{"vulnerability": "cve-2025-49844", "sightings": [{"uuid": "0087e863-cb8e-45e6-af89-e5fde5d93d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3booids2l2b", "content": "", "creation_timestamp": "2025-10-16T02:13:16.199428Z"}, {"uuid": "69d95bdc-f9ff-492e-a317-a01e19c6ecdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m2pqmooiqs2q", "content": "", "creation_timestamp": "2025-10-08T23:00:08.182535Z"}, {"uuid": "1f4232a9-0310-43a5-838e-969bba619c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3m2pkbgihm5z2", "content": "", "creation_timestamp": "2025-10-08T21:06:44.369448Z"}, {"uuid": "8ff24f92-f37f-4a04-bdae-90d4f957ba61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4j26r55ss2i", "content": "", "creation_timestamp": "2025-10-31T17:53:03.670796Z"}, {"uuid": "6a915eed-d470-40b9-9d1e-63c8eaeeb5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3m2ln45sjkm2g", "content": "", "creation_timestamp": "2025-10-07T07:46:32.763604Z"}, {"uuid": "a4cf90fb-702c-48d9-a37f-f088ac02025e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3m2lq7ep6bi2p", "content": "", "creation_timestamp": "2025-10-07T08:42:03.374455Z"}, {"uuid": "5705c52b-e040-475f-8fd8-8ca04eef6ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3rvlohaws2s", "content": "", "creation_timestamp": "2025-10-22T12:59:35.158911Z"}, {"uuid": "b227feaf-aa72-4072-a680-276f0e799bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3m2lt2k2ft42x", "content": "", "creation_timestamp": "2025-10-07T09:33:01.853447Z"}, {"uuid": "8c98a715-3e1f-411c-a718-087a4d6fd7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3rwx2um722s", "content": "", "creation_timestamp": "2025-10-22T13:23:52.534666Z"}, {"uuid": "69025808-7671-423b-b91b-d6519e31b444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/dragstersystems.bsky.social/post/3m2q3rcwg6k2z", "content": "", "creation_timestamp": "2025-10-09T02:19:37.921404Z"}, {"uuid": "e5d42d5e-32c8-4fb8-ac03-eef727231ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m2lukzabf527", "content": "", "creation_timestamp": "2025-10-07T10:00:08.067903Z"}, {"uuid": "11f6bb4f-f76b-4279-a0ad-a2a2dd6b2e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m2qgmsoh6k2z", "content": "", "creation_timestamp": "2025-10-09T05:33:54.243828Z"}, {"uuid": "0aa0f24b-06cc-4a3a-a33d-23c679192aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m2luoth7m22z", "content": "", "creation_timestamp": "2025-10-07T10:02:18.448795Z"}, {"uuid": "3fe79a3c-3f8e-4229-af27-c9ba837aeae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m4z5how5hy2k", "content": "", "creation_timestamp": "2025-11-07T03:34:19.780406Z"}, {"uuid": "775c7cb5-72cc-44e2-9112-a811a853b571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://thehackernews.com/2025/10/13-year-redis-flaw-exposed-cvss-100.html", "content": "", "creation_timestamp": "2025-10-07T06:33:00.000000Z"}, {"uuid": "f4c79ee4-551a-4086-90c2-7e7247852b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hnfeed.bsky.social/post/3m2luqclgbj2f", "content": "", "creation_timestamp": "2025-10-07T10:03:05.082926Z"}, {"uuid": "7787629f-1f30-48eb-b127-aaa594a5e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3m4z5htor2ga2", "content": "", "creation_timestamp": "2025-11-07T03:34:31.008493Z"}, {"uuid": "57b8b774-599c-4c39-a7ec-fe418a2b4aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3m2lwhqe5nq26", "content": "", "creation_timestamp": "2025-10-07T10:34:05.577970Z"}, {"uuid": "4098fe79-8b33-4784-be6f-584cec6f4d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3m2lzm5itgd25", "content": "", "creation_timestamp": "2025-10-07T11:30:14.435305Z"}, {"uuid": "42478b49-669a-4e21-a44a-ca5b09d32bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3m2lv376c432z", "content": "", "creation_timestamp": "2025-10-07T10:09:11.070565Z"}, {"uuid": "e78ebbfb-3a5a-499d-b8de-a47b1ddb4041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3m2lxwx7lux2y", "content": "", "creation_timestamp": "2025-10-07T11:00:29.937857Z"}, {"uuid": "957f255c-7bb1-4e3c-9a68-b41256c6c3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3m2lwhq7fpp27", "content": "", "creation_timestamp": "2025-10-07T10:34:06.349943Z"}, {"uuid": "c9aa1d26-2c18-44e5-a337-ce586fcc8157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "e92402ac-b04a-4e73-ad0b-3c8344ca18bd", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://github.com/dwisiswant0/CVE-2025-49844", "content": "", "creation_timestamp": "2025-10-07T11:18:59.733653Z"}, {"uuid": "f55dcba3-4f16-4151-9d4a-1b4278f16d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3m2lztdjdv22i", "content": "", "creation_timestamp": "2025-10-07T11:34:16.106618Z"}, {"uuid": "1f9acdcf-72e5-462e-9228-1de0c2a5275d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/mm-hacker-news.bsky.social/post/3m2lwjpykbp23", "content": "", "creation_timestamp": "2025-10-07T10:35:11.896793Z"}, {"uuid": "9dd442b9-01d3-4ac6-85b4-7f2c74ef3377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3m2lwshuz2d22", "content": "", "creation_timestamp": "2025-10-07T10:40:05.725852Z"}, {"uuid": "56abca56-60a3-486a-96ee-3044442ee8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3m2lzycakyz2s", "content": "", "creation_timestamp": "2025-10-07T11:37:02.520899Z"}, {"uuid": "9b254e85-4071-492a-8c70-e87ce07a0469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3m2lwzm4tbe25", "content": "", "creation_timestamp": "2025-10-07T10:44:04.992220Z"}, {"uuid": "9552e424-84ad-4725-85c9-a43dcbd5fd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3m2m47bbt4t2e", "content": "", "creation_timestamp": "2025-10-07T12:16:43.549496Z"}, {"uuid": "0c7cdfc7-1f78-404a-97a2-8f50425afaaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/top10vpn.bsky.social/post/3m2qn5vxcbt2c", "content": "", "creation_timestamp": "2025-10-09T07:30:51.180657Z"}, {"uuid": "779a3e83-b615-4dad-9844-5f172f6bde7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/new23d.bsky.social/post/3m2m54fr7e22y", "content": "", "creation_timestamp": "2025-10-07T12:33:09.000414Z"}, {"uuid": "c9d99ebb-adfc-4406-affb-c042537ef949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/new23d.bsky.social/post/3m2m54guib22y", "content": "", "creation_timestamp": "2025-10-07T12:33:09.559852Z"}, {"uuid": "a78fee1c-81f3-4da9-b4e7-766689488575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/new23d.bsky.social/post/3m2m54gujac2y", "content": "", "creation_timestamp": "2025-10-07T12:33:10.084202Z"}, {"uuid": "99b54b5c-1ff3-460e-9ddc-3946ac5d2191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m55havmsuf2k", "content": "", "creation_timestamp": "2025-11-08T20:40:08.626891Z"}, {"uuid": "288303c3-e58a-497d-83e1-b2eb3797db1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3m2m7hv7qyn2g", "content": "", "creation_timestamp": "2025-10-07T13:15:14.570952Z"}, {"uuid": "5e104d4b-efa2-4c62-a01c-d845a59baaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/rcinghio.bsky.social/post/3m4gbfa5gv22c", "content": "", "creation_timestamp": "2025-10-30T15:23:47.895879Z"}, {"uuid": "c2c369fd-d453-4b54-b6b7-d009fc85a6ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3m2mat2fwwk2w", "content": "", "creation_timestamp": "2025-10-07T13:39:35.073618Z"}, {"uuid": "301fc0ae-4426-477f-8ee5-926f55c61e3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3m2mb36fpe22e", "content": "", "creation_timestamp": "2025-10-07T13:43:58.902127Z"}, {"uuid": "bb5738e1-9024-4716-8a5b-3bce61b0cb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3m2mb6ljt7422", "content": "", "creation_timestamp": "2025-10-07T13:45:50.437935Z"}, {"uuid": "4afbec55-ecc7-4b6b-b68b-6560c2d85fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m2mduihsm32j", "content": "", "creation_timestamp": "2025-10-07T14:33:52.746073Z"}, {"uuid": "8b789757-052a-4142-bf8b-657c506e2c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3m2r2nlh6z42p", "content": "", "creation_timestamp": "2025-10-09T11:32:15.089257Z"}, {"uuid": "726ef530-0665-4592-87c9-3ef6234b1259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://gist.github.com/alexdolbun/928740699d666da6e0da70f1727746fb", "content": "", "creation_timestamp": "2025-10-28T21:01:52.000000Z"}, {"uuid": "80834630-72b3-4252-9d60-1575779a40dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3m2r2pexuhp24", "content": "", "creation_timestamp": "2025-10-09T11:33:15.542190Z"}, {"uuid": "e9ead083-e725-4847-b1d6-b0dc7ae5df44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m2r55osyxx2j", "content": "", "creation_timestamp": "2025-10-09T12:17:03.088224Z"}, {"uuid": "69d032fe-0dd9-475d-aac3-e46bb2db422c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115453786693082910", "content": "", "creation_timestamp": "2025-10-28T20:56:18.762567Z"}, {"uuid": "05d56d23-9b96-4115-a9f5-582096f2e159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2mmmluq4y2e", "content": "", "creation_timestamp": "2025-10-07T17:10:31.042886Z"}, {"uuid": "9705d506-7727-4e0f-bafe-ff4160d5d383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m2r55vu6wl23", "content": "", "creation_timestamp": "2025-10-09T12:17:10.201515Z"}, {"uuid": "756751f3-94ce-4ec5-a5df-f003cd78fd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3m2r562zlmzj2", "content": "", "creation_timestamp": "2025-10-09T12:17:33.774853Z"}, {"uuid": "ace949d8-1130-40b4-86f2-4e4b0fe38ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m2nfnnivem2f", "content": "", "creation_timestamp": "2025-10-08T00:38:30.073669Z"}, {"uuid": "1a33003a-7ffa-47e2-a984-a1006f3075a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b01d789c599ef89f9758b55d1a92a2f8", "content": "", "creation_timestamp": "2025-10-07T20:34:36.000000Z"}, {"uuid": "7c4cd243-96a0-4ac4-991b-83def198db9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3m2myanuqgo2t", "content": "", "creation_timestamp": "2025-10-07T20:38:34.903030Z"}, {"uuid": "89f31ca5-7c1a-4c86-a031-43c8aebd8095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m2mydgqd3b2n", "content": "", "creation_timestamp": "2025-10-07T20:40:08.373010Z"}, {"uuid": "ec9fece2-3346-4579-a175-8480d0e0e8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3m2o2lpgwyg2c", "content": "", "creation_timestamp": "2025-10-08T06:53:14.088751Z"}, {"uuid": "db78f69b-aa41-4b27-959c-39d520b9a4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/jbriault.fr/post/3m37uf335a22g", "content": "", "creation_timestamp": "2025-10-15T08:50:06.358217Z"}, {"uuid": "c5f0219b-2050-45f4-aee9-90e2adecb1b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q4/17", "content": "", "creation_timestamp": "2025-10-07T19:38:33.000000Z"}, {"uuid": "62c63e8e-9598-42a2-8be0-51ad039cdaa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m2ngxvmm7s2x", "content": "", "creation_timestamp": "2025-10-08T01:02:09.624529Z"}, {"uuid": "e2f3f479-46c6-4465-9991-de0baa138311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3m2k2embvs52j", "content": "", "creation_timestamp": "2025-10-06T16:38:36.437527Z"}, {"uuid": "2e7b2d5d-486a-467f-a90c-a84895c70698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/marko.social/post/3m2k3dsmzgs2n", "content": "", "creation_timestamp": "2025-10-06T16:56:06.035094Z"}, {"uuid": "1fcfd89d-3e89-423e-b9be-312eee2be5ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2n5fhla6r27", "content": "", "creation_timestamp": "2025-10-07T22:10:44.888446Z"}, {"uuid": "dde95522-a741-49d2-b575-268defb09198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/ctin.infosec.exchange.ap.brid.gy/post/3m2n763dabax2", "content": "", "creation_timestamp": "2025-10-07T22:43:17.364287Z"}, {"uuid": "51e8a6d3-db74-49c4-b4d1-d0761a4f9234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/high-risk-cve.bsky.social/post/3m2epov6pmx2d", "content": "", "creation_timestamp": "2025-10-04T13:44:10.666898Z"}, {"uuid": "163a88bf-4578-494e-9763-92a2baa3b03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3m2jzep5vkj25", "content": "", "creation_timestamp": "2025-10-06T16:20:45.208821Z"}, {"uuid": "464c677d-d737-4a3e-b358-186a529e1bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115328180462649206", "content": "", "creation_timestamp": "2025-10-06T16:32:59.794552Z"}, {"uuid": "2b72bead-70c7-4f4e-a1c6-21722f06a906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m2o7x3drf22a", "content": "", "creation_timestamp": "2025-10-08T08:29:03.209937Z"}, {"uuid": "6d60ff3e-0c08-447d-98e0-6b86c2c35e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m2nv5rmaoc2h", "content": "", "creation_timestamp": "2025-10-08T05:16:01.001510Z"}, {"uuid": "38eeb96e-3bc8-479a-bffd-df9d4504874d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3m4i7v36wmk2x", "content": "", "creation_timestamp": "2025-10-31T10:02:27.619363Z"}, {"uuid": "5ea9c73e-fc8f-4519-bf7d-dd9116bb2285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3m4i7wgabss2x", "content": "", "creation_timestamp": "2025-10-31T10:03:08.975352Z"}, {"uuid": "de2cbbbf-b48d-4a20-93f6-db5f6b4580c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2kfwxpcec24", "content": "", "creation_timestamp": "2025-10-06T20:05:45.189800Z"}, {"uuid": "07129e8d-c6db-481d-b940-fa20628a08a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m2oawq6mts2a", "content": "", "creation_timestamp": "2025-10-08T08:46:57.937758Z"}, {"uuid": "6b35a8cd-f70b-4d51-8aed-018637f5ae79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/fido-node.mastodon.social.ap.brid.gy/post/3m2yxl7l3l4q2", "content": "", "creation_timestamp": "2025-10-12T14:58:53.517883Z"}, {"uuid": "473cbf8c-7aa1-439b-9f09-118983774cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/c0rvid0.eu/post/3m2zeka4sck2l", "content": "", "creation_timestamp": "2025-10-12T18:50:40.066698Z"}, {"uuid": "0656ac9b-6e25-43de-af6f-19388f42b3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115352928152858946", "content": "", "creation_timestamp": "2025-10-11T01:26:40.973661Z"}, {"uuid": "c7345189-3f5c-4ee4-94b2-60f62d4576b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/r3pek.mastodon.r3pek.org.ap.brid.gy/post/3m2octrm3fhc2", "content": "", "creation_timestamp": "2025-10-08T09:21:34.842205Z"}, {"uuid": "3e8a57fc-d5f6-4656-9983-62af2e670822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-933/", "content": "", "creation_timestamp": "2025-10-06T03:00:00.000000Z"}, {"uuid": "a6bf35f9-38f4-444c-a619-cbcda84fceed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/c0rvid0.eu/post/3m2zekbfznc2l", "content": "", "creation_timestamp": "2025-10-12T18:50:40.568305Z"}, {"uuid": "fb569f77-ca0b-4313-881d-35839abc5459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://infosec.exchange/users/TomSellers/statuses/115329664385146905", "content": "", "creation_timestamp": "2025-10-06T22:50:37.775730Z"}, {"uuid": "c743b5de-08e6-48ff-9efe-f36e7ee6cc07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115329314607068906", "content": "", "creation_timestamp": "2025-10-06T21:21:25.438850Z"}, {"uuid": "12b58a1a-f71f-4640-b5cd-e906338a4e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2oez7jl6s2j", "content": "", "creation_timestamp": "2025-10-08T09:59:43.433258Z"}, {"uuid": "ff6c2312-d826-45ee-8ef5-83c919886489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m2ocrrhuok2n", "content": "", "creation_timestamp": "2025-10-08T09:19:55.755601Z"}, {"uuid": "b0dad7cb-c4a7-44d1-9956-952f7682d915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/u24usa.bsky.social/post/3m2ktekhqjq2e", "content": "", "creation_timestamp": "2025-10-07T00:05:57.422005Z"}, {"uuid": "12819269-68ac-4d91-ba63-29166488edcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw3jpvg2g", "content": "", "creation_timestamp": "2025-10-12T21:02:39.146142Z"}, {"uuid": "84acf399-2daf-49bd-8f36-8e8b5781aa9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3m2krow4tb32t", "content": "", "creation_timestamp": "2025-10-06T23:35:57.704922Z"}, {"uuid": "fa476796-4aee-4e59-9c6a-ac441540321e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/justbearcause.bsky.social/post/3m2zkjqv4vc2k", "content": "", "creation_timestamp": "2025-10-12T20:37:43.735461Z"}, {"uuid": "383436e7-e10f-4ff0-b2b7-72091a44507f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3m2kt3nzw3s2k", "content": "", "creation_timestamp": "2025-10-07T00:00:59.757016Z"}, {"uuid": "927f7934-e9ee-45df-996c-4168438ba9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3m2l6j6qvgw2u", "content": "", "creation_timestamp": "2025-10-07T03:25:24.624106Z"}, {"uuid": "e5e78bb8-6790-4c50-82af-c266b9d26e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3m2ku7il6kz2o", "content": "", "creation_timestamp": "2025-10-07T00:21:01.361098Z"}, {"uuid": "f52047b1-0302-4285-b47c-c6baaa8e0946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3m2ku7ydxvx2o", "content": "", "creation_timestamp": "2025-10-07T00:21:17.779869Z"}, {"uuid": "10a63794-9d06-4f36-a3b7-c31ee2c8a37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3m2kw4w6rlb2j", "content": "", "creation_timestamp": "2025-10-07T00:55:22.920182Z"}, {"uuid": "7740e674-857d-47cb-9b33-348382b9be91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m2ljfcwnkw2s", "content": "", "creation_timestamp": "2025-10-07T06:40:05.515970Z"}, {"uuid": "4b8a3968-d65c-4a09-81f7-df4c6c6c0587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3m2lh7db6gj2z", "content": "", "creation_timestamp": "2025-10-07T06:00:58.808523Z"}, {"uuid": "4078a13e-5f02-4069-8da8-9dc9383a32fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2ojbrsqgdk2", "content": "", "creation_timestamp": "2025-10-08T11:16:21.888963Z"}, {"uuid": "c574a3f8-4102-4c35-950d-25bb17b9216a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3m2ok6pxnfm2d", "content": "", "creation_timestamp": "2025-10