{"metadata": {"vulnerability": "CVE-2025-0994", "count": 104, "kinds": {"milestone": 5, "sighting": 74, "kev": 11, "other": 14}}, "data": [{"timestamp": "2025-02-03T18:03:05.707Z", "date_only": false, "value": "2025-02-03T18:03:05.707Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-0994", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-06T07:00:00Z", "date_only": false, "value": "2025-02-06T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-037-04", "record": "ICSA-25-037-04", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-06T07:00:00Z", "date_only": false, "value": "2025-02-06T07:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-037-04", "record": "ICSA-25-037-04", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-06T11:00:00Z", "date_only": false, "value": "2025-02-06T11:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "43a7e131-3bd2-451e-8ceb-cf8d932a8d76", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04"}, {"timestamp": "2025-02-06T15:42:21.837Z", "date_only": false, "value": "2025-02-06T15:42:21.837859Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113957702270079889", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "2930fc66-5950-44b4-857e-08d9a0d5f9bc", "url": "https://infosec.exchange/users/screaminggoat/statuses/113957702270079889"}, {"timestamp": "2025-02-06T16:00:00Z", "date_only": false, "value": "2025-02-06T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / icscert", "record": "CVE-2025-0994", "field": "containers.cna.datePublic"}, {"timestamp": "2025-02-06T16:01:20Z", "date_only": false, "value": "2025-02-06T16:01:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-0994", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-06T16:02:54.978Z", "date_only": false, "value": "2025-02-06T16:02:54.978522Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113957783101307796", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "94c4fdcc-53eb-473f-9c2f-6956bce33ed8", "url": "https://infosec.exchange/users/cve/statuses/113957783101307796"}, {"timestamp": "2025-02-06T16:15:41Z", "date_only": false, "value": "2025-02-06T16:15:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M5Q8-8X36-W25P", "record": "GHSA-M5Q8-8X36-W25P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-06T16:15:41.493Z", "date_only": false, "value": "2025-02-06T16:15:41.493", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0994", "record": "FKIE_CVE-2025-0994", "field": "published"}, {"timestamp": "2025-02-06T16:16:16.831Z", "date_only": false, "value": "2025-02-06T16:16:16.831677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjibvtwae2b", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "a6094764-feae-4ac3-a36f-f810f10a750b", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjibvtwae2b"}, {"timestamp": "2025-02-06T16:55:26.352Z", "date_only": false, "value": "2025-02-06T16:55:26.352Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2025-0994", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T18:07:30.844Z", "date_only": false, "value": "2025-02-06T18:07:30.844205Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lhjoitdw5k2q", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c72b5069-870a-4616-9488-a55f78c29e11", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3lhjoitdw5k2q"}, {"timestamp": "2025-02-06T18:30:13Z", "date_only": false, "value": "2025-02-06T18:30:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XYlVxVETa-JWwYo6fYTLkt_J4QX09ZIZ5CjpsdxLhPEfaHc", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "aa696ff5-3627-4d76-87c3-c422edfeef94"}, {"timestamp": "2025-02-06T18:31:05Z", "date_only": false, "value": "2025-02-06T18:31:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M5Q8-8X36-W25P", "record": "GHSA-M5Q8-8X36-W25P", "field": "published"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-0994", "field": "timestamps.asserted_at", "uuid": "1fae1176-c19d-45b9-9b09-196189b31f42", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-0994", "field": "timestamps.asserted_at", "uuid": "4542689d-83fc-4096-96d1-92953fa3594f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": true, "value": "2025-02-07", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0994", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-0994", "field": "evidence.0.details.added_date", "uuid": "4542689d-83fc-4096-96d1-92953fa3594f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": true, "value": "2025-02-07", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-0994", "field": "evidence.0.details.date_added", "uuid": "1fae1176-c19d-45b9-9b09-196189b31f42", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-0994", "field": "timestamps.first_seen_at", "uuid": "1fae1176-c19d-45b9-9b09-196189b31f42", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-0994", "field": "timestamps.first_seen_at", "uuid": "4542689d-83fc-4096-96d1-92953fa3594f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-0994