{"vulnerability": "CVE-2025-5905", "sightings": [{"uuid": "f6ae568f-ac52-40a5-857c-41fe4e6151f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5905", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7qj6peeb25", "content": "", "creation_timestamp": "2025-06-10T01:28:49.742569Z"}, {"uuid": "90c19d91-1d06-4bb3-9afe-b164f7b204dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-59054", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lyrrkxxmiy2q", "content": "", "creation_timestamp": "2025-09-14T07:32:00.874996Z"}, {"uuid": "2fbde2eb-d9b3-417a-bdde-4c0807550485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59054", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a76b0850a3790b646aa12b5cd7135e19", "content": "", "creation_timestamp": "2025-11-04T13:15:39.000000Z"}, {"uuid": "f9a34e5c-ff44-47cf-9dc1-c68f40149924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59050", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lz3at5l4er2f", "content": "", "creation_timestamp": "2025-09-18T01:58:58.419399Z"}, {"uuid": "942db716-e13c-4954-abc2-cc3af76c7c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59052", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyjg6lud7o2c", "content": "", "creation_timestamp": "2025-09-10T23:46:55.809181Z"}, {"uuid": "2f45c0bd-57a2-4ce9-b81e-a8f63b434225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59052", "type": "seen", "source": "https://bsky.app/profile/cedric-exbrayat.bsky.social/post/3lykf2pg7ls2o", "content": "", "creation_timestamp": "2025-09-11T08:59:31.980938Z"}, {"uuid": "2edf584c-b248-48f6-8e27-38196c5ea55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59052", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3lykskrjtc22o", "content": "", "creation_timestamp": "2025-09-11T13:01:09.163862Z"}, {"uuid": "10075fcc-c84e-4ea9-8e4a-4f9ee8de0afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59053", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyltcj6gxj2c", "content": "", "creation_timestamp": "2025-09-11T22:47:07.323828Z"}, {"uuid": "a5a247b9-1748-4bc2-86ef-f150dfb9c83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyltljdr2m2f", "content": "", "creation_timestamp": "2025-09-11T22:52:08.036618Z"}, {"uuid": "d4b78603-d0c5-4f41-9c13-36f78645f753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-59053", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lym4j67b642d", "content": "", "creation_timestamp": "2025-09-12T01:31:53.025620Z"}, {"uuid": "8c0719f3-3a54-440b-9435-62dbf91f71a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59052", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lym6kvfkq32d", "content": "", "creation_timestamp": "2025-09-12T02:08:38.309898Z"}, {"uuid": "aefd51c1-6844-4acb-8e97-f4e6a5043155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lynj6o4qed2o", "content": "", "creation_timestamp": "2025-09-12T14:51:18.272580Z"}, {"uuid": "ec6c9777-7461-4c59-81c8-6bc2b4ff3a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59050", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyxst67prc2g", "content": "", "creation_timestamp": "2025-09-16T17:10:27.316513Z"}, {"uuid": "0d5b1246-9a38-4ef6-ae30-9b8a1f6d29f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59058", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lynkbriryk2c", "content": "", "creation_timestamp": "2025-09-12T15:10:56.554637Z"}, {"uuid": "1ebbdaa9-355b-4185-9e44-cfeceff90a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59050", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b516e91b5dfc4fe5b6cb120c7eebe71f", "content": "", "creation_timestamp": "2025-09-16T18:17:28.000000Z"}, {"uuid": "a95e2b32-c51f-4a8c-a914-2cbaa6eff4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59059", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg63y3f7lc2s", "content": "", "creation_timestamp": "2026-03-03T15:37:46.797740Z"}, {"uuid": "2fc33211-8739-4fc0-89db-0967f75d23d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59059", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mg44hu7ttx2j", "content": "", "creation_timestamp": "2026-03-02T20:41:15.724342Z"}, {"uuid": "fb2b0145-61dc-4c0b-ac49-e34830e84c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59059", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg5p6465rx24", "content": "", "creation_timestamp": "2026-03-03T11:48:29.082857Z"}, {"uuid": "d17c43da-c61f-4931-97a9-9a3727f156d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22opzydx2g", "content": "", "creation_timestamp": "2026-01-10T03:23:12.822731Z"}, {"uuid": "83245967-7a8c-4c5d-b342-ada0e6ff469d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22plsyrs22", "content": "", "creation_timestamp": "2026-01-10T03:23:42.561479Z"}, {"uuid": "21aef761-d8ce-4d44-8c37-effcc02a5c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22s2lcsu2p", "content": "", "creation_timestamp": "2026-01-10T03:25:05.016408Z"}, {"uuid": "ee9d2937-aecc-4a55-a84a-32cd6d98bfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3mca2asjlaa2w", "content": "", "creation_timestamp": "2026-01-12T12:31:23.732906Z"}, {"uuid": "fd1c5586-ecb5-4994-81f5-223c0cddd2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59059", "type": "published-proof-of-concept", "source": "Telegram/PYoXNzyZrYaKFbj-