-08T11:32:17.193312Z"}, {"uuid": "510fe862-f2e4-43f2-b861-e6744819f24b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-23e88879-ea81e241262b5a61", "content": "", "creation_timestamp": "2025-10-07T06:46:37.415406Z"}, {"uuid": "7776009f-852d-4f49-b925-f1b60f9e3e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m3uyqdzdxj2l", "content": "", "creation_timestamp": "2025-10-23T18:33:50.992095Z"}, {"uuid": "12fc20e2-78cc-4476-b8c3-f6bd8ec59d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2okdt4ljzv2", "content": "", "creation_timestamp": "2025-10-08T11:35:21.331958Z"}, {"uuid": "8398627d-b466-4edf-80c2-9c0a2835bc25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m2owcegagc2z", "content": "", "creation_timestamp": "2025-10-08T15:09:04.758969Z"}, {"uuid": "bbec861b-fce4-470c-965e-fadc1dc0c4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3m2pakhhlxc2s", "content": "", "creation_timestamp": "2025-10-08T18:12:38.444478Z"}, {"uuid": "5f54e82e-6855-4ef3-ad83-364e70362f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2iyt3lefd2e", "content": "", "creation_timestamp": "2025-10-06T06:38:14.793612Z"}, {"uuid": "b000cbd0-e9fc-4734-b4e5-42016cc5d8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3m2ovxculogq2", "content": "", "creation_timestamp": "2025-10-08T15:03:19.465283Z"}, {"uuid": "8dda3389-bca3-4956-86c4-f675c4221dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m3v43oz6df2n", "content": "", "creation_timestamp": "2025-10-23T19:33:52.766197Z"}, {"uuid": "8e2a95bb-e0e5-442b-9e85-aa437d7710d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/seravo.com/post/3m334sbhyrd2o", "content": "", "creation_timestamp": "2025-10-13T11:37:17.800577Z"}, {"uuid": "2b0990c3-4589-4678-8a08-efdb34c6b4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0304", "content": "", "creation_timestamp": "2025-10-08T09:43:37.000000Z"}, {"uuid": "58670f6c-4a65-4332-bc9b-2f104c044c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49844", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m2oq7llyrx25", "content": "", "creation_timestamp": "2025-10-08T13:20:08.871696Z"}, {"uuid": "ab4a4dfa-0b7f-45cc-a7ac-50cefe7a43c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/clever-cloud.com/post/3m2osl342tc2l", "content": "", "creation_timestamp": "2025-10-08T14:02:22.841591Z"}, {"uuid": "5e4245db-2859-4148-a6bb-38a88cdcb377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3m2pakhhlxe2s", "content": "", "creation_timestamp": "2025-10-08T18:12:39.493709Z"}, {"uuid": "7183b621-334e-4751-ba4e-46ac6839e465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3m2pakhhlxd2s", "content": "", "creation_timestamp": "2025-10-08T18:12:38.959134Z"}, {"uuid": "8387674b-24a8-495c-b462-d807e0da30b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115893896382935754", "content": "", "creation_timestamp": "2026-01-14T14:21:59.138168Z"}, {"uuid": "171e6702-b1ce-4082-8bc8-c30a5ae39e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3m2pakhhh322s", "content": "", "creation_timestamp": "2025-10-08T18:12:37.941581Z"}, {"uuid": "e86a0a07-8591-4b7f-9afe-87042d63f4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42qqcm4r22n", "content": "", "creation_timestamp": "2025-10-26T01:26:41.005580Z"}, {"uuid": "31b96efb-0998-4fe3-93f8-456c0e44440e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1fdfda19-2805a58255f192e9", "content": "", "creation_timestamp": "2026-03-06T10:29:27.214352Z"}, {"uuid": "f973efab-bc80-42b8-b292-f08a78cce56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mar5xzdlji2l", "content": "", "creation_timestamp": "2025-12-24T21:02:58.068515Z"}, {"uuid": "54afbeff-d665-427b-bc9a-c5fe83694587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3mariowrqskke", "content": "", "creation_timestamp": "2025-12-25T00:14:43.010052Z"}, {"uuid": "4192ca4c-5f1f-4dcb-b820-51dfbbbfce77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115339928671064662", "content": "", "creation_timestamp": "2025-10-08T18:20:43.180648Z"}, {"uuid": "8461d736-eb14-4a14-b6df-ba6e60d5ce13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infoq.com/post/3m5bovqwa322f", "content": "", "creation_timestamp": "2025-11-10T13:07:48.524956Z"}, {"uuid": "ced95cdf-6f37-4bfb-8bef-755f28e42dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3maj47tne2g2r", "content": "", "creation_timestamp": "2025-12-21T16:10:13.379660Z"}, {"uuid": "8de97897-4120-4aaf-bbb4-fd28085159ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3majdzt2vla2n", "content": "", "creation_timestamp": "2025-12-21T18:30:01.521608Z"}, {"uuid": "033d3fc1-24b1-4721-95b4-85aab66aa399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/62320", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/VeilVulp/rscscan\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-12-09T21:35:42.000000Z"}, {"uuid": "9b476bd3-8d67-43fc-ba3f-448b32e0a4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "d5f17103-9a13-4272-9def-957ad35e8a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-083-03", "content": "", "creation_timestamp": "2026-03-24T11:00:00.000000Z"}, {"uuid": "b2e4ea29-53a4-4952-8591-9590428b779c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/62365", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/Pantheon-Security/medusa\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-12-10T08:23:41.000000Z"}, {"uuid": "aa9e2f89-3ce7-4efd-b195-b5afa5d8a021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjmuwtjmol24", "content": "", "creation_timestamp": "2026-04-16T16:57:20.159543Z"}, {"uuid": "86c8c373-e5a2-4f16-ba10-b57194119f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://gist.github.com/paulo-raca/8a16df3664952c9b185211298075c6ab", "content": "", "creation_timestamp": "2026-04-10T17:08:55.000000Z"}, {"uuid": "acf92c11-36ee-46f7-9002-8661e4611d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjmyl53ovl2h", "content": "", "creation_timestamp": "2026-04-16T18:02:27.612380Z"}, {"uuid": "cb618ed8-2868-4c88-be0e-d0c8391c1d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjn7kppwm42v", "content": "", "creation_timestamp": "2026-04-16T20:08:04.296560Z"}, {"uuid": "e2dd5ae7-ed62-47b2-aebe-8dcc21205310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjn7totark23", "content": "", "creation_timestamp": "2026-04-16T20:13:15.533778Z"}, {"uuid": "2e145821-8b21-4a07-b507-a65aaafe63a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjnowwxgb225", "content": "", "creation_timestamp": "2026-04-17T00:42:39.624392Z"}, {"uuid": "5960fcbc-dbc6-419c-a313-122a4452e291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/cgjkjeFvaYTYY2Hy-tHxrmfy7h97b4Y-DZ7h_Fd2T5OlKEk", "content": "", "creation_timestamp": "2025-10-07T09:00:04.000000Z"}, {"uuid": "8729cd20-75f5-4ae1-8fde-eb667d025735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "exploited", "source": "https://t.me/notlukatsky/6864", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 + PoC\n#CVE #Redis #Oracle #\u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430\n\n\u27a1\ufe0fRedis \u2014 RediShell (CVE-2025-49844, CVSS 10.0)\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 use-after-free \u0432 Lua-\u0434\u0432\u0438\u0436\u043a\u0435 Redis, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 13 \u043b\u0435\u0442. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c Lua-\u0441\u043a\u0440\u0438\u043f\u0442\u044b (EVAL/EVALSHA) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e Lua VM \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 redis-server. \u0412 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 330\u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Redis, \u0438\u0437 \u043d\u0438\u0445 60\u043a \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u27a1\ufe0fVMware Aria Operations / VMware Tools (CVE-2025-41244, CVSS 7.8) \n\nLPE \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u041e\u0421. \u041f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c VMware Tools \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 Aria Operations \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c Service Discovery Management Pack (SDMP) \u043c\u043e\u0436\u043d\u043e \u0434\u0430\u0436\u0435 \u0441 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043e root/Administrator. \u0417\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in-the-wild.\n\n\u27a1\ufe0fOpenSSH \u2014 ProxyCommand newline injection (CVE-2025-61984, CVSS 7.8)\n\nCommand injection \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 ProxyCommand. \u0415\u0441\u043b\u0438 \u0432 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438/\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b, \u0438\u0442\u043e\u0433\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0434\u043b\u044f ProxyCommand \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 shell-\u043e\u043c \u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0422\u043e \u0435\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u044b.