", "field": "status.status_updated_at", "uuid": "1fae1176-c19d-45b9-9b09-196189b31f42", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-0994", "field": "status.status_updated_at", "uuid": "4542689d-83fc-4096-96d1-92953fa3594f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0994", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-02-07T11:07:13.345Z", "date_only": false, "value": "2025-02-07T11:07:13.345355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhlhi4yxbk2m", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "dd987aae-714a-4c71-9b17-44c60a51af3b", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lhlhi4yxbk2m"}, {"timestamp": "2025-02-07T11:52:00Z", "date_only": false, "value": "2025-02-07T11:52:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/02/cisa-warns-of-active-exploitation-in.html", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "9723b24d-4d0e-4463-9369-70c1cab4d5e6", "url": "https://thehackernews.com/2025/02/cisa-warns-of-active-exploitation-in.html"}, {"timestamp": "2025-02-07T11:57:35Z", "date_only": false, "value": "2025-02-07T11:57:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5345", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "639890a3-e645-4dce-84c2-868c836a800b", "content": "\u200b\u26a1\ufe0f0-day \u0432 Cityworks: \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0433\u043e\u0440\u043e\u0434\u043e\u0432\n\n\ud83d\udcac \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Trimble Cityworks \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Zero-Day, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Microsoft IIS. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CISA, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCityworks \u2014 \u044d\u0442\u043e GIS-\u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0435 \u043c\u0443\u043d\u0438\u0446\u0438\u043f\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438, \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u0430\u043c\u0438, \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439. \u041f\u0440\u043e\u0434\u0443\u043a\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-0994 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.6) \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e \u041f\u041e Cityworks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 ( CWE-502 ) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Cityworks \u0434\u043e 15.8.9, \u0430 \u0442\u0430\u043a\u0436\u0435 Cityworks \u0441 Office Companion \u0434\u043e 23.10.\n\nCISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e Cityworks \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e, \u0447\u0442\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043a ICS-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Trimble, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2025-0994 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 Cobalt Strike \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0442\u043e\u043c, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 Trimble \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u043c Cityworks. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b.\n\nTrimble \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Cityworks 15.8.9 \u0438 Cityworks 23.10. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cityworks Online \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0441 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0432\u0440\u0443\u0447\u043d\u0443\u044e. \u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043f\u0440\u0430\u0432\u0430 IIS, \u0442\u0430\u043a \u043a\u0430\u043a \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043e\u043d\u0438 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u044b\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0443\u0433\u0443\u0431\u0438\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u0443.\n\nCISA \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u0449\u0435\u043c \u043d\u0430\u0431\u043e\u0440\u0435 \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c: \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 IIS \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c \u043a\u0438\u0431\u0435\u0440\u0437\u0430\u0449\u0438\u0442\u0443, \u0441\u043b\u0435\u0434\u0443\u044f \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u0433\u043b\u0443\u0431\u0438\u043d\u0443 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u044f \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439.\n\n\u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Trimble Cityworks \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u0442\u044c \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0432 CISA.