\u0628\u0627\u0631\u062a \u0633\u0627\u062f\u0647\u060c \u0627\u0632 \u0646\u0638\u0631 \u062a\u0626\u0648\u0631\u06cc\u060c \u0622\u0644\u0648\u062f\u0647 \u0634\u062f\u0646 \u0628\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u0647\u0646\u06af\u0627\u0645 \u0645\u0634\u0627\u0647\u062f\u0647 \u0635\u0641\u062d\u0627\u062a \u0648\u0628 \u0645\u062e\u0631\u0628 \u0648 \u062d\u062a\u06cc \u0628\u0646\u0631\u0647\u0627\u06cc \u062a\u0628\u0644\u06cc\u063a\u0627\u062a\u06cc \u0645\u062e\u0631\u0628 \u0627\u0645\u06a9\u0627\u0646\u200c\u067e\u0630\u06cc\u0631 \u0627\u0633\u062a.\n\n\u062f\u0631 \u0645\u0627\u0647 \u0627\u0648\u062a\u060c RCE \u0647\u0627\u06cc \u0628\u06cc\u0634\u062a\u0631\u06cc \u062f\u0631 \u0622\u0641\u06cc\u0633 \u0648 \u0648\u0631\u062f \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f \u06a9\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u067e\u0646\u0644 \u067e\u06cc\u0634\u200c\u0646\u0645\u0627\u06cc\u0634 \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0646\u062f. CVE-2025-53731\u060c -53733\u060c -53740 \u0648 -53784 (CVSS 8.4) \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 \u0645\u062e\u062a\u0644\u0641 \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0646\u062f \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u06cc\u0646 \u0641\u06a9\u0631 \u063a\u0645\u200c\u0627\u0646\u06af\u06cc\u0632 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0645\u0642\u0627\u0648\u0645\u200c\u0633\u0627\u0632\u06cc \u0622\u0641\u06cc\u0633 \u0628\u0647 \u0647\u06cc\u0686 \u0648\u062c\u0647 \u062a\u0645\u0627\u0645 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0631\u0627\u06cc \u062f\u0633\u0631\u060c \u06cc\u06a9 \u0646\u0642\u0635 \u062f\u0631 NTLM\u060c CVE-2025-53778\u060c \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u062f\u0647 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u067e\u0627\u06cc\u06cc\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0647 SYSTEM \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u062f. \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u0632 \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647 \u062e\u0628\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f. \ud83d\ude0f\n\n\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u060c \u062e\u0627\u0646\u0645\u200c\u0647\u0627 \u0648 \u0622\u0642\u0627\u06cc\u0627\u0646.\n\n#\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627 \u0631\u0627 \u0628\u0627\u0644\u0627 \u0628\u0628\u0631\u06cc\u0645.\u00a0 \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t", "creation_timestamp": "2025-08-29T09:45:45.000000Z"}, {"uuid": "ea6ed4fb-76fa-4485-80da-e51e0d0e8b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/ics_cert/1313", "content": "\u06cc\u06a9 \u062b\u0627\u0646\u06cc\u0647 \u0637\u0648\u0644 \u0645\u06cc\u200c\u06a9\u0634\u062f \u0648 \u0634\u0645\u0627 \u0645\u062f\u06cc\u0631 \u062f\u0627\u0645\u0646\u0647 \u0647\u0633\u062a\u06cc\u062f. \u0686\u0631\u0627 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0633\u0631\u0648\u0631 \u062e\u0648\u062f\u0634 \u0645\u062d\u0627\u0641\u0638\u062a \u06a9\u0646\u062f\u061f\n\n\u062f\u0631 \u06a9\u0646\u0641\u0631\u0627\u0646\u0633 DEF CON 2025\u060c \u0645\u062d\u0642\u0642\u0627\u0646 Akamai \u062a\u062d\u0642\u06cc\u0642\u0627\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0633\u0631\u0648\u0631 2025 \u0628\u0647 \u0646\u0627\u0645 BadSuccessor (CVE-2025-53779) \u0627\u0631\u0627\u0626\u0647 \u062f\u0627\u062f\u0646\u062f \u06a9\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u0627\u06cc\u06cc\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0641\u0648\u0631\u0627\u064b \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 Domain Admin \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0648\u0639 \u062c\u062f\u06cc\u062f\u06cc \u0627\u0632 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647\u200c\u06cc \u0648\u0627\u06af\u0630\u0627\u0631 \u0634\u062f\u0647 (dMSA)\u060c \u0628\u0648\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u062a\u0627 \u06cc\u06a9 dMSA \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0631\u0627 \u0628\u0627 \u0647\u0631 \u062d\u0633\u0627\u0628\u06cc \u062f\u0631 \u0627\u06a9\u062a\u06cc\u0648 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u0648 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627\u060c \u0645\u0631\u062a\u0628\u0637 \u06a9\u0646\u062f\u060c \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0633\u0631\u0648\u06cc\u0633 \u062a\u0648\u0632\u06cc\u0639 \u06a9\u0644\u06cc\u062f (KDC) \u0634\u0631\u0648\u0639 \u0628\u0647 \u062f\u0631\u06a9 dMSA \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u00ab\u0648\u0627\u0631\u062b\u00bb \u0647\u062f\u0641\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0622\u0646 \u062f\u0631 PAC \u0648 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0639\u0628\u0648\u0631\u06cc Kerberos\u060c \u0645\u06cc\u200c\u06a9\u0631\u062f.