BEEJp3q5SxJy9E0IbGus7zdCQfw4dWs", "content": "", "creation_timestamp": "2026-04-03T15:00:07.000000Z"}, {"uuid": "7b92b714-2737-4aec-8daa-342c36a20153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwM_v_5SX0wjW8Bk7vM6o", "content": "", "creation_timestamp": "2026-01-10T04:02:20.000000Z"}, {"uuid": "d99c5d5a-88e2-4fa8-b2ef-45ae106a90c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "published-proof-of-concept", "source": "Telegram/jbT4DyaXAQWEEBg3Kh-8FLm9_wvzpJ1MV36Ko8B3bIBgXlo", "content": "", "creation_timestamp": "2026-01-13T15:00:06.000000Z"}, {"uuid": "8c968bc4-f6ff-4f6a-8f41-dc6311e255f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17811", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-5905\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-06-10T00:00:18.830Z\n\ud83d\udccf Modified: 2025-06-10T00:00:18.830Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.311678\n2. https://vuldb.com/?ctiid.311678\n3. https://vuldb.com/?submit.592265\n4. https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiRepeaterCfg-20bdf0aa118580bd8cd0da62d4d2e47f?pvs=73\n5. https://www.totolink.net/", "creation_timestamp": "2025-06-10T00:33:03.000000Z"}, {"uuid": "9b5b5c96-df06-4c9e-be91-759e412d5ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59054", "type": "seen", "source": "https://t.me/purp_sec/1253", "content": "\u270b \u0410 \u043c\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0438 LUKS2 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 confidential VM\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 LUKS2-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 (JSON metadata) \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 keyslots. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432, \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u044b\u0445 cipher_null \u0438 cipher_null-ecb \u0434\u043b\u044f \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430 \u0438\u043b\u0438 keyslot, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u0440\u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438/\u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 CVM \u0433\u043e\u0441\u0442\u044c \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0447\u0438\u0442\u0430\u0435\u0442 \u0438 \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0422\u043e \u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044f \u043b\u0438\u0448\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e/\u043e\u0431\u0440\u0430\u0437 (write-access) \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0445\u043e\u0441\u0442\u0430 \u0438\u043b\u0438 \u0432 supply-chain, \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u00ab\u043d\u0443\u043b\u0435\u0432\u043e\u0439\u00bb \u0448\u0438\u0444\u0440 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438/\u0438\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e-\u0430\u0442\u0430\u043a\u0438.\n\n\u0421\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438: CVE-2025-59054 \u0438 CVE-2025-58356. \u041e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in wild \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043d\u043e \u0441\u0430\u043c\u0430 \u043f\u043e \u0441\u0435\u0431\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430\u044f.\n\n\u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n\ud83d\udd34 \u0418\u0449\u0435\u043c CVM/\u043e\u0431\u0440\u0430\u0437, \u0433\u0434\u0435 \u0445\u043e\u0441\u0442 \u0438\u043b\u0438 supply-chain \u0438\u043c\u0435\u0435\u0442 write-\u0434\u043e\u0441\u0442\u0443\u043f \u043a LUKS2-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0443 (\u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432).\n\ud83d\udd34 \u041f\u0430\u0440\u0441\u0438\u043c LUKS2 JSON: \u043a\u0430\u043a\u0438\u0435 \u043f\u043e\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0438 cryptsetup open/mount \u0438 \u043a\u0430\u043a\u0438\u0435 cipher/keyslot-\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f.\n\ud83d\udd34 \u0424\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c JSON, \u0437\u0430\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u044b\u0435 cipher_null/nulled \u0440\u0435\u0436\u0438\u043c\u0443 \u0434\u043b\u044f \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430 \u0438\u043b\u0438 keyslot.\n\ud83d\udd34 \u041f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u043c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0432 \u0442\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u043e\u0431\u0440\u0430\u0437\u0430/\u0434\u0438\u0441\u043a\u0430, \u043e\u0442\u043a\u0443\u0434\u0430 \u0433\u043e\u0441\u0442\u044c \u0431\u0443\u0434\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435.\n\ud83d\udd34 \u041f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c cryptsetup open/mount \u0433\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0438 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0442\u043e\u043c\u043e\u043c \u043f\u043e\u0434 nulled cipher, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0447\u0442\u0435\u043d\u0438\u0435/\u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\ud83d\udd34 \u041f\u0440\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0438\u043b\u0438 \u0437\u0430\u043c\u0435\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u044b.