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5345"}, {"timestamp": "2025-02-07T13:05:57.867Z", "date_only": false, "value": "2025-02-07T13:05:57.867419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhlo4j7hw42r", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "4119402b-af1b-42f9-a4ba-98d3ea8deaf1", "url": "https://bsky.app/profile/hackingne.ws/post/3lhlo4j7hw42r"}, {"timestamp": "2025-02-07T13:05:58.388Z", "date_only": false, "value": "2025-02-07T13:05:58.388264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhlo4jdh672d", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "b1958ea2-10aa-4e2f-80dd-ae8ff99613c9", "url": "https://bsky.app/profile/hackingne.ws/post/3lhlo4jdh672d"}, {"timestamp": "2025-02-07T13:57:36Z", "date_only": false, "value": "2025-02-07T13:57:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6306", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "7614dfb6-d421-43f4-b63d-41b6f5496f85", "content": "\ud83d\udea8 CISA warns of active exploitation in Trimble Cityworks GIS software, with a high-severity vulnerability (CVE-2025-0994, CVSS 8.6) being weaponized in the wild.\n\nIf left unpatched, attackers could gain unauthorized access and deploy harmful payloads like Cobalt Strike and VShell.\n\nRead: https://thehackernews.com/2025/02/cisa-warns-of-active-exploitation-in.html", "url": "https://t.me/thehackernews/6306"}, {"timestamp": "2025-02-07T14:57:57.425Z", "date_only": false, "value": "2025-02-07T14:57:57.425495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3lhluerjgib2o", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "055d5a5e-d9a1-4d7c-ae58-ada3d142780c", "url": "https://bsky.app/profile/rxerium.com/post/3lhluerjgib2o"}, {"timestamp": "2025-02-07T16:00:06Z", "date_only": false, "value": "2025-02-07T16:00:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6711", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e7c301cc-43f7-4221-b6d1-1cd16d366629", "content": "\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445, \u0433\u0435\u043e\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Trimble \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cityworks \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 0-day \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.\n\nTrimble Cityworks - \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435\u00a0GIS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043c\u0443\u043d\u0438\u0446\u0438\u043f\u0430\u043b\u0438\u0442\u0435\u0442\u0430\u043c\u0438, \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438, \u043d\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u0445 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430 \u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0442, \u0448\u0438\u0440\u043e\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-0994, \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS v4: 8,6 \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 Microsoft Internet Information Services (IIS) \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043d\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\nTrimble \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 29 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CISA, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u043c Cityworks \u0443 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u0440\u0443\u0433\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435\u00a0Trimble IoCs \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e 0-day \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Rust, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 Cobalt Strike, \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 Go \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c\u00a0VShell, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u043e\u043f\u043e\u0437\u043d\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a.\n\nCISA, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u043f\u043e ICS \u0434\u043b\u044f CVE-2025-0994, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Cityworks \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u043e \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u0430.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u043a\u0430\u043a\u043e\u0432\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 (15.8.9 \u0438 23.10) \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a. \u0412\u0441\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f IIS.