\n\n\u0686\u06cc\u0632\u06cc \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0645\u06cc\u200c\u06a9\u0631\u062f \u0627\u06cc\u0646 \u0628\u0648\u062f \u06a9\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0646\u0647\u0627 \u0628\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0647\u0631 \u0648\u0627\u062d\u062f \u0633\u0627\u0632\u0645\u0627\u0646\u06cc (OU) \u062f\u0631 \u062f\u0627\u0645\u0646\u0647 \u0646\u06cc\u0627\u0632 \u062f\u0627\u0634\u062a. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0633\u062a \u06cc\u06a9 dMSA \u062f\u0631 \u0686\u0646\u06cc\u0646 \u0648\u0627\u062d\u062f \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f \u0648 \u0628\u062f\u0648\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0634\u062e\u0635 \u062b\u0627\u0644\u062b \u06cc\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0633\u06cc\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u06af\u0631\u0648\u0647\u06cc\u060c \u0628\u0647 \u062d\u0633\u0627\u0628 \u0647\u062f\u0641 \u067e\u06cc\u0648\u0646\u062f \u0628\u0631\u0642\u0631\u0627\u0631 \u06a9\u0646\u062f. KDC \u0627\u06cc\u0646 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0631\u0627 \u0628\u062f\u0648\u0646 \u062a\u0623\u06cc\u06cc\u062f \u0627\u0639\u062a\u0628\u0627\u0631 \u067e\u06cc\u0648\u0646\u062f\u060c \u06a9\u0627\u0645\u0644\u0627\u064b \u0645\u06cc\u200c\u067e\u0630\u06cc\u0631\u0641\u062a.\n\n\u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631\u060c \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0628\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u0633\u0647 CVE-2025-53779 \u0631\u0627 \u0627\u062e\u062a\u0635\u0627\u0635 \u062f\u0627\u062f \u0648 \u06cc\u06a9 \u0627\u0635\u0644\u0627\u062d\u06cc\u0647 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062e\u0648\u062f \u0648\u06cc\u0698\u06af\u06cc \u0644\u06cc\u0646\u06a9 \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u0646\u06a9\u0631\u062f\u060c \u0627\u0645\u0627 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a\u06cc \u062f\u0631 \u0645\u0624\u0644\u0641\u0647 kdcsvc.dll \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0627\u0639\u062b \u0634\u062f \u0633\u0631\u0648\u06cc\u0633 KDC \u062a\u0639\u0627\u0645\u0644 \u0628\u06cc\u0646 dMSA \u0648 \u062d\u0633\u0627\u0628 \u0647\u062f\u0641 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u062f. \u0627\u06a9\u0646\u0648\u0646\u060c \u0628\u0631\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0628\u0644\u06cc\u0637 Kerberos\u060c dMSA \u0648 \"\u0633\u0644\u0641\" \u0622\u0646 \u0628\u0627\u06cc\u062f \u0628\u0647 \u06cc\u06a9\u062f\u06cc\u06af\u0631 \u0627\u0631\u062c\u0627\u0639 \u062f\u0647\u0646\u062f\u060c \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062f\u0631 \u0637\u0648\u0644 \u0645\u0647\u0627\u062c\u0631\u062a \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u0648\u0627\u0642\u0639\u06cc \u0627\u0632 \u0637\u0631\u06cc\u0642 migrateADServiceAccount \u0627\u062a\u0641\u0627\u0642 \u0645\u06cc\u200c\u0627\u0641\u062a\u062f. \u0627\u062a\u0635\u0627\u0644 \u06cc\u06a9\u200c\u0637\u0631\u0641\u0647 \u06a9\u0647 \u0642\u0628\u0644\u0627\u064b \u0627\u0645\u06a9\u0627\u0646 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0641\u0648\u0631\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0631\u062f\u060c \u062f\u06cc\u06af\u0631 \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631\u06cc\u0627\u0641\u062a\u0646\u062f\u060c \u0627\u06cc\u0646 \u0628\u062f\u0627\u0646 \u0645\u0639\u0646\u0627 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0631\u0648\u0634 \u06a9\u0627\u0645\u0644\u0627\u064b \u0628\u06cc\u200c\u0627\u062b\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0627 \u0648\u062c\u0648\u062f \u062d\u0630\u0641 \u0645\u0633\u06cc\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645 \u062a\u0634\u062f\u06cc\u062f\u060c \u062a\u06a9\u0646\u06cc\u06a9 BadSuccessor \u0647\u0645\u0686\u0646\u0627\u0646 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0627\u0633\u062a \u0632\u06cc\u0631\u0627 \u0647\u0633\u062a\u0647 \u0627\u0635\u0644\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc - \u0639\u062f\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0628\u0631 \u0648\u06cc\u0698\u06af\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u06cc - \u0647\u0646\u0648\u0632 \u067e\u0627\u0628\u0631\u062c\u0627\u0633\u062a. \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0628\u0647 BadSuccessor \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062f\u0631 \u062f\u0648 \u0633\u0646\u0627\u0631\u06cc\u0648\u06cc \u062c\u062f\u06cc\u062f \u06a9\u0647 \u0645\u0648\u0631\u062f \u062a\u0648\u062c\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0648 \u062a\u0647\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u200c\u0647\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u0647\u0633\u062a\u0646\u062f\u060c \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.