{"vulnerability": "cve-2025-1067", "sightings": [{"uuid": "581739d1-e9ac-4f30-819a-af8dee6dd30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1067", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114065651086000181", "content": "", "creation_timestamp": "2025-02-25T17:15:09.927985Z"}, {"uuid": "4c1f888b-8ac5-475e-8182-1dcf7592e403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10678", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115407287061845643", "content": "", "creation_timestamp": "2025-10-20T15:50:50.919045Z"}, {"uuid": "6012d6b0-e675-46b2-ac99-ca20ba6ffce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10678", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3ng2imtsi2h", "content": "", "creation_timestamp": "2025-10-20T18:10:52.466786Z"}, {"uuid": "bf416557-09ce-4fc2-b6f3-2cce43dc0cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lz4nhitr2w2j", "content": "", "creation_timestamp": "2025-09-18T15:17:45.817434Z"}, {"uuid": "798994d5-0ec9-4180-aac0-965c70eef4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-10678", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m3oznivvhs2k", "content": "", "creation_timestamp": "2025-10-21T09:34:12.310444Z"}, {"uuid": "09c941ab-d295-44a9-a80f-815e6a503f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10673", "type": "seen", "source": "https://gist.github.com/Darkcrai86/cd987f8d990f50b7a0712f48c48ed881", "content": "", "creation_timestamp": "2025-09-18T16:29:19.000000Z"}, {"uuid": "3fadd21f-1495-47a6-a8ba-169d48fa7387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10670", "type": "seen", "source": "https://gist.github.com/Darkcrai86/9cae6ecdd2dd7ddba8160b1a581d0ef1", "content": "", "creation_timestamp": "2025-09-18T16:30:11.000000Z"}, {"uuid": "61fc6a66-a50c-438b-a9f8-dc7084f785b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1067", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "e28f75ff-56c5-4f49-a7ea-3b8776ab1c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1067", "type": "seen", "source": "https://t.me/cvedetector/18889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1067 - Esri ArcGIS Pro Untrusted Search Path Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1067 \nPublished : Feb. 25, 2025, 5:15 p.m. | 37\u00a0minutes ago \nDescription : There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4\u00a0that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS   \n  \nArcGIS Pro   \n  \n, the file could execute and run malicious commands under the context of the victim. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T19:03:23.000000Z"}, {"uuid": "0e2380ca-2e42-4b11-8d2a-bfadb715d910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1067", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5338", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1067\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4\u00a0that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS \n\nArcGIS Pro \n\n, the file could execute and run malicious commands under the context of the victim.\n\ud83d\udccf Published: 2025-02-25T16:26:03.580Z\n\ud83d\udccf Modified: 2025-02-25T16:46:09.739Z\n\ud83d\udd17 References:\n1. https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-pro-and-arcgis-allsource-patches-address-high-severity-vulnerabilities", "creation_timestamp": "2025-02-25T17:23:24.000000Z"}, {"uuid": "10cd180f-9b38-43a5-bc65-0a7fbda1cc72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10678", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2110", "content": "\u2728 Network Security \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 NetBird: \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 NetBird, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-13935 \u0438 CVE-2025-10678. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 0.57.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \"\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e\" \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e CWE-1392. \u041f\u0440\u043e\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f, \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043b\u043e\u0433\u0438\u043d\u044b \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-11 09:14 | Author: Vulner Queen\n\n#network_security #netbird\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-vpn-kliente-netbird-uchetnye-dannye-po-umolchaniyu-ugrozhayut-bezopasnosti-organizatsiy_16180", "creation_timestamp": "2026-09-09T05:00:13.803289Z"}, {"uuid": "00d6d49b-212e-400e-a675-7692c2d3d407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10678", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/2110", "content": "\u2728 Network Security \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 NetBird: \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 NetBird, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-13935 \u0438 CVE-2025-10678. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 0.57.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \"\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e\" \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e CWE-1392. \u041f\u0440\u043e\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f, \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043b\u043e\u0433\u0438\u043d\u044b \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-11 09:14 | Author: Vulner Queen\n\n#network_security #netbird\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-vpn-kliente-netbird-uchetnye-dannye-po-umolchaniyu-ugrozhayut-bezopasnosti-organizatsiy_16180", "creation_timestamp": "2026-09-10T00:00:36.761292Z"}]}