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442 \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c.", "url": "https://t.me/true_secator/6711"}, {"timestamp": "2025-02-07T17:02:58Z", "date_only": false, "value": "2025-02-07T17:02:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/LSoxVSGcqvWlSbDzCLMD3eYRCexfZoevJYfwHtSYUZEolw", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "6b8a6539-dba2-4cf2-a55f-9bd9dd2225bb"}, {"timestamp": "2025-02-07T18:19:12.256Z", "date_only": false, "value": "2025-02-07T18:19:12.256355Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113963981301544625", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "d0f4da8e-fa55-4078-9064-8440786a9feb", "url": "https://infosec.exchange/users/screaminggoat/statuses/113963981301544625"}, {"timestamp": "2025-02-07T19:41:54.355Z", "date_only": false, "value": "2025-02-07T19:41:54.355542Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113964306484454053", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "388df7dd-629f-49f8-8c94-4045f35f0a81", "url": "https://infosec.exchange/users/screaminggoat/statuses/113964306484454053"}, {"timestamp": "2025-02-07T21:02:12.654Z", "date_only": false, "value": "2025-02-07T21:02:12.654423Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3291915", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e910b0a5-deeb-4aad-8254-dc700772bb33", "url": "https://feedsin.space/feed/CISAKevBot/items/3291915"}, {"timestamp": "2025-02-07T21:10:02Z", "date_only": false, "value": "2025-02-07T21:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c1ef939f-9f69-4807-b03b-0e504aca49fd"}, {"timestamp": "2025-02-07T22:00:05Z", "date_only": false, "value": "2025-02-07T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/KjdsF_S4iU0Pqiujx7XSF8N1D-9xEO9oqghqMcOfPBbt-TI", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "37c83dd2-5c72-4f9a-a5a1-21d2371ac67b"}, {"timestamp": "2025-02-07T22:33:10.114Z", "date_only": false, "value": "2025-02-07T22:33:10.114543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lhmnsqerwz26", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c482698b-1520-4235-82eb-803b7847f14d", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lhmnsqerwz26"}, {"timestamp": "2025-02-08T02:56:01.163Z", "date_only": false, "value": "2025-02-08T02:56:01.163001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lhn4iqvpmn24", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "d163ce1f-c3de-4a80-989c-9fad077e54b8", "url": "https://bsky.app/profile/gothburz.bsky.social/post/3lhn4iqvpmn24"}, {"timestamp": "2025-02-08T04:04:35Z", "date_only": false, "value": "2025-02-08T04:04:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3858", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "7760b4c7-9135-496d-98b8-6cd27905131a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0994\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-06T16:15:41.493\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0?\n2. https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04", "url": "https://t.me/DarkWebInformer_CVEAlerts/3858"}, {"timestamp": "2025-02-08T08:51:09.843Z", "date_only": false, "value": "2025-02-08T08:51:09.843700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhnqdmoypk2m", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "5d519970-f8ad-4596-9827-96492916a438", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhnqdmoypk2m"}, {"timestamp": "2025-02-08T08:58:58.104Z", "date_only": false, "value": "2025-02-08T08:58:58.104108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhnqrnig5c2y", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e5a2bae9-cda9-470a-9ca8-7ed7232f4341", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhnqrnig5c2y"}, {"timestamp": "2025-02-08T09:04:00.329Z", "date_only": false, "value": "2025-02-08T09:04:00.329472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhnr2mwwok2y", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "2344176f-7d09-485b-b3a4-cd22351c08a9", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhnr2mwwok2y"}, {"timestamp": "2025-02-08T13:38:01.424Z", "date_only": false, "value": "2025-02-08T13:38:01.424963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhoaerbest26", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "d5fb3108-af04-4553-a91f-ed3f34d93d42", "url": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhoaerbest26"}, {"timestamp": "2025-02-08T16:00:31Z", "date_only": false, "value": "2025-02-08T16:00:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/08/hackers-exploit-cityworks-rce-bug.html", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "cb1ef161-d311-4d43-8226-6de4ed023324", "url": "https://threatintel.cc/2025/02/08/hackers-exploit-cityworks-rce-bug.html"}, {"timestamp": "2025-02-08T21:02:00.733Z", "date_only": false, "value": "2025-02-08T21:02:00.733565Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhoz6mg6ls2b", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c3bf68e9-3ca7-46ae-a1a0-0760a0e41eda", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhoz6mg6ls2b"}, {"timestamp": "2025-02-09T06:18:28.487Z", "date_only": false, "value": "2025-02-09T06:18:28.487722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/admrotob.bsky.social/post/3lhpybpg2fc2t", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c5b120d0-78bf-4090-9ca0-b5c352365855", "url": "https://bsky.app/profile/admrotob.bsky.social/post/3lhpybpg2fc2t"}, {"timestamp": "2025-02-09T14:36:22Z", "date_only": false, "value": "2025-02-09T14:36:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Lviathan404/6561", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e009137e-e8e2-4fe7-ba3b-6f9452d67d0c", "content": "CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE\n\nCISA warns of active attacks exploiting Trimble Cityworks CVE-2025-0994 (CVSS 8.6). Hackers deploy Rust-based malware, Cobalt Strike, and VShell.