\n\n\u0633\u0646\u0627\u0631\u06cc\u0648\u06cc \u0627\u0648\u0644\u060c \u062a\u0635\u0627\u062d\u0628 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0648 \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647 (\u062c\u0627\u06cc\u06af\u0632\u06cc\u0646\u06cc \u0628\u0631\u0627\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u06cc\u0647) \u0627\u0633\u062a. \u0627\u06af\u0631 \u0645\u0647\u0627\u062c\u0645\u06cc \u0627\u0632 \u0642\u0628\u0644 \u06a9\u0646\u062a\u0631\u0644 dMSA \u0648 \u062d\u0633\u0627\u0628 \u0647\u062f\u0641 \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0647\u0645 \u067e\u06cc\u0648\u0646\u062f \u062f\u0647\u062f\u060c \u06cc\u06a9 \u0628\u0644\u06cc\u0637 Kerberos \u0628\u0631\u0627\u06cc dMSA \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u062f \u0648 \u0627\u0632 \u0627\u06cc\u0646 \u0637\u0631\u06cc\u0642 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u062a\u0641\u0627\u0648\u062a\u060c \u0627\u0632 \u0637\u0631\u0641 \u0642\u0631\u0628\u0627\u0646\u06cc \u0639\u0645\u0644 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0631\u0648\u0634 \u0628\u0647 \u0641\u0631\u062f \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9 \u0627\u0632 \u0637\u0631\u0641 \u062d\u0633\u0627\u0628 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f \u0648 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0646\u0638\u0627\u0631\u062a\u06cc \u067e\u0646\u0647\u0627\u0646 \u0634\u0648\u062f. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc Kerberos \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0648 \u0628\u0627 \u0647\u0632\u06cc\u0646\u0647 \u06a9\u0645\u062a\u0631\u06cc \u0646\u0633\u0628\u062a \u0628\u0647 \u062d\u0645\u0644\u0627\u062a Kerberoasting \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u060c \u0632\u06cc\u0631\u0627 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646 SPN \u06cc\u0627 \u062d\u062f\u0633 \u0632\u062f\u0646 \u0631\u0645\u0632\u0647\u0627\u06cc \u0639\u0628\u0648\u0631 \u0646\u06cc\u0633\u062a.\n\n\u0633\u0646\u0627\u0631\u06cc\u0648\u06cc \u062f\u0648\u0645\u060c \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646\u06cc \u0628\u0631\u0627\u06cc DCSync \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u06a9\u0644\u06cc\u062f\u0647\u0627 \u062f\u0631 \u062f\u0627\u0645\u0646\u0647\u200c\u0647\u0627\u06cc \u0627\u0632 \u0642\u0628\u0644 \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0686\u0646\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637\u06cc\u060c \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 dMSA \u0628\u0631\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0628\u0644\u06cc\u0637 \u0628\u0627 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0647\u0631 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0628\u062f\u0648\u0646 \u062a\u0645\u0627\u0633 \u0628\u0627 \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647 \u062f\u0627\u0645\u0646\u0647 \u0628\u0631\u0627\u06cc \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062a\u06a9\u062b\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0631\u0627 \u06a9\u0627\u0647\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0632\u06cc\u0631\u0627 \u0627\u0645\u0636\u0627\u0647\u0627\u06cc \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f DCSync \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0631\u0648\u06cc\u06a9\u0631\u062f \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u0628\u0631\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0627\u0632 BadSuccessor \u067e\u0633 \u0627\u0632 \u0646\u0635\u0628 \u0648\u0635\u0644\u0647\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u062d\u0633\u0627\u0628\u0631\u0633\u06cc \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc dMSA \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f \u0648 \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0633\u0628 \u0631\u0645\u0632\u0647\u0627\u06cc \u0639\u0628\u0648\u0631 dMSA \u06cc\u0627 \u0627\u0631\u062a\u0628\u0627\u0637 \u063a\u06cc\u0631\u0639\u0627\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0641\u0639\u0627\u0644 \u0628\u0627 dMSA \u0631\u0627 \u0631\u0635\u062f \u06a9\u0646\u06cc\u062f. \u0645\u0648\u0642\u0639\u06cc\u062a\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u063a\u06cc\u0631\u0641\u0639\u0627\u0644\u200c\u0634\u062f\u0647 \u0642\u0628\u0644\u06cc \u0646\u0627\u06af\u0647\u0627\u0646 \u0628\u0647 \u06cc\u06a9 dMSA \u062c\u062f\u06cc\u062f \u0645\u062a\u0635\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u06a9\u0631\u0631 \u0628\u0647 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 dMSA \u062f\u0631 \u06cc\u06a9 \u062f\u0648\u0631\u0647 \u06a9\u0648\u062a\u0627\u0647\u060c \u0645\u0634\u06a9\u0648\u06a9 \u062a\u0644\u0642\u06cc \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u06a9\u0627\u0647\u0634\u200c\u062f\u0647\u0646\u062f\u0647 \u0634\u0627\u0645\u0644 \u0646\u0635\u0628 \u0648\u0635\u0644\u0647 CVE-2025-53779 \u0631\u0648\u06cc \u062a\u0645\u0627\u0645 \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0633\u0631\u0648\u0631 2025 \u0648 \u0628\u0631\u0631\u0633\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062d\u0642\u0648\u0642 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 OU\u0647\u0627\u060c \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631\u0647\u0627 \u0648 \u0627\u0634\u06cc\u0627\u0621 dMSA \u0627\u0633\u062a. \u0641\u0642\u0637 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0637\u062d 0 \u0628\u0627\u06cc\u062f \u0628\u062a\u0648\u0627\u0646\u0646\u062f dMSA\u0647\u0627 \u0648 \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0627\u062c\u0631\u062a \u0622\u0646\u0647\u0627 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u0646\u062f.