\n\n\u27a1\ufe0f Zimbra Collaboration \u2014 Classic Web Client XSS \u0447\u0435\u0440\u0435\u0437 .ICS (CVE-2025-27915, CVSS 6.1). \n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0441\u0430\u043d\u0430\u0446\u0438\u044f HTML \u0432\u043d\u0443\u0442\u0440\u0438 iCalendar (.ICS). \u0412\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435 HTML/JS (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ) \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0432 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0443\u043a\u0438/\u0442\u043e\u043a\u0435\u043d\u044b, \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e\u0447\u0442\u0443.\n\n\u27a1\ufe0f3DEXPERIENCE (CVE-2025-9976, CVSS 9.0)\n\n\u0418\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f PLM-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043e\u0442 Dassault Systemes, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0430\u044f CAD, CAE, CAM \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0435\u0434\u0438\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0411\u0430\u0433 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 OS command injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Station Launcher. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0432\u044b\u0437\u043e\u0432 \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0411\u0435\u0437 PoC, \u0437\u0430\u0442\u043e \u0441\u0432\u0435\u0436\u0430\u043a.\n\nP.s. \u043a\u0430\u043a \u0432\u0430\u043c \u0442\u0430\u043a\u043e\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u043f\u043e\u0441\u0442\u043e\u0432? \ud83d\ude2c - \u0435\u0441\u043b\u0438 \u043a\u0430\u0439\u0444, \ud83d\udd25 - \u0435\u0441\u043b\u0438 \u043d\u0430\u0434\u043e \u0435\u0449\u0435 \u0434\u043e\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c. \u0422\u0430\u043a\u043e\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e \u043f\u043d\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK | \u2764\ufe0f \u041c\u0435\u0440\u0447", "creation_timestamp": "2025-10-15T14:56:30.000000Z"}, {"uuid": "b24621ea-e01a-42ff-9d47-a7ecd3eb52a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "Telegram/1u2WvjPVPq5vHXJvEp2IpfoBzs7ARxmTovOu0cA6_LUWujUl5A", "content": "", "creation_timestamp": "2025-10-16T09:47:57.000000Z"}, {"uuid": "c123cbb6-1db9-4481-bcbb-b1e23970b4cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/cKure/15489", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, with CVSS score of 10.\n\nWiz Research discovers vulnerability stemming from 13-year-old bug present in all Redis versions, used in 75% of cloud environments.\n\nhttps://www.wiz.io/blog/wiz-research-redis-rce-cve-2025-49844", "creation_timestamp": "2025-10-07T05:56:47.000000Z"}, {"uuid": "266d31e0-1cb7-4b8e-a7ce-8fbf09c86eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60114", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd0d Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.\nURL\uff1ahttps://github.com/abrewer251/CVE-2025-62215_Windows_Kernel_PE\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-18T16:36:27.000000Z"}, {"uuid": "37c358fa-b9d8-4c81-8b7e-7a2dbf073bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/3SEzWsXdf8TByVUaB-OgVj6bLDcmIrVBMSBDXfTff8j0U4c", "content": "", "creation_timestamp": "2025-10-29T21:00:05.000000Z"}, {"uuid": "5e5bc753-d536-448d-842f-b1c40a4611e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/LpWnWdO-d-KFD5Eo7ih0GDeS8ihqeBrhVafYzkY74gccSdU", "content": "", "creation_timestamp": "2025-10-30T21:00:05.000000Z"}, {"uuid": "3e0c1743-d990-417a-a336-8653b782b329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60021", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/verylazytech/CVE-2025-64446\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-17T18:32:05.000000Z"}, {"uuid": "c0657f4e-c9f7-4e9e-97da-616a7ebf32da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/0aYsVfE47S9cjB2tUjx1ZYqoPlygrGixITgot_asmZKobHY", "content": "", "creation_timestamp": "2025-10-09T09:00:05.000000Z"}, {"uuid": "083f1006-dfa8-4a5a-98b1-f9de41a05d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/57260", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/AdityaBhatt3010/CVE-2025-59287-When-your-patch-server-becomes-the-attack-vector\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-28T07:17:04.000000Z"}, {"uuid": "ca973bef-8ad5-4a7b-bd42-52d72ff480ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://t.me/GithubRedTeam/57255", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/mrk336/Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-28T06:25:08.000000Z"}, {"uuid": "a1e31ffc-41d3-45b5-8426-213b5e7321bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/YLEnjs44xRWBNB7RYvPAtXpmXWLj4faBQnegou_jhZ3iiQ", "content": "", "creation_timestamp": "2025-11-12T04:08:07.000000Z"}, {"uuid": "7bc1c67a-8061-4678-b228-20757fc9647e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/56966", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd0d Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.\nURL\uff1ahttps://github.com/ksnnd32/redis_exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-26T03:50:46.000000Z"}, {"uuid": "4d7cf7be-9b03-4073-a651-d92a92e71c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/EO_oQLYXFZJHpYU3zijqCehoUCKssCsFVC4BHatuitA81Fg", "content": "", "creation_timestamp": "2025-10-08T09:00:05.000000Z"}, {"uuid": "d4db7f7f-e798-44fe-8845-3d2e240069d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/57669", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof-of-concept for CVE-2025-49844\nURL\uff1ahttps://github.com/saneki/cve-2025-49844\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-31T06:03:53.000000Z"}, {"uuid": "bf488669-535f-4384-b704-b05e6fd99556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/57548", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-49844\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-49844\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-30T09:05:28.000000Z"}, {"uuid": "f604d4cc-96e2-4e88-8448-1db4dcbdb9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/54610", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aMinimal Redis honeypot detecting RediShell (CVE-2025-49844) exploits.\nURL\uff1ahttps://github.com/srozb/reditrap\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-08T07:18:06.000000Z"}, {"uuid": "b2b259e7-3d49-4928-9a81-87873719bfac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/2epeKHWoTq7cD-iglaMlHOuM_qxTbrfeLRssQMhPe9xJicM", "content": "", "creation_timestamp": "2025-10-08T15:00:12.000000Z"}, {"uuid": "fcf39a80-d96f-49d3-b8ea-ff3bf6257e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/54787", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-49844 POC \nURL\uff1ahttps://github.com/YuanBenSir/CVE-2025-49844_POC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-09T13:32:03.000000Z"}, {"uuid": "ee72b80f-b5f1-48c0-a21e-9b426d9449d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://t.me/hackyourmom/12844", "content": "\ud83d\uddfd Redis \u043e\u0442\u0440\u0438\u043c\u0430\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443 \u0434\u0456\u0440\u0443 CVE-2025-49844 (RediShell) \u0437 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 10.0 \u2014 \u0447\u0435\u0440\u0435\u0437 \u0431\u0430\u0433 \u0443 Lua-\u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a \u0456\u0437 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043c\u043e\u0436\u0435 \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0456 \u0437\u0430\u0445\u043e\u043f\u0438\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0456\u0441\u043d\u0443\u0432\u0430\u043b\u0430 \u043f\u043e\u043d\u0430\u0434 13 \u0440\u043e\u043a\u0456\u0432, \u0437\u0430\u0447\u0456\u043f\u0430\u0454 \u0432\u0441\u0456 \u0432\u0435\u0440\u0441\u0456\u0457 Redis, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044f \u0432\u0436\u0435 \u0432\u0438\u0439\u0448\u043b\u0438. \u041f\u043e\u043a\u0438 \u043d\u0435 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u2014 \u0432\u0438\u043c\u043a\u043d\u0456\u0442\u044c Lua, \u043e\u0431\u043c\u0435\u0436\u0442\u0435 EVAL / EVALSHA \u0456 \u043f\u0435\u0440\u0435\u0432\u0456\u0440\u0442\u0435 ACL. RediShell \u2014 \u043d\u043e\u0432\u0435 \u043d\u0430\u0433\u0430\u0434\u0443\u0432\u0430\u043d\u043d\u044f, \u0449\u043e \u043d\u0430\u0432\u0456\u0442\u044c \u0441\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435 \u0441\u0442\u0430\u0442\u0438 \u0432\u0445\u0456\u0434\u043d\u043e\u044e \u0442\u043e\u0447\u043a\u043e\u044e \u0434\u043b\u044f \u0437\u043b\u0430\u043c\u0443 \ud83e\udd14\ud83d\udcbb #cybernews", "creation_timestamp": "2025-10-07T12:51:53.000000Z"}, {"uuid": "021e68ea-e271-4aec-906d-6acaf1752036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/54736", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA powerful Redis exploitation tool that leverages CVE-2025-4984\nURL\uff1ahttps://github.com/Yuri08loveElaina/CVE-2025-49844\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-09T06:04:30.000000Z"}, {"uuid": "69f198bf-d2bd-4383-91e7-dd232ba6494d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/BugCod3/1312", "content": "Researchers discovered a critical Redis vulnerability called RediShell \ud83d\udde1\n\n(CVE-2025-49844) a CVSS 10 remote code execution flaw affecting all Redis versions. It allows attackers to send a malicious Lua script, escape the sandbox, and execute code on the host. Around 330,000 Redis instances are exposed online, 60,000 of them without authentication, and over 75% of cloud environments use Redis\u26a1\ufe0f\n\nCVE-2025-49844 (RediShell) POC \ud83d\udee1\n\nGithub\n\n#cve #poc #exploit #redishell #redis\n\nJoin Exploit Forge \ud83d\udd1d\nJoin Exploit Forge Forum \ud83d\udc51\nJoin BugCod3 \ud83e\udd1d", "creation_timestamp": "2025-10-08T17:38:04.000000Z"}, {"uuid": "a5351939-8e8e-49bc-81e1-ca73c3cd071c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/1WFMPIsjVNKBuJiQoVu2s8ffFkyRlVK9ergICdB7CeOLfAg", "content": "", "creation_timestamp": "2025-11-12T03:00:07.000000Z"}, {"uuid": "05646d24-c854-4942-8c82-cec8d27bc5e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/57144", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/Zain3311/CVE-2025-49844\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-27T11:10:58.000000Z"}, {"uuid": "fcb2cbb0-9dc5-4448-b2de-7590c9bde301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/57212", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/yonatanasd232132/talkingBen\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-27T21:46:22.000000Z"}, {"uuid": "b3f03e05-540c-4b6b-836e-0d28ab83410e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/FfKjltZxnaFwusyOHUgU-Wt35uG6_eCy4jZB30o26CR4Gps", "content": "", "creation_timestamp": "2025-10-14T15:00:09.000000Z"}, {"uuid": "13187c33-e5f8-4a4f-bfd7-cb98dcbbe7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/TFgIrRyFVdmt-_iXx8f0LX8Ka84NvNMzkX0RvLq3uNFE64w", "content": "", "creation_timestamp": "2025-10-10T03:00:06.000000Z"}, {"uuid": "445f1e64-d4a2-4015-9a04-df27fec865a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/0bRfJSeBlp6vzURpP_3ixCuFmuQ1BEJ7M8KtQr6_hqRGyNY", "content": "", "creation_timestamp": "2025-10-31T09:00:04.000000Z"}, {"uuid": "6f55b140-f24c-495f-8d25-61c50f32ebcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/54476", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-49844 \u2013 Redis Lua Parser Use-After-Free\nURL\uff1ahttps://github.com/dwisiswant0/CVE-2025-49844\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-07T05:01:46.000000Z"}, {"uuid": "fbcb3074-8bf9-4890-9bab-ca53ad665bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://t.me/HackerNewscyber/2527", "content": "\u2668\ufe0f \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06f1\u06f3 \u0633\u0627\u0644\u0647 \u0648 \u0641\u0648\u0642\u200c\u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 Redis \u062a\u0648\u0633\u0637 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc Wiz\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a \u0627\u0633\u0631\u0627\u0626\u06cc\u0644\u06cc Wiz\u060c \u0627\u0632 \u067e\u06cc\u0634\u0631\u0648\u0627\u0646 \u062d\u0648\u0632\u0647 \u0627\u0645\u0646\u06cc\u062a \u0641\u0636\u0627\u06cc \u0627\u0628\u0631\u06cc\u060c \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u06a9\u0647 \u0645\u062d\u0642\u0642\u0627\u0646\u0634 \u0645\u0648\u0641\u0642 \u0628\u0647 \u06a9\u0634\u0641 \u062d\u0641\u0631\u0647\u200c\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0645\u062a\u0646\u200c\u0628\u0627\u0632 Redis \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0627 \u0646\u0627\u0645 RediShell (CVE-2025-49844) \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0648 \u062a\u0635\u0627\u062d\u0628 \u06a9\u0627\u0645\u0644 \u0633\u0631\u0648\u0631 \u0631\u0627 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0634\u0641\u200c\u0634\u062f\u0647 \u062f\u0631 \u0648\u0627\u0642\u0639 \u06f1\u06f3 \u0633\u0627\u0644 \u062f\u0631 \u06a9\u062f \u0645\u0646\u0628\u0639 Redis \u067e\u0646\u0647\u0627\u0646 \u0628\u0648\u062f\u0647 \u0648 \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0646\u0648\u0639\u06cc \u0646\u0642\u0635 \u062f\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u062d\u0627\u0641\u0638\u0647 (Use-After-Free) \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \u0634\u0631\u06a9\u062a Wiz \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u0628\u06cc\u0634 \u0627\u0632 \u06f3\u06f3\u06f0 \u0647\u0632\u0627\u0631 \u0633\u0631\u0648\u0631 Redis \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u062f\u0647\u200c\u0647\u0627 \u0647\u0632\u0627\u0631 \u0633\u0631\u0648\u0631 \u0628\u062f\u0648\u0646 \u0647\u06cc\u0686\u200c\u06af\u0648\u0646\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0641\u0639\u0627\u0644.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0627\u0645\u062a\u06cc\u0627\u0632 \u062e\u0637\u0631 \u06cc\u0639\u0646\u06cc CVSS 10.0 \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f\u0647 \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u0633\u0631\u0642\u062a \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u060c \u0627\u062c\u0631\u0627\u06cc \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u060c \u06cc\u0627 \u062d\u062a\u06cc \u062d\u0645\u0644\u0627\u062a \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.\n\n\n\u2705 @HackerNewsCyber", "creation_timestamp": "2025-10-09T06:26:26.000000Z"}, {"uuid": "93daf1a8-f703-4fa8-a472-348aa878cd75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/54329", "content": "Recent Vulnerabilities in Redis Server\u2019s Lua Scripting Engine\nhttps://www.offsec.com/blog/recent-vulnerabilities-in-redis-servers-lua-scripting-engine/\n\nDiscover multiple Redis CVEs, including the critical CVE-2025-49844 \u2014 a 13-year-old use-after-free vulnerability in the Lua parser that can allow remote code execution and server crashes.\nThe post Recent Vulnerabilities in Redis Server\u2019s Lua Scripting Engine (https://www.offsec.com/blog/recent-vulnerabilities-in-redis-servers-lua-scripting-engine/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-10-20T18:14:52.000000Z"}, {"uuid": "d93d56ef-9959-4d54-9846-062d8cb825d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://t.me/NinjaSec/424", "content": "Security Advisories & Proof-of-Concept Brief (Educational & Research Use)\n\nThis brief outlines recently disclosed vulnerabilities, their proof-of-concept (PoC) exploits, and related security tools. This information is intended for defensive research, penetration testing in authorized environments, and strengthening security postures.\n\n#exploit #poc - Recent Vulnerability Exploits\n\nCVE-2025-57529 - CPAS SQL Injection\n\n\u00b7 Brief: SQL Injection vulnerability in CPAS audit management information system.\n\u00b7 Educational Purpose: Understanding and testing for SQLi flaws in management systems.\n\u00b7 Link: https://github.com/songqb-xx/CVE-2025-57529\n\nCVE-2025-56383 - Proof-of-Concept\n\n\u00b7 Brief: A general proof-of-concept exploit for the specified CVE.\n\u00b7 Educational Purpose: Analysis of exploit development and vulnerability verification.\n\u00b7 Link: https://github.com/zer0t0/CVE-2025-56383-Proof-of-Concept\n\nCVE-2025-20281 - Cisco ISE RCE Checker\n\n\u00b7 Brief: A vulnerability checker for a Remote Code Execution flaw in Cisco Identity Services Engine (ISE).\n\u00b7 Educational Purpose: Network security monitoring and identifying vulnerable critical infrastructure.\n\u00b7 Link: https://github.com/grupooruss/CVE-2025-20281-Cisco\n\nCVE-2025-7775 - PoC\n\n\u00b7 Brief: Proof-of-concept for the specified CVE.\n\u00b7 Educational Purpose: Vulnerability research and testing detection capabilities.\n\u00b7 Link: https://github.com/rxerium/CVE-2025-7775\n\nCVE-2025-60880 - Bagisto Stored XSS\n\n\u00b7 Brief: Stored Cross-Site Scripting vulnerability in the Bagisto e-commerce platform's admin panel.\n\u00b7 Educational Purpose: Studying XSS impacts in web applications, especially in privileged panels.\n\u00b7 Link: https://github.com/Shenal01/CVE-2025-60880\n\n#analysis - In-Depth Vulnerability Analysis\n\nCVE-2025-61882 - Oracle E-Business Suite Pre-Auth RCE\n\n\u00b7 Brief: A technical analysis of a pre-authentication Remote Code Execution vulnerability chain in Oracle E-Business Suite.\n\u00b7 Educational Purpose: Understanding complex attack chains against enterprise ERP systems.