\n\nThe Hacker News | thehackernews.com \u2022 Feb 7, 2025", "url": "https://t.me/Lviathan404/6561"}, {"timestamp": "2025-02-09T22:15:59.794Z", "date_only": false, "value": "2025-02-09T22:15:59.794144Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lhrnrvd33r2j", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "f308917d-092c-4766-b109-abaa3161d6ae", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lhrnrvd33r2j"}, {"timestamp": "2025-02-10T12:28:45.463Z", "date_only": false, "value": "2025-02-10T12:28:45.463990Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lht5gkil7hc2", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "11f6c81f-e435-4312-a702-1415a3da8a1c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lht5gkil7hc2"}, {"timestamp": "2025-02-10T14:32:16.772Z", "date_only": false, "value": "2025-02-10T14:32:16.772166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhtedmjs2b25", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "a7ad1ed7-65bb-4916-b06d-eef4c8be0c8a", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhtedmjs2b25"}, {"timestamp": "2025-02-11T01:19:27.158Z", "date_only": false, "value": "2025-02-11T01:19:27.158861Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuiipv54s2h", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "810fb94b-2f94-4521-b7dd-b79d53996887", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhuiipv54s2h"}, {"timestamp": "2025-02-11T02:17:49.929Z", "date_only": false, "value": "2025-02-11T02:17:49.929979Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhulrapjs62e", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c14f7196-d7db-443c-85f9-77bf9283ba43", "url": "https://bsky.app/profile/hackingne.ws/post/3lhulrapjs62e"}, {"timestamp": "2025-02-11T07:00:00Z", "date_only": false, "value": "2025-02-11T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-037-04", "record": "ICSA-25-037-04", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-02-11T07:00:00Z", "date_only": false, "value": "2025-02-11T07:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-037-04", "record": "ICSA-25-037-04", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-11T07:40:21.504Z", "date_only": false, "value": "2025-02-11T07:40:21.504221Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/defendopsdiaries.bsky.social/post/3lhv5rvczfc2m", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "4e08d69a-5429-4bde-b92d-083ac16d60c5", "url": "https://bsky.app/profile/defendopsdiaries.bsky.social/post/3lhv5rvczfc2m"}, {"timestamp": "2025-02-11T15:12:54.406Z", "date_only": false, "value": "2025-02-11T15:12:54.406757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lhvwrixmra32", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e3e83ef1-ebc2-4df4-bad5-8fce252a0bef", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lhvwrixmra32"}, {"timestamp": "2025-02-12T09:42:32.672Z", "date_only": false, "value": "2025-02-12T09:42:32.672704Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lhxuzutam5d2", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "da7cf0c3-8548-41d8-97fc-a093dafdf415", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lhxuzutam5d2"}, {"timestamp": "2025-02-12T18:31:53.710Z", "date_only": false, "value": "2025-02-12T18:31:53.710322Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lhysdrk7fly2", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "17441e15-edad-4641-9c4d-9392a68001ee", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lhysdrk7fly2"}, {"timestamp": "2025-02-13T13:34:26.184Z", "date_only": false, "value": "2025-02-13T13:34:26.184910Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3li2salu3uqn2", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "90b94865-a409-4e83-9d7b-6cc76ebada99", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3li2salu3uqn2"}, {"timestamp": "2025-02-17T10:33:47.426Z", "date_only": false, "value": "2025-02-17T10:33:47.426522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liekbdef3k22", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "abf05260-eaf3-41f0-829a-54d4fcbb5cb7", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liekbdef3k22"}, {"timestamp": "2025-02-17T11:42:23.035Z", "date_only": false, "value": "2025-02-17T11:42:23.035977Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lienzwwcfpc2", "record": "cve-2025-0994", "field": "creation_timestamp", "uuid": "78561004-7a0f-4f5b-9fa5-ac6cef130edf", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lienzwwcfpc2"}, {"timestamp": "2025-02-17T11:46:09.982Z", "date_only": false, "value": "2025-02-17T11:46:09.982479Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