\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627 \u0631\u0627 \u0628\u0627\u0644\u0627 \u0628\u0628\u0631\u06cc\u0645.\u00a0 \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t", "creation_timestamp": "2025-09-02T20:56:59.000000Z"}, {"uuid": "f340c0a3-bc5e-4b47-8a96-a9a647429a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/kasperskyb2b/1862", "content": "\ud83d\udd25 \u0416\u0430\u0440\u043a\u0438\u0439 \u0430\u0432\u0433\u0443\u0441\u0442 \u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0435\n\n\u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0443\u0440\u043e\u0436\u0430\u0439\u043d\u044b\u043c. Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 107 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0430 \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0430 \u0435\u0449\u0451 \u0434\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u043c\u0435\u044e\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n44 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 35 \u2014 \u043a RCE, 18 \u2014 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 4 \u2014 DoS, 9 \u2014 spoofing.\n\n\u041e \u0437\u0438\u0440\u043e\u0434\u0435\u0435 CVE-2025-53779 (CVSS 7.2), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u043c \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 Kerberos, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0435\u0449\u0451 \u0441 \u043c\u0430\u044f \u2014 \u044d\u0442\u043e \u0430\u0442\u0430\u043a\u0430 BadSuccessor, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e dMSA \u0432 Windows Server 2025. \u0412 \u043c\u0430\u0435 \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0431\u0435\u0449\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442 \u0438 \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0443\u0433\u0430\u044e\u0449\u0435.\n\nCVE-2025-50165 \u0438 CVE-2025-53766 (\u043e\u0431\u0430 \u0441 CVSS 9.8) \u2014 \u044d\u0442\u043e RCE \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows \u0438 GDI+. \u041f\u0440\u043e\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f, \u0437\u0430\u0440\u0430\u0437\u0438\u0442\u044c\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0438 \u0434\u0430\u0436\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0431\u0430\u043d\u043d\u0435\u0440\u043d\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b.\n\n\u041d\u0435 \u043e\u0431\u043e\u0448\u043b\u043e\u0441\u044c \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0438 \u0431\u0435\u0437 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0445 RCE \u0432 Office \u0438 Word, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. CVE-2025-53731, -53733, -53740 \u0438 -53784 (CVSS 8.4) \u043f\u0440\u0438\u0441\u043b\u0430\u043d\u044b \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0447\u0442\u043e \u043d\u0430\u0432\u043e\u0434\u0438\u0442 \u043d\u0430 \u0433\u0440\u0443\u0441\u0442\u043d\u0443\u044e \u043c\u044b\u0441\u043b\u044c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u0440\u0434\u0435\u043d\u0438\u043d\u0433 Office \u0434\u0430\u043b\u0451\u043a \u043e\u0442 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f.\n\n\u041d\u0430 \u0437\u0430\u043a\u0443\u0441\u043a\u0443 \u2014 \u0434\u0435\u0444\u0435\u043a\u0442 \u0432 NTLM, CVE-2025-53778, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0438\u0445 \u0434\u043e SYSTEM. Microsoft \u043e\u0431\u043d\u0430\u0434\u0451\u0436\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0449\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0430. \ud83d\ude0f\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u0441\u044f, \u0434\u0430\u043c\u044b \u0438 \u0433\u043e\u0441\u043f\u043e\u0434\u0430.\n\n#Microsoft @\u041f2\u0422", "creation_timestamp": "2025-08-13T08:34:11.000000Z"}, {"uuid": "7fb7c4c1-a117-4ad2-aedc-f3585f983744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/true_secator/7322", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0437\u0430 \u0430\u0432\u0433\u0443\u0441\u0442 2025 \u0433\u043e\u0434\u0430 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f 107 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e 0-day \u0432 Windows Kerberos.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 13 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 9 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044d\u0442\u043e RCE, 3 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 1 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0443 CVSS, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2025-53766 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows GDI+, \u0438\u043c\u0435\u044e\u0449\u0435\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS 9,8.