\n\u00b7 Link: https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882\n\nCVE-2025-3600 - Progress Telerik Unsafe Reflection\n\n\u00b7 Brief: Analysis of an unsafe reflection vulnerability in Progress Telerik UI for ASP.NET AJAX, leading to more than just Denial-of-Service.\n\u00b7 Educational Purpose: Research into exploitation techniques in third-party .NET components.\n\u00b7 Link: https://labs.watchtowr.com/more-than-dos-progress-telerik-ui-for-asp-net-ajax-unsafe-reflection-cve-2025-3600\n\n#tools - Detection & Security Tools\n\nCVE-2025-41244 - Detection Script\n\n\u00b7 Brief: A detection script for identifying systems affected by CVE-2025-41244.\n\u00b7 Educational Purpose: Blue team exercises for building and deploying vulnerability detection.\n\u00b7 Link: https://github.com/rxerium/CVE-2025-41244\n\nCVE-2025-49844 - Redis Lua Parser Use-After-Free\n\n\u00b7 Brief: Proof-of-concept for a Use-After-Free vulnerability in the Redis Lua parser.\n\u00b7 Educational Purpose: Memory corruption research and understanding database server security.\n\u00b7 Link: https://github.com/dwisiswant0/CVE-2025-49844\n\n#maldev #redteam - Red Team Tooling\n\nCrystal-Kit - Cobalt Strike Evasion Kit\n\n\u00b7 Brief: An evasion kit designed to assist with hiding Cobalt Strike team servers.\n\u00b7 Educational Purpose: Researching Command & Control (C2) tradecraft, detection methods, and defensive countermeasures.\n\u00b7 Warning: For authorized red team exercises and malware development research only.\n\u00b7 Blog: https://rastamouse.me/crystal-kit/\n\u00b7 Tool: https://github.com/rasta-mouse/Crystal-Kit\n\nDisclaimer: All resources are for educational and authorized security research only. Use these tools and techniques only on systems you own or have explicit written permission to test. Understanding these threats is crucial for building effective defenses.", "creation_timestamp": "2025-10-18T09:50:45.000000Z"}, {"uuid": "33e1cfcd-fb62-4131-9991-d18d609c8e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/3GilL3Yfz_bXCeYz-6dgCYUkiEb3BNtv6mUsxshVF1vMNw", "content": "", "creation_timestamp": "2025-10-25T22:39:04.000000Z"}, {"uuid": "e85eb2fa-b829-4334-9301-ee71281a4cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/36pVUDCFmpPu5w9QsRPZFyQHawIXN0OfOkf7Tg4YwywwTQ", "content": "", "creation_timestamp": "2025-10-25T22:39:02.000000Z"}, {"uuid": "b1c37a68-24ad-4bf8-9cf7-30d572360790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "Telegram/-IhpprtPCpVIKOiWxx97i8xCNwDzg_DsAp-aMH8YORqFew", "content": "", "creation_timestamp": "2025-10-07T10:11:05.000000Z"}, {"uuid": "6a61f1d1-edd0-40f7-8326-9f0dd1981a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/7671", "content": "\ud83d\udea8WARNING: CVE-2025-49844 (RediShell): Redis flaw rated 10.0 CVSS\n\nA 13-year-old bug lets attackers escape Lua sandbox and run code on the host.\n\nEven worse \u2014 60,000 Redis servers online have no auth.\n\nPatch now or risk full system takeover: https://thehackernews.com/2025/10/13-year-redis-flaw-exposed-cvss-100.html", "creation_timestamp": "2025-10-07T08:35:49.000000Z"}, {"uuid": "e299672f-6300-49cb-88f1-098a7bead15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://t.me/sysodmins/27236", "content": "330 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 13-\u043b\u0435\u0442\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Redis\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, CVE-2025-49844 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Lua-\u0441\u043a\u0440\u0438\u043f\u0442.\n\n\u0425\u043e\u0442\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0438 \u043d\u0443\u0436\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u043a\u043e\u043b\u043e 330 000 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Redis, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 60 000 \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043f\u0430\u0440\u043e\u043b\u044f. \u041f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430, \u0432\u0435\u0434\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\nRedis \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447\u0438, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0443\u0434\u0435\u0442 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0435\u0449\u0435 \u0434\u043e\u043b\u0433\u043e.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-10-09T01:16:33.000000Z"}, {"uuid": "a860287f-c801-420c-9b97-3b284ae173b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "MISP/d277e10b-ad25-4081-a3b6-165ec062d019", "content": "", "creation_timestamp": "2026-05-26T07:46:10.000000Z"}, {"uuid": "efc82d62-8943-4ecb-9bb7-d8e627c835a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49844", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1122ebc0-12145c4779ccb07a", "content": "What\u2019s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant\nIntroduction\nContainerization using Docker has become firmly established in modern development standards, significantly increasing the speed and convenience of deploying various services. Developers often use ready-made Docker images, making only minimal changes. The largest repository of container images is the Docker Hub service.\nContainer-hosted infrastructure is an attractive target for attackers. At a minimum, a compromised container can be used for DDoS attacks, cryptocurrency mining, or traffic proxying. The list of threats does not end there: once an attacker gains control of a container, they can steal or destroy data directly from it, access neighboring containers, or even attempt to escape the container, compromising the entire enterprise network.\nAt the same time, the infrastructure inside containers is typically updated less frequently and may contain outdated and vulnerable software versions. When deploying third-party images or modifying them for a specific environment, it is easy to make configuration errors that attackers can later exploit. And due to the architectural characteristics of containers, developers often face constraints when preparing images; to overcome these, they may resort to insecure solutions they find online.\nIn other words, containerized infrastructure can be both the simplest and the most lucrative target to exploit. Therefore, its security requires heightened attention. To minimize the risk of successful attacks on container infrastructure, it is essential to check the final Docker images, including all underlying layers, for vulnerabilities and misconfigurations. The easiest way to do this is by analyzing the Dockerfile; however, it is not always available for inspection. Moreover, it typically defines how to build layers on top of a base image from an external repository whose reliability cannot be guaranteed.\nImage analysis results in Kaspersky Container Security\nTo help users identify insecure configurations and potential vulnerabilities within them, we have added our AI assistant to Kaspersky Container Security.KIRA (the assistant\u2019s name) uses artificial intelligence to analyze the image and identify potential issues within, along with recommendations on how to fix them.\nAs part of this study, we asked KIRA to analyze a number of popular community images, and later in this article, we\u2019ll show you the results.\nSoftware vulnerabilities and compromise of update sources\nOne of the key security issues with using pre-built images is that developers do not update them in a timely manner. A Docker image is, by its very nature, a snapshot of a specific Linux distribution after packages have been installed on it. However, in most cases, it does not receive security updates on its own, unlike traditional Linux servers, where these updates are automatically installed by specialized services, such as unattended-upgrades in Debian-based distributions and dnf-automatic in RedHat-based distributions.\nTo apply updates to a Docker image, it must be rebuilt and redeployed. Often, this process is not automated, and some updates require additional effort to verify their correct operation, modify configurations when upgrading to new software versions, and so on. As a result, many popular images do not receive timely updates, which significantly increases the risks associated with their use.\nAn image that was secure at build time accumulates vulnerabilities as they are discovered in the packages installed within it, which over time significantly increases the opportunities for a successful attack on the container.