lieoaymmovc2", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "b62936ac-52c2-4b92-a44b-28c03aedae36", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lieoaymmovc2"}, {"timestamp": "2025-02-17T15:30:14.782Z", "date_only": false, "value": "2025-02-17T15:30:14.782320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lif2tostku2i", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "242fa55a-91fd-4a56-8552-1cec2df71a0d", "url": "https://bsky.app/profile/bolhasec.com/post/3lif2tostku2i"}, {"timestamp": "2025-02-19T13:13:10.036Z", "date_only": false, "value": "2025-02-19T13:13:10.036989Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liju2yycmuj2", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "334a9a40-62b1-4998-a080-ad160f4bbae0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liju2yycmuj2"}, {"timestamp": "2025-02-19T18:03:41Z", "date_only": false, "value": "2025-02-19T18:03:41.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/v_obtuJovlPPc3IVpKBG-VbahabmU0YqxeTTH6GePtzDm88", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "bb82c368-fea7-4f8b-9ac5-a9e7a8eb7327"}, {"timestamp": "2025-02-20T03:19:23.864Z", "date_only": false, "value": "2025-02-20T03:19:23.864517Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lildf4vom22e", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e959c462-c0d9-4775-9b22-d1c6200d5129", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lildf4vom22e"}, {"timestamp": "2025-02-23T02:11:05Z", "date_only": false, "value": "2025-02-23T02:11:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "a30f4d45-6929-4687-b5cf-90b0f03b0f9c"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": true, "value": "2025-02-28", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-0994", "field": "evidence.0.details.due_date", "uuid": "1fae1176-c19d-45b9-9b09-196189b31f42", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-14T07:42:05.638Z", "date_only": false, "value": "2025-03-14T07:42:05.638971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lkd4dmbc2c2m", "record": "cve-2025-0994", "field": "creation_timestamp", "uuid": "65a72771-0a42-4f42-8ac2-bd72ac6a061e", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lkd4dmbc2c2m"}, {"timestamp": "2025-05-22T16:07:15.954Z", "date_only": false, "value": "2025-05-22T16:07:15.954313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lpriqgwye222", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "cae09256-6bd6-4933-8f13-9776a04a8bdd", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lpriqgwye222"}, {"timestamp": "2025-05-23T09:42:16.498Z", "date_only": false, "value": "2025-05-23T09:42:16.498308Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lptdowwwe22k", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "60872779-069e-444f-9364-6e58eb84d5e7", "url": "https://bsky.app/profile/nimblenerd.social/post/3lptdowwwe22k"}, {"timestamp": "2025-05-23T18:30:05Z", "date_only": false, "value": "2025-05-23T18:30:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7065", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "2e2d5fe1-0820-46df-9eb0-3f306376a2fa", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043a\u0430\u043a UAT-6382, \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u044b \u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0421\u0428\u0410 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u0432 Trimble Cityworks.\n\nCVE-2025-0994 (CVSS 8,6) \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Microsoft Internet Information Services (IIS) \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nCityworks - \u044d\u0442\u043e \u0413\u0418\u0421-\u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0435\u0441\u0442\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0432\u043b\u0430\u0441\u0442\u0438 \u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b, \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0412 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-0994 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Trimble \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 IoC, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 Cobalt Strike \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e, \u043d\u043e \u043d\u0438 Trimble, \u043d\u0438 CISA \u043d\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e \u0442\u043e\u043c, \u043a\u0442\u043e \u043d\u0435\u0441\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043a \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 UAT-6382, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 0-day \u0441 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u043c\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u0432\u043b\u0430\u0441\u0442\u0438 \u0432 \u0421\u0428\u0410.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 IoC \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0441 \u0442\u0435\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c Trimble.