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b ZDI Trend Micro, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-53766 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u0435\u0441\u043b\u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0438\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, - CVE-2025-50165, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Windows \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 RCE.\n\n\u0414\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435. Microsoft \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 \u00ab\u0432\u0430\u0436\u043d\u044b\u0439\u00bb.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0435 RCE, - \u044d\u0442\u043e CVE-2025-53740 \u0438 CVE-2025-53731, \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 Office \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430.\n\n\u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, - CVE-2025-49712, RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 SharePoint. ZDI \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0445\u043e\u0436\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 ToolShell.\n\n\u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0435\u0439 Microsoft \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c Hyper-V (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0438 RCE), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 Azure Stack Hub.\n\n\u041e\u0431\u0449\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: 44 - EoP, 35 - RCE, 18 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 4 - DoS, 9 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433.\n\n\u041a\u0430\u043a \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u043e\u0441\u044c, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 PatchTuesday \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 (\u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c) \u043e\u0434\u043d\u0443 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e 0-day \u0432 Microsoft SQL Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-53779\u00a0\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430.\n\nMicrosoft \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0438\u043c\u0435\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c dMSA: msds-groupMSAMembership (\u0430\u0442\u0440\u0438\u0431\u0443\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 dMSA) \u0438 msds-ManagedAccountPrecededByLink (\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043c\u043e\u0436\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c dMSA).\n\nMicrosoft \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u042e\u0432\u0430\u043b\u044e \u0413\u043e\u0440\u0434\u043e\u043d\u0443 \u0438\u0437 Akamai, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u0441\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c - \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2025-08-13T10:48:37.000000Z"}, {"uuid": "c18e2501-b516-488d-9f5a-4d3c9844dbee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/bagl3y_notes/249", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f  \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043a MSSQL \u0441 \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u0440\u0435\u0434\u0430\u043c\u0438, impersonate \u0432 appdev \u27a1\ufe0f \u0434\u043e\u0441\u0442\u0430\u0451\u043c Werkzeug PBKDF2-HMAC-SHA256 \u0445\u044d\u0448 \u0430\u0434\u043c\u0438\u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (hashcat mode 10900) \u27a1\ufe0f  RID cycling \u0447\u0435\u0440\u0435\u0437 MSSQL (nxc), enum \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u044e\u0437\u0435\u0440\u043e\u0432, password spray (WinRM \u0441 \u044e\u0437\u0435\u0440\u043e\u043c \u0438\u0437 IT group) \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-53779 \"Bad Successor\" (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 dMSA \u0432 Staff OU \u0441 msDS-ManagedAccountPrecededByLink, KDC \u0432\u044b\u0434\u0430\u0451\u0442 TGT \u0441 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 Domain Admin) \u27a1\ufe0f \u0434\u0430\u043c\u043f\u0438\u043c NTDS \n\nnetexec mssql eighteen.htb -u kevin -p 'iNa2we6haRj2gaw!' --local-auth --rid-brute | grep -oP 'EIGHTEEN\\\\\\w+\\.\\w+' | cut -d '\\' -f2 | tee users\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Windows box -  Eighteen, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\ud83d\udcf2 max\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:25.643954Z"}, {"uuid": "3f0a5f60-cdec-4eb4-a461-9b718785b9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/bagl3y_notes/249", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f  \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043a MSSQL \u0441 \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u0440\u0435\u0434\u0430\u043c\u0438, impersonate \u0432 appdev \u27a1\ufe0f \u0434\u043e\u0441\u0442\u0430\u0451\u043c Werkzeug PBKDF2-HMAC-SHA256 \u0445\u044d\u0448 \u0430\u0434\u043c\u0438\u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (hashcat mode 10900) \u27a1\ufe0f  RID cycling \u0447\u0435\u0440\u0435\u0437 MSSQL (nxc), enum \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u044e\u0437\u0435\u0440\u043e\u0432, password spray (WinRM \u0441 \u044e\u0437\u0435\u0440\u043e\u043c \u0438\u0437 IT group) \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-53779 \"Bad Successor\" (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 dMSA \u0432 Staff OU \u0441 msDS-ManagedAccountPrecededByLink, KDC \u0432\u044b\u0434\u0430\u0451\u0442 TGT \u0441 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 Domain Admin) \u27a1\ufe0f \u0434\u0430\u043c\u043f\u0438\u043c NTDS \n\nnetexec mssql eighteen.htb -u kevin -p 'iNa2we6haRj2gaw!' --local-auth --rid-brute | grep -oP 'EIGHTEEN\\\\\\w+\\.