\nVulnerable versions of web applications and network services accessible from the internet immediately become targets of various malicious campaigns. For example, just one day after the discovery of the CVE-2025-55182 vulnerability in React Server Components, our honeypots recorded numerous attack attempts related to this vulnerability. It was adopted by operators of many malicious campaigns, ranging from classic cryptocurrency miners to variants of Mirai and Gafgyt. Attackers are constantly adding new distribution methods and can use dozens of exploits targeting various vulnerabilities and configuration errors in popular services. Often, the same vulnerabilities are used in self-propagation mechanisms from already compromised hosts. For example, in a malicious campaign to spread the Dero miner, attackers use infected containers to automatically search for and infect new targets.\nIn addition to vulnerabilities that can be exploited remotely, attackers are rapidly adding local vulnerabilities to their arsenal, used to gain root privileges and escape the container: in the Kinsing malware campaign, attackers used CVE-2023-4911 (Looney Tunables) to elevate privileges, and in the perfctl campaign, the CVE-2021-4034 (PwnKit) vulnerability was used for the same purpose. The access gained was used to install a rootkit that hides the presence of perfctl on the system.\nTo assess the situation with unpatched vulnerabilities in containers, we took a random sample of 100 images, which included various popular solutions with 10,000 to 1 million downloads on DockerHub. In the 64 images we scanned, we found outdated software versions with critical vulnerabilities. For example, some images contained the CVE-2025-49844 vulnerability in the Redis server, leading to RCE by leveraging a vulnerability in the Lua parser; the current CVE-2026-24061 vulnerability in nginx, which in some configurations leads to a server process crash, and with ASLR disabled, again, to RCE; vulnerabilities CVE-2025-32463 in sudo and CVE-2023-4911 in glibc, allowing an attacker to gain root privileges with local access. At the same time, only one in ten Docker images from the analyzed sample is fully up to date.\nTOP 10 Critical Vulnerabilities with PoC/Exploits available as shown in the Kaspersky Container Security Dashboard\nIt is worth noting that, of course, not every discovered vulnerability can be directly exploited by attackers. A practical risk arises when the vulnerable application or library is actually in use, and the conditions necessary for exploitation \u2013 which vary significantly from vulnerability to vulnerability \u2013 are met. Nevertheless, updates must not be ignored, as the risk of vulnerabilities being exploited \u2013 both individually and in various combinations \u2013 cannot be predicted in each specific case, and even vulnerabilities that seem harmless at first glance can ultimately pose a serious risk of compromise.\nA record number of vulnerabilities in a single image\nHowever, frequent updates have a downside. Every rebuild that downloads new packages from source repositories introduces an additional risk of a supply chain attack \u2013 a compromised dependency or a modified base image could silently inject malicious code into your environment precisely through an update. During our analysis of images from the sample, we did not find any signs of supply chain attacks. However, in March 2026, a supply chain incident occurred in the Trivy and LiteLLM projects. In the case of Trivy, the infected file was injected directly into the container image in the official repositories.\nDetecting potentially malicious software using one of the images as an example\nThis leads to a difficult choice: infrequent updates leave known vulnerabilities unpatched within the image, while frequent updates increase the risk of supply chain compromise. Therefore, to protect your infrastructure, you need not only to regularly update base images but also to take a more comprehensive approach, specifically by pinning dependencies to known-good versions and scanning the resulting images for malware upon update.\nConfiguration vulnerabilities\nEven a container with a fully updated image can be compromised if it is configured incorrectly. Embedding keys and secrets in the image, disabling authentication in network services, default passwords, and insecure file access permissions \u2013 all of these can be exploited by attackers in one way or another to achieve their goals.\nInsecure image configurations detected by KCS based on rules\nThe situation is exacerbated by the fact that errors may be introduced by the authors of the original image, which complicates their detection, as this requires analyzing every layer and the command that generated it. As with vulnerabilities, not every configuration error leads to compromise: it all depends on the container\u2019s role, its network accessibility, and many other factors. But the very use of insecure settings will sooner or later lead to errors appearing in images where their consequences will be significantly more dangerous.\nStandard rules are often insufficient for analyzing problematic configurations. To gain a deeper understanding of the context and assess potential risks, AI tools can be used. Later in this section, we will examine examples of typical insecure configurations we discovered while scanning public images from Docker Hub, along with the descriptions of issues and risk mitigation methods provided by the KIRA AI assistant.\nExample of container analysis using KIRA\nInsecure handling of credentials\nUse of default passwords\nIn some cases, containers may use default passwords set via environment variables or directly in Dockerfile. If these passwords are not overridden, attackers will be able to access the application by using the default password.\nRUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c echo [removed]:[removed] | chpasswd\nAccording to KIRA\u2019s analysis, the user\u2019s password is stored in plain text in the image layer history. Anyone who gains access to the image \u2013 whether through a public registry, a compromised build environment, or other means \u2013 will be able to extract the password. If SSH or another form of interactive access is enabled in the container, this could lead to its complete compromise and allow attackers to move laterally within the infrastructure.\nPasswords may be present in environment variables. Consider the following Dockerfile snippet:\nENV SERVERNAME=localhost WWW_PATH_CONF=/etc/apache2/apache2.conf WWW_PATH_ROOT=/var/www HTTPS=on PKP_CLI_INSTALL=0 PKP_DB_HOST=db PKP_DB_NAME=pkp PKP_DB_USER=pkp PKP_DB_PASSWORD=changeMePlease PKP_WEB_CONF=/etc/apache2/conf-enabled/pkp.conf PKP_CONF=config.inc.php PKP_CMD=/usr/local/bin/pkp-start\nIn this example, the environment variable PKP_DB_PASSWORD is set to changeMePlease. If the user forgets to override it, the application will use the password that can be obtained from Dockerfile.\nLet\u2019s look at another image:\n/bin/sh -c #(nop)  ENV MOODLE_URL=<a href=\"http://0.0.0.0/\">0.0.0.0</a> MOODLE_ADMIN admin       MOODLE_ADMIN_PASSWORD [removed]      MOODLE_ADMIN_EMAIL admin@example.com MOODLE_DB_HOST     MOODLE_DB_PASSWORD       MOODLE_DB_USER     MOODLE_DB_NAME    MOODLE_DB_PORT 3306\nFor this image, Dockerfile specifies that the administrator password is hardcoded in the ENV directive and remains in the image metadata (layer history, docker inspect). Anyone who gains access to the image (registry, build cache) will be able to extract this secret and compromise the account.\nTo eliminate these risks, ensure that no passwords are specified in Dockerfile. If authentication is required, you can use orchestrator mechanisms (secrets) or generate a temporary password when starting the container via the entrypoint script, without saving it in the layers. We also recommend using mechanisms for securely passing secrets at runtime (Docker secrets, Kubernetes Secrets) or, as a last resort, passing them via --secret during the build with BuildKit, but under no circumstances should they be left in the final image.\nPassing passwords via command arguments\nIn some cases, passwords may be exposed when passed via command-line arguments, as these arguments are visible to all users on the system:\n/bin/sh -c #(nop)  HEALTHCHECK &{[\"\"CMD-SHELL\"\" \"\"mysql --protocol TCP -u\\\"\"root\\\"\" -p\\\"\"$MYSQL_ROOT_PASSWORD\\\"\" -e \\\"\"SELECT 1;\\\"\"\"\"] \"\"15s\"\" \"\"30s\"\" \"\"0s\"\" '\\x05'}\nIn the example provided, the MySQL superuser password is passed into the healthcheck command in plaintext, making it visible when viewing the process list (ps aux), in audit logs, and in monitoring systems. If the attacker gains read access to the container\u2019s processes or logs, they can extract the password and gain full control of the database.