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u043b\u0443\u0433\u0430\u043c\u0438.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430 AntSword, \u0430 \u0442\u0430\u043a\u0436\u0435 Chinatso, Behinder \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041e\u043d\u0438 \u0441\u043e\u0441\u043a\u0430\u043d\u0438\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0432 \u0444\u0430\u0439\u043b\u044b, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 PowerShell.\n\nUAT-6382 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Rust, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 TetraLoader, \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043c\u0430\u044f\u043a\u043e\u0432 Cobalt Strike, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0435\u0439\u0434\u0436\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f VShell - \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 GoLang, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u0437\u0430\u0445\u0432\u0430\u0442 \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Talos, \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0441\u043b\u0435\u0434 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e MaLoader \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f TetraLoader, \u0440\u0443\u0447\u043d\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u0432\u0438\u043a\u0442\u0438\u043c\u043e\u043b\u043e\u0433\u0438\u0435\u0439 \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438.", "url": "https://t.me/true_secator/7065"}, {"timestamp": "2025-05-26T15:35:34.511Z", "date_only": false, "value": "2025-05-26T15:35:34.511037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lq3ite6n7c26", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c148d5b7-7d17-40e0-8b26-9dd40fde0738", "url": "https://bsky.app/profile/hackread.bsky.social/post/3lq3ite6n7c26"}, {"timestamp": "2025-05-26T15:39:27.259Z", "date_only": false, "value": "2025-05-26T15:39:27.259016Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lq3j2b4jjs2i", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e1a930f3-cbfb-490e-b429-82c4e7d12ca9", "url": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lq3j2b4jjs2i"}, {"timestamp": "2025-05-26T15:51:25.882Z", "date_only": false, "value": "2025-05-26T15:51:25.882863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lq3jpsngnd2l", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "97a3e073-7ee4-4080-a344-f058e253e271", "url": "https://bsky.app/profile/nimblenerd.social/post/3lq3jpsngnd2l"}, {"timestamp": "2025-05-27T18:04:43.426Z", "date_only": false, "value": "2025-05-27T18:04:43.426556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lq6bn3wdh22k", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "bc66e405-8888-462f-baa0-6bcd53b88a3e", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lq6bn3wdh22k"}, {"timestamp": "2025-05-27T23:50:31.059Z", "date_only": false, "value": "2025-05-27T23:50:31.059871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq6ux6ry3k2b", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "15e41a0b-6a57-4959-80a0-c35638bdc6d0", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq6ux6ry3k2b"}, {"timestamp": "2025-05-28T08:36:30.771Z", "date_only": false, "value": "2025-05-28T08:36:30.771529Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7sdpcj3s2m", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "0fe4bfe5-72a4-47f3-b127-50be9e8e5a2b", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7sdpcj3s2m"}, {"timestamp": "2025-05-28T08:52:03.824Z", "date_only": false, "value": "2025-05-28T08:52:03.824580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7t7jmrl22m", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c920b4b2-c854-4001-abfc-28536fbe27e5", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7t7jmrl22m"}, {"timestamp": "2025-08-15T19:53:25.658Z", "date_only": false, "value": "2025-08-15T19:53:25.658943Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0994", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-15T19:53:25.658Z", "date_only": false, "value": "2025-08-15T19:53:25.658943Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0994", "record": "FKIE_CVE-2025-0994", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-21T22:55:30.136Z", "date_only": false, "value": "2025-10-21T22:55:30.136Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-0994", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:30.136Z", "date_only": false, "value": "2025-10-21T22:55:30.136Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0994", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:12Z", "date_only": false, "value": "2025-10-22T00:33:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M5Q8-8X36-W25P", "record": "GHSA-M5Q8-8X36-W25P", "field": "modified"}, {"timestamp": "2026-02-02T12:26:14.588Z", "date_only": false, "value": "2026-02-02T12:26:14.588778Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d973e59-7467-42c2-9193-2431220a0d5a", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "3b2016a2-5af4-4cc7-809c-d4f1723480c2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d973e59-7467-42c2-9193-2431220a0d5a"}, {"timestamp": "2026-02-02T12:26:14.588Z", "date_only": false, "value": "2026-02-02T12:26:14.588778Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d973e59-7467-42c2-9193-2431220a0d5a", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "5f0985c9-9980-41b3-ad8e-8ebe45bde987", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d973e59-7467-42c2-9193-2431220a0d5a"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-0994", "field": "timestamps.recorded_at", "uuid": "1fae1176-c19d-45b9-9b09-196189b31f42", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:27:29.190Z", "date_only": false, "value": "2026-06-17T08:27:29.190", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0994", "record": "FKIE_CVE-2025-0994", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:27.824Z", "date_only": false, "value": "2026-06-19T12:46:27.824609Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ea70ee3f-2b2d-44e0-ba51-2933ccae955f", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "e1072a38-dada-4e6e-9e47-403cbda26b79", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ea70ee3f-2b2d-44e0-ba51-2933ccae955f"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-0994", "field": "timestamps.recorded_at", "uuid": "4542689d-83fc-4096-96d1-92953fa3594f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:32.884Z", "date_only": false, "value": "2026-06-23T11:14:32.884630Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4542689d-83fc-4096-96d1-92953fa3594f", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "438e306e-33df-4212-b9f6-a33471e0674a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4542689d-83fc-4096-96d1-92953fa3594f"}, {"timestamp": "2026-06-23T14:06:04.554Z", "date_only": false, "value": "2026-06-23T14:06:04.554296Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2bb2c20e-eb90-410b-8606-4691a9facf7d", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "69069fce-9469-4f67-b827-d6824eeeac8a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2bb2c20e-eb90-410b-8606-4691a9facf7d"}, {"timestamp": "2026-07-20T21:00:06.481Z", "date_only": false, "value": "2026-07-20T21:00:06.481431Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1074", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "363da2b6-9de2-4d36-9c8f-74dcdf1dfc8b", "url": "https://t.me/crackvaultde/1074"}, {"timestamp": "2026-07-21T00:00:18.313Z", "date_only": false, "value": "2026-07-21T00:00:18.313049Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1074", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "b9e99758-d11a-4d54-b16d-8cee3b088c6f", "url": "https://t.me/crackvaultde/1074"}, {"timestamp": "2026-07-22T00:00:33.845Z", "date_only": false, "value": "2026-07-22T00:00:33.845677Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/crackvaultde/1074", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "7b86be80-92c4-4e92-ae0e-ded4d20c659b", "url": "https://t.me/crackvaultde/1074"}, {"timestamp": "2026-07-22T05:00:05.774Z", "date_only": false, "value": "2026-07-22T05:00:05.774176Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/477", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "eadd7856-e4dc-47f4-a1dd-d51e05bea999", "url": "https://t.me/pphm_HackerNews/477"}, {"timestamp": "2026-07-23T00:00:24.093Z", "date_only": false, "value": "2026-07-23T00:00:24.093852Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/477", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "049de5b3-162a-46d7-afda-770094381e72", "url": "https://t.me/pphm_HackerNews/477"}, {"timestamp": "2026-07-25T15:00:18.431Z", "date_only": false, "value": "2026-07-25T15:00:18.431036Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/419", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c66c7171-6b73-460d-83f1-2a4ccf52cace", "url": "https://t.me/ZerodayAlert/419"}, {"timestamp": "2026-07-26T00:00:42.743Z", "date_only": false, "value": "2026-07-26T00:00:42.743195Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/419", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "3eaa7e0f-4019-4715-9f36-62a089250963", "url": "https://t.me/ZerodayAlert/419"}, {"timestamp": "2026-08-06T05:00:05.768Z", "date_only": false, "value": "2026-08-06T05:00:05.768795Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/419", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "c06279f6-834b-46db-ac3e-f697ae569702", "url": "https://t.me/ZerodayAlert/419"}, {"timestamp": "2026-08-07T00:30:18.349Z", "date_only": false, "value": "2026-08-07T00:30:18.349058Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/419", "record": "CVE-2025-0994", "field": "creation_timestamp", "uuid": "d7fdc8cb-9584-488a-a75a-4d914b71840c", "url": "https://t.me/ZerodayAlert/419"}]}