\\w+' | cut -d '\\' -f2 | tee users\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Windows box -  Eighteen, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\ud83d\udcf2 max\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:41.293502Z"}, {"uuid": "1b8d8502-815a-4663-92db-1716fdb396dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/purp_sec/1027", "content": "\ud83d\udd12 \u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 100 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2014 13 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Windows \u0438 Office\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f: \n\n\ud83d\udd35 CVE\u20112025\u201150165 \u2014 \u0431\u0430\u0433 \u0432 Windows Graphics Component. \u0410\u0442\u0430\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e, \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 JPEG\u2011\u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b.\n\n\ud83d\udd35 CVE\u20112025\u201150176 \u2014 type confusion \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435 Windows. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE\u20112025\u201150177 \u2014 use-after-free \u0432 Microsoft Message Queuing (MSMQ). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE \u043f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 race condition.\n\n\ud83d\udd35 CVE\u20112025\u201153731, CVE\u20112025\u201153740, CVE\u20112025\u201153733, CVE\u20112025\u201153784 \u2014 \u0441\u0435\u0440\u0438\u044f use-after-free \u0431\u0430\u0433\u043e\u0432 \u0432 Microsoft Office \u0438 Word. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430.\n\n\u0414\u0432\u0430 \u0431\u0430\u0433\u0430 \u0438\u0437 \u043f\u0430\u0442\u0447\u0430, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f in-the-wild:\n\n\ud83d\udd35 CVE\u20112025\u201153786 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Microsoft Exchange Server. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441-\u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 Exchange Server \u0438 Exchange Online \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 Exchange \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u0432 Microsoft\u202f365 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u043f\u043e\u0447\u0442\u0438 \u0431\u0435\u0437 \u0441\u043b\u0435\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-53779 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (relative path traversal) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Windows Kerberos (Windows Server 2025). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043c\u043e\u0436\u0435\u0442 \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd17 \u0420\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0430 \u0432\u0441\u0435\u0445 \u0431\u0430\u0433\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:07.470926Z"}, {"uuid": "2a56460b-566c-4b00-aae5-b4f36c72aad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "Telegram/2GKVzEdq0Q1GgXdde3R68qhjmtmEcsIfO4W2udc5u2OvA5M", "content": "", "creation_timestamp": "2026-06-05T09:00:04.000000Z"}, {"uuid": "2afb442e-5874-4794-af4a-3d9f3a3639ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/249", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f  \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043a MSSQL \u0441 \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u0440\u0435\u0434\u0430\u043c\u0438, impersonate \u0432 appdev \u27a1\ufe0f \u0434\u043e\u0441\u0442\u0430\u0451\u043c Werkzeug PBKDF2-HMAC-SHA256 \u0445\u044d\u0448 \u0430\u0434\u043c\u0438\u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (hashcat mode 10900) \u27a1\ufe0f  RID cycling \u0447\u0435\u0440\u0435\u0437 MSSQL (nxc), enum \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u044e\u0437\u0435\u0440\u043e\u0432, password spray (WinRM \u0441 \u044e\u0437\u0435\u0440\u043e\u043c \u0438\u0437 IT group) \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-53779 \"Bad Successor\" (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 dMSA \u0432 Staff OU \u0441 msDS-ManagedAccountPrecededByLink, KDC \u0432\u044b\u0434\u0430\u0451\u0442 TGT \u0441 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 Domain Admin) \u27a1\ufe0f \u0434\u0430\u043c\u043f\u0438\u043c NTDS \n\nnetexec mssql eighteen.htb -u kevin -p 'iNa2we6haRj2gaw!' --local-auth --rid-brute | grep -oP 'EIGHTEEN\\\\\\w+\\.