\nTo fix this issue, the healthcheck should use a local connection via a Unix socket with default authentication (if the auth_socket plugin is configured for root), or create a dedicated user with minimal privileges (e.g., only USAGE), without a password or with a password passed via a secure file (--defaults-file with restricted permissions). You can also use the MYSQL_PWD environment variable for healthcheck authentication, but it remains visible in /proc.\nPrivilege escalation in the container\nOne of the most common vectors for initial compromise of Linux systems is RCE in web applications and network services. Typically, these services have minimal privileges, which complicates attackers\u2019 subsequent actions: dumping credentials, covering their tracks, attempting to escape the container, and much more.\nThe situation worsens significantly if the attacker gains root privileges, as this allows them to fully control all processes within the container, conceal their activity, and use methods to escape the container. For example, they can compromise the host if the container is privileged, a Docker socket is mounted inside it, or other insecure configurations and vulnerabilities exist that cannot be exploited with standard user privileges.\nSimilarly, this simplifies network attacks on neighboring containers, the orchestrator, and various internal services, making this configuration error a potential link in the chain for compromising the entire network.\nAttacks on sudo\nOne of the simplest privilege escalation methods is executing arbitrary commands as root using sudo without entering a password. Consider the following example:\n/bin/sh -c set -xe;     apt-get update &&       apt-get -y install sudo;       echo \"\"solr ALL=(ALL) NOPASSWD: ALL\"\" >/etc/sudoers.d/solr;\nAnalyzing this configuration using KIRA immediately highlights the main issue: by installing the sudo package and setting NOPASSWD: ALL for the solr, the user severely violates the principle of least privilege. The Solr platform does not require such broad privileges to run within a container; instead, they create an easy path for escalating to root.\necho 'postgres ALL=(ALL:ALL) NOPASSWD:ALL' >> /etc/sudoers\nIn another example of an insecure configuration, NOPASSWD:ALL privileges are granted to a PostgreSQL database user, which is a direct and severe weakening of the access control policy. If an attacker gains the ability to execute code on behalf of the postgres user \u2013 through a vulnerability in a network service, an SQL injection, or by compromising of one of the processes \u2013 they will immediately and unconditionally be able to execute any commands on behalf of the root user. This is equivalent to the entire container running as root.\nAs a risk mitigation measure, we recommend completely removing this directive. The minimum necessary commands requiring privileges should be delegated on a case-by-case basis via sudoers with explicit specification of allowed executables and parameters, using NOPASSWD only as a last resort and for specific utilities.\nOur AI assistant KIRA can identify even more complex insecure configurations, such as allowing passwordless sudo for the entire sudo group \u2014 by modifying existing rules.\nperl -i -pe 's/\\bALL$/NOPASSWD:ALL/g' /etc/sudoers\nThe risk in this example is that the command replaces standard declarations requiring authentication with passwordless execution of all commands for any user within the sudo group \u2013 potentially including postgres, should it be assigned to that group. This expands the attack surface to all group members, turning each of them into a potential point for instant privilege escalation.\nTo mitigate the risks, we recommend not modifying the global sudoers policy, keeping the standard password requirement, or using a more secure escalation mechanism \u2013 such as gosu to run a specific process on behalf of another user without permanent privileges.\nInsecure file permissions\nAnother common vector for privilege escalation is insecurely configured file and directory permissions. Most often, for convenience, container image authors use 777 permissions, which allow anyone \u2013 including unprivileged users \u2013 to freely create and delete files, as well as modify their contents. This can lead to both privilege escalation and the ability for an unprivileged attacker to delete or modify logs, among other undesirable consequences.\nConsider the following command:\nchmod 0777 /usr/share/cargo /usr/share/cargo/bin\nThe risk is that directories containing binary files and scripts will become writable by any container user. This allows a low-privileged attacker to replace utilities included in cargo or add new malicious executables. When these tools are subsequently invoked, especially as the root user or via sudo, the attacker\u2019s code will execute with the inherited privileges of the calling process, leading directly to a local privilege escalation.\nTo mitigate the risks, you can set the minimum necessary permissions: chmod 0755 for directories and chmod 0755/0644 for the corresponding files. The owner should be root, and only the owner should be allowed to write. Do not use chmod 777 on any system paths.\nLack of integrity checks\nDownloading software without verifying its integrity can make the infrastructure vulnerable to software tampering.\nFor example, this risk may arise when downloading a distribution via HTTP:\nRUN /bin/sh -c wget -qO- \"\"<a href=\"http://acestream.org/downloads/linux/acestream_3.1.49_debian_9.9_x86_64.tar.gz\">acestream.org/downloads/linux/\u2026 | tar --extract --gzip -C /opt/acestream\nUsing HTTP without verifying the archive\u2019s integrity creates conditions for a man-in-the-middle attack during the image build phase. An attacker controlling the communication channel or DNS can replace the archive with malicious content, which will compromise the container and the entire environment in which it runs.\nTo mitigate the risks, you can configure connections to web resources to use HTTPS only \u2014 if the resource supports this protocol. You can also download the archive without extracting it, compare its checksum (SHA256) with the checksum from a trusted source, and only then extract it. It is advisable to store the verified archive in an internal artifact repository to avoid direct downloads from the network.\nThere will still be a MitM risk even if certificate verification is disabled:\nwget --no-check-certificate<a href=\"https://github.com/phpvirtualbox/phpvirtualbox/archive/refs/heads/7.2-dev.zip\"> github.com/phpvirtualbox/phpvi\u2026 -O phpvirtualbox.zip\nThe absence of TLS certificate verification allows an attacker controlling the network segment to replace the downloaded ZIP archive with malicious content. Since the archive contains PHP code that will be executed by the web server, compromise during the build phase will result in the deployment of a backdoor or data leakage.\nTo mitigate the risks, remove the --no-check-certificate flag; after downloading, calculate the SHA256 hash of the archive and verify it against a known reference value (the release page or a local repository of trusted hashes). Additionally, consider using a fixed release (tag) rather than the floating 7.2-dev branch.\nConclusion\nDocker containers have become a very popular means of deploying software, and attackers are by no means oblivious to this trend. They are rapidly adding software vulnerabilities and configuration errors to their arsenal and carrying out attacks on supply chains. They can compromise container infrastructure for a wide variety of purposes, from cryptocurrency mining to encrypting data for ransom or stealing information critical to the company.\nOur research found that 64 out of 100 container images for popular applications contain critically vulnerable software, and only 10% are fully up to date. We also identified numerous insecure configurations, including passwords stored in plaintext in Dockerfiles and excessive privileges granted to users and processes.\nTo detect and prevent these threats, it is essential to strictly adhere to security measures: audit image configurations, securely manage secrets used in images, apply security updates in a timely manner, scan their contents for malware with every update, and follow industry-standard best practices for enhancing security.\nThis approach requires specialized solutions built to accommodate the unique characteristics of container environments. Kaspersky Container Security ensures the security of containerized applications at every stage of their lifecycle, from development to operation. The product protects an organization\u2019s business processes, helps ensure compliance with industry standards and security regulations, and enables the implementation of secure software development practices. \nsecurelist.com/container-secur\u2026", "creation_timestamp": "2026-05-29T07:12:04.478061Z"}]}