{"vulnerability": "GHSA-vwpq-wm8w-44wf", "sightings": [{"uuid": "abcd0619-6e08-4906-a0f2-a4ca74c3ecca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-vwpq-wm8w-44wf", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114774156067822141", "content": "", "creation_timestamp": "2025-06-30T20:17:18.112944Z"}, {"uuid": "da9a1b0b-18de-4795-b161-67ae4c3f3019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-vwpq-wm8w-44wf", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lstzj74xp22s", "content": "", "creation_timestamp": "2025-06-30T20:28:20.500877Z"}, {"uuid": "9149111c-94c2-4f54-9d7c-bb27ea58c053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-VWPQ-WM8W-44WF", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19403", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52571\n\ud83d\udd25 CVSS Score: 9.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patched in version 1.6.2. No known workarounds are available.\n\ud83d\udccf Published: 2025-06-24T20:07:24.328Z\n\ud83d\udccf Modified: 2025-06-24T20:07:24.328Z\n\ud83d\udd17 References:\n1. https://github.com/hikariatama/Hikka/security/advisories/GHSA-vwpq-wm8w-44wf\n2. https://github.com/hikariatama/Hikka/commit/9a0e4b1b387ef828c345c43d990421d5afcff5f6", "creation_timestamp": "2025-06-24T20:47:57.000000Z"}]}