\\w+' | cut -d '\\' -f2 | tee users\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Windows box -  Eighteen, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\ud83d\udcf2 max\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-06T00:00:40.316072Z"}, {"uuid": "caebaa73-9580-4845-aa30-900b857555cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/purp_sec/1027", "content": "\ud83d\udd12 \u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 100 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2014 13 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Windows \u0438 Office\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f: \n\n\ud83d\udd35 CVE\u20112025\u201150165 \u2014 \u0431\u0430\u0433 \u0432 Windows Graphics Component. \u0410\u0442\u0430\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e, \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 JPEG\u2011\u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b.\n\n\ud83d\udd35 CVE\u20112025\u201150176 \u2014 type confusion \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435 Windows. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE\u20112025\u201150177 \u2014 use-after-free \u0432 Microsoft Message Queuing (MSMQ). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE \u043f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 race condition.\n\n\ud83d\udd35 CVE\u20112025\u201153731, CVE\u20112025\u201153740, CVE\u20112025\u201153733, CVE\u20112025\u201153784 \u2014 \u0441\u0435\u0440\u0438\u044f use-after-free \u0431\u0430\u0433\u043e\u0432 \u0432 Microsoft Office \u0438 Word. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430.\n\n\u0414\u0432\u0430 \u0431\u0430\u0433\u0430 \u0438\u0437 \u043f\u0430\u0442\u0447\u0430, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f in-the-wild:\n\n\ud83d\udd35 CVE\u20112025\u201153786 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Microsoft Exchange Server. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441-\u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 Exchange Server \u0438 Exchange Online \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 Exchange \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u0432 Microsoft\u202f365 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u043f\u043e\u0447\u0442\u0438 \u0431\u0435\u0437 \u0441\u043b\u0435\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-53779 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (relative path traversal) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Windows Kerberos (Windows Server 2025). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043c\u043e\u0436\u0435\u0442 \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd17 \u0420\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0430 \u0432\u0441\u0435\u0445 \u0431\u0430\u0433\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:14.199342Z"}, {"uuid": "da03f030-674d-4b24-a093-5a9a56fd489a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "Telegram/CAgNXP7QCJ0ImmaZujxERj5g-FS7jqScPpLDOt1x7u-ghTY", "content": "", "creation_timestamp": "2026-07-24T12:00:04.493873Z"}, {"uuid": "cc14957b-216d-44e0-a2b7-e04b1c4dadb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "published-proof-of-concept", "source": "Telegram/CAgNXP7QCJ0ImmaZujxERj5g-FS7jqScPpLDOt1x7u-ghTY", "content": "", "creation_timestamp": "2026-07-25T00:00:10.695958Z"}, {"uuid": "5c745371-669f-4145-9990-f83fbf3e25d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/EchelonEyes/4004", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 107 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e zero-day \u0432 Windows Kerberos\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 107 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-53779 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.2) \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Kerberos. \u0414\u0430\u043d\u043d\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u043b\u043e \u0435\u0451 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442:\n\u2022  13 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (9 \u2014 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, 3 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 1 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439);\n\u2022  35 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430;\n\u2022  44 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n\u2022  18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0440\u043e\u043b\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430, \u0442\u0430\u043a \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kerberos \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Windows.