{"vulnerability": "CVE-2025-6891", "sightings": [{"uuid": "f5e8c377-3538-426d-88b3-23d2a0686c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6891", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lssl3i4jwq2b", "content": "", "creation_timestamp": "2025-06-30T06:37:27.769166Z"}, {"uuid": "7082a599-f78f-45f5-b9c5-0aa791a8c762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lssz56rxe32o", "content": "", "creation_timestamp": "2025-06-30T10:48:57.602153Z"}, {"uuid": "f265ae9d-11a4-4f62-ba47-4b40c40f9890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68916", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3upvdpi27", "content": "", "creation_timestamp": "2025-12-24T20:25:18.690950Z"}, {"uuid": "aae8bace-106b-42e3-9d83-a8220dc6ef5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68916", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3vias7y2m", "content": "", "creation_timestamp": "2025-12-24T20:25:43.941663Z"}, {"uuid": "c3e557a4-e5bb-4103-b3fc-1453d2e467bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68916", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mar6ve5pij2e", "content": "", "creation_timestamp": "2025-12-24T21:19:20.759793Z"}, {"uuid": "b17aa443-8027-4ead-b089-ab165918e22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68917", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3marcxu3zgp2r", "content": "", "creation_timestamp": "2025-12-24T22:32:19.299851Z"}, {"uuid": "9581cc68-cd5a-4bae-8d3f-20ef9e7dbac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mardasj2x22o", "content": "", "creation_timestamp": "2025-12-24T22:37:19.900659Z"}, {"uuid": "0cf8cc67-58e0-4f69-a231-303b635ff1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-68916", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115777638583519605", "content": "", "creation_timestamp": "2025-12-25T01:36:07.336386Z"}, {"uuid": "2568ae42-4922-48c1-8b66-72e4b9dde1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-68916", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3marnajgs5u2a", "content": "", "creation_timestamp": "2025-12-25T01:36:08.115694Z"}, {"uuid": "e500261c-d013-4c13-b57e-157852e78f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68916", "type": "published-proof-of-concept", "source": "Telegram/xx1KQurCV90br2SUGMUyGQUYIXhh9o44AfC5cxziW_PIUns", "content": "", "creation_timestamp": "2026-01-02T21:52:35.000000Z"}, {"uuid": "b0989300-1bfb-436a-98d1-9c9fff13d622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68916", "type": "published-proof-of-concept", "source": "Telegram/79M2PUWRnDZFfaBX3deh-SQz72WULa4jlHjBh-ox2wjl5as", "content": "", "creation_timestamp": "2026-01-02T21:53:02.000000Z"}, {"uuid": "7cd8c275-722b-4aa8-a74d-9a476546c531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6891", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19902", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6891\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /php_action/createUser.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-06-30T06:32:05.341Z\n\ud83d\udccf Modified: 2025-06-30T06:32:05.341Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.314370\n2. https://vuldb.com/?ctiid.314370\n3. https://vuldb.com/?submit.603882\n4. https://github.com/tangjihong1974/cve/issues/2\n5. https://code-projects.org/", "creation_timestamp": "2025-06-30T06:58:16.000000Z"}, {"uuid": "3a25b5e1-5d06-4303-80e0-7fad5f8a6106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68917", "type": "seen", "source": "https://t.me/bizone_channel/2808", "content": "\ud83d\udd3a \u041f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u043c \u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 OnlyShells \u0432 ONLYOFFICE\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 ONLYOFFICE Desktop Editors, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE:\n\n\ud83d\udd35CVE-2025-68917.\n\ud83d\udd35CVE-2025-68935.\n\ud83d\udd35CVE-2025-68936.\n\ud83d\udd35CVE-2026-41030.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 CVE-2023-2033.\n\n\u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2023-2033, CVE-2025-68917, CVE-2025-68935 \u0438 CVE-2025-68936 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0435\u0441\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0444\u0438\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\u00a0\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 Windows, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-41030.\n\n\u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ONLYOFFICE Desktop Editors \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 9.3.0.\n\n\ud83d\udcac \u041c\u044b \u0432 MAX", "creation_timestamp": "2026-09-03T12:00:06.138538Z"}, {"uuid": "0a1913f3-a72d-4aeb-a003-eb27026fef6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68917", "type": "seen", "source": "https://t.me/bizone_channel/2808", "content": "\ud83d\udd3a \u041f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u043c \u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 OnlyShells \u0432 ONLYOFFICE\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 ONLYOFFICE Desktop Editors, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE:\n\n\ud83d\udd35CVE-2025-68917.\n\ud83d\udd35CVE-2025-68935.\n\ud83d\udd35CVE-2025-68936.\n\ud83d\udd35CVE-2026-41030.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 CVE-2023-2033.\n\n\u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2023-2033, CVE-2025-68917, CVE-2025-68935 \u0438 CVE-2025-68936 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0435\u0441\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0444\u0438\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\u00a0\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 Windows, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-41030.\n\n\u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ONLYOFFICE Desktop Editors \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 9.3.0.\n\n\ud83d\udcac \u041c\u044b \u0432 MAX", "creation_timestamp": "2026-09-04T00:00:51.089043Z"}]}