\n\n\ud83d\udcac \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0437\u043e\u0440\u0435.\n\n@Lobrigate, \u0447\u0435\u043c \u043a\u0440\u043e\u0435\u0448\u044c? \ud83d\ude0f\n\n#red_team #LUKS2 #\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435", "creation_timestamp": "2026-08-14T16:00:05.305891Z"}, {"uuid": "ed4eb1c2-8d58-4caf-b932-a5db8d5c176b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59054", "type": "seen", "source": "https://t.me/purp_sec/1253", "content": "\u270b \u0410 \u043c\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0438 LUKS2 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 confidential VM\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 LUKS2-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 (JSON metadata) \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 keyslots. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432, \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u044b\u0445 cipher_null \u0438 cipher_null-ecb \u0434\u043b\u044f \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430 \u0438\u043b\u0438 keyslot, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u0440\u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438/\u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 CVM \u0433\u043e\u0441\u0442\u044c \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0447\u0438\u0442\u0430\u0435\u0442 \u0438 \u043f\u0438\u0448\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0422\u043e \u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044f \u043b\u0438\u0448\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e/\u043e\u0431\u0440\u0430\u0437 (write-access) \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0445\u043e\u0441\u0442\u0430 \u0438\u043b\u0438 \u0432 supply-chain, \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u00ab\u043d\u0443\u043b\u0435\u0432\u043e\u0439\u00bb \u0448\u0438\u0444\u0440 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438/\u0438\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e-\u0430\u0442\u0430\u043a\u0438.\n\n\u0421\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438: CVE-2025-59054 \u0438 CVE-2025-58356. \u041e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in wild \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043d\u043e \u0441\u0430\u043c\u0430 \u043f\u043e \u0441\u0435\u0431\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430\u044f.\n\n\u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n\ud83d\udd34 \u0418\u0449\u0435\u043c CVM/\u043e\u0431\u0440\u0430\u0437, \u0433\u0434\u0435 \u0445\u043e\u0441\u0442 \u0438\u043b\u0438 supply-chain \u0438\u043c\u0435\u0435\u0442 write-\u0434\u043e\u0441\u0442\u0443\u043f \u043a LUKS2-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0443 (\u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432).\n\ud83d\udd34 \u041f\u0430\u0440\u0441\u0438\u043c LUKS2 JSON: \u043a\u0430\u043a\u0438\u0435 \u043f\u043e\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0438 cryptsetup open/mount \u0438 \u043a\u0430\u043a\u0438\u0435 cipher/keyslot-\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0446\u0435\u043b\u0435\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f.\n\ud83d\udd34 \u0424\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c JSON, \u0437\u0430\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u044b\u0435 cipher_null/nulled \u0440\u0435\u0436\u0438\u043c\u0443 \u0434\u043b\u044f \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430 \u0438\u043b\u0438 keyslot.\n\ud83d\udd34 \u041f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u043c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0432 \u0442\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u043e\u0431\u0440\u0430\u0437\u0430/\u0434\u0438\u0441\u043a\u0430, \u043e\u0442\u043a\u0443\u0434\u0430 \u0433\u043e\u0441\u0442\u044c \u0431\u0443\u0434\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435.\n\ud83d\udd34 \u041f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c cryptsetup open/mount \u0433\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0438 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0442\u043e\u043c\u043e\u043c \u043f\u043e\u0434 nulled cipher, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0447\u0442\u0435\u043d\u0438\u0435/\u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\ud83d\udd34 \u041f\u0440\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0438\u043b\u0438 \u0437\u0430\u043c\u0435\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u044b.\n\n\ud83d\udcac \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0437\u043e\u0440\u0435.\n\n@Lobrigate, \u0447\u0435\u043c \u043a\u0440\u043e\u0435\u0448\u044c? \ud83d\ude0f\n\n#red_team #LUKS2 #\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435", "creation_timestamp": "2026-08-15T00:00:33.198022Z"}, {"uuid": "8514224d-38a2-4608-afbc-3ce4f77231b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mu3p4jzb7g2d", "content": "CVE-2025-59057 is trending. Hype score 7, currently #7 on cvemon.\n\nReact Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-59057", "creation_timestamp": "2026-08-27T20:34:59.756336Z"}]}