\n\nMicrosoft \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \n\n#\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/d527da", "creation_timestamp": "2026-07-26T02:00:29.627866Z"}, {"uuid": "4b95831e-0dab-4a38-9d4f-3ca754f11266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "exploited", "source": "https://t.me/EchelonEyes/4004", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 107 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e zero-day \u0432 Windows Kerberos\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 107 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-53779 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.2) \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Kerberos. \u0414\u0430\u043d\u043d\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u043b\u043e \u0435\u0451 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442:\n\u2022  13 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (9 \u2014 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, 3 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 1 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439);\n\u2022  35 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430;\n\u2022  44 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n\u2022  18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0440\u043e\u043b\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430, \u0442\u0430\u043a \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kerberos \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Windows.\n\nMicrosoft \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \n\n#\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/d527da", "creation_timestamp": "2026-07-27T00:00:07.848865Z"}, {"uuid": "c47781ae-542c-46b7-a4b3-13142457cfb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-01T17:00:13.399435Z"}, {"uuid": "6781fb6c-65f7-4ec3-b9a6-10f5fd8029b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "seen", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-02T01:03:47.889665Z"}, {"uuid": "ea421caf-f606-40b7-899c-2fbdc53a2ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-09T03:00:06.343610Z"}, {"uuid": "a22e64d2-4b38-4516-864c-1fb12b5af5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53779", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7811", "content": "Key Priorities:\nOngoing Patch Management, \nSecurity Hardening, \nand Detection of Unauthorized Changes.\n\nCybersecurity requires a dynamic, knowledge-driven approach. Professionals and organizations must continuously strengthen their expertise through ongoing study, participation in leading industry events, and engagement with up-to-date resources on a daily, weekly, and monthly basis. This includes not only IT and networking, but also a dedicated focus on security itself as the core specialization. Consistent alignment with international standards, modern security frameworks, and global trends ensures preparedness against ever-changing threats. Security is not a fixed destination; it is a living, evolving process sustained only through continuous learning and knowledge exchange.\n\nHere are some of the latest exploits observed in the wild as of August 2025:\n1. Citrix NetScaler Vulnerabilities (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424)\n\u00a0\u00a0- CVE-2025-7775(CVSS 9.2): A memory overflow vulnerability leading to remote code execution (RCE) or denial-of-service (DoS). Actively exploited in the wild.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-7776(CVSS 8.8): Another memory overflow issue causing unpredictable behavior or DoS.\u00a0\u00a0\n\u00a0\u00a0- CVE-2025-8424 (CVSS 8.7): Improper access control in the NetScaler Management Interface.\u00a0\u00a0\n\u00a0\u00a0- Affected Products: NetScaler ADC and Gateway.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in versions 14.1-47.48, 13.1-59.22, and others.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/d7p73m2j)\n\n2. Windows Kerberos Zero-Day (CVE-2025-53779)\n\u00a0\u00a0- CVSS 7.2: Elevation of privilege vulnerability in Windows Kerberos, allowing attackers to escalate privileges to domain administrator.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Requires pre-existing control of specific dMSA attributes.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows Server 2025.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dCgTudwu)\n\n3. Windows Graphics Component RCE (CVE-2025-50165)\u00a0\n\u00a0\u00a0- CVSS 9.8: Pre-authentication RCE via malicious JPEG files.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: No user interaction required; can be triggered via Office documents or web services.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available for Windows 11 24H2 and Server 2025.\u00a0 \n\n4. SAP NetWeaver Exploit (CVE-2025-31324 and CVE-2025-42999)\n\u00a0\u00a0- CVSS 10.0: Chained vulnerabilities allowing unauthenticated RCE in SAP NetWeaver Visual Composer.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Public exploit released, enabling attackers to execute arbitrary commands.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available via SAP Security Notes 3594142 and 3604119.\u00a0\u00a0\n\u00a0\u00a0- [Source](https://lnkd.in/dDV8JzTh)\n\n5. Apple Zero-Day (CVE-2025-43300)\u00a0\n\u00a0\u00a0- CVSS Unspecified: Out-of-bounds write vulnerability in the Image I/O framework affecting iOS, iPadOS, and macOS.\u00a0\u00a0\n\u00a0\u00a0- Exploitation: Evidence of targeted attacks.\u00a0\u00a0\n\u00a0\u00a0- Patches: Available in Apple's latest updates.\u00a0 \n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.08.27\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cpe-isaca-2024-2025-activity-7366438022139064320-6WYR", "creation_timestamp": "2026-09-10T00:00:55.296797Z"}]}