{"metadata": {"vulnerability": "CVE-2025-11837", "count": 25, "kinds": {"milestone": 6, "sighting": 9, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-10-16T05:24:28.428Z", "date_only": false, "value": "2025-10-16T05:24:28.428Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-11837", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": true, "value": "2025-11-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0981", "record": "CERTFR-2025-AVI-0981", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": false, "value": "2025-11-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0981", "record": "CERTFR-2025-AVI-0981", "field": "last_revision_date"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": false, "value": "2025-11-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0981", "record": "CERTFR-2025-AVI-0981", "field": "initial_release_date"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": false, "value": "2025-11-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0981", "record": "CERTFR-2025-AVI-0981", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-30T05:34:04Z", "date_only": false, "value": "2025-12-30T05:34:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1382", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "e015b3c8-266e-42c5-ba1e-6c76ae609ef3", "content": "\ud83d\ude06QNAP\u0647\u0641\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u0631\u0627 \u067e\u0633 \u0627\u0632 \u0646\u0645\u0627\u06cc\u0634 \u062f\u0631 \u0645\u0633\u0627\u0628\u0642\u0627\u062a Pwn2Own 2025 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\n\nQNAP\u060c \u062a\u0648\u0644\u06cc\u062f\u06a9\u0646\u0646\u062f\u0647 \u062a\u0627\u06cc\u0648\u0627\u0646\u06cc\u060c \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0641\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u0631\u0627 \u06a9\u0647 \u062f\u0631 \u0645\u0633\u0627\u0628\u0642\u0627\u062a Pwn2Own \u0627\u06cc\u0631\u0644\u0646\u062f 2025 \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u0648\u0635\u0644\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u0647 \u062a\u0646\u0647\u0627 \u06cc\u06a9 \u0645\u062d\u0635\u0648\u0644\u060c \u0628\u0644\u06a9\u0647 \u06a9\u0644 \u0627\u06a9\u0648\u0633\u06cc\u0633\u062a\u0645 \u06a9\u06cc\u0648 \u0627\u0646 \u0627\u06cc \u067e\u06cc\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 QTS\u060c QuTS hero\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u200c\u06af\u06cc\u0631\u06cc (HBS 3 Hybrid Backup Sync)\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u062d\u0641\u0627\u0638\u062a \u0627\u0632 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 (Hyper Data Protector) \u0648 \u062d\u062a\u06cc \u0627\u0633\u06a9\u0646\u0631 \u0622\u0646\u062a\u06cc \u0648\u06cc\u0631\u0648\u0633 (Malware Remover) \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f.\n\n\ud83d\udee1 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 (\u0646\u06cc\u0627\u0632\u0645\u0646\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc):\n\n\u25aa\ufe0fHyper Data Protector: \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u06f2.\u06f2.\u06f4.\u06f1 (CVE-2025-59389)\n\u25aa\ufe0fMalware Remover: \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u06f6.\u06f6.\u06f8.\u06f2\u06f0\u06f2\u06f5\u06f1\u06f0\u06f2\u06f3 (CVE-2025-11837)\n\u25aa\ufe0fHBS 3 Hybrid Backup Sync: \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u06f2\u06f6.\u06f2.\u06f0.\u06f9\u06f3\u06f8 (CVE-2025-62840\u060c CVE-2025-62842)\n\u25aa\ufe0fQTS 5.2.7: \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u0633\u0627\u062e\u062a \u06f2\u06f0\u06f2\u06f5\u06f1\u06f0\u06f2\u06f4 (CVE-2025-62847\u060c CVE-2025-62848\u060c CVE-2025-62849)\n\u25aa\ufe0fQuTS hero h5.2.7: \u0647\u0645\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u0633\u0627\u062e\u062a \u06f2\u06f0\u06f2\u06f5\u06f1\u06f0\u06f2\u06f4 (CVE-2025-62847\u060c CVE-2025-62848\u060c CVE-2025-62849)\n\u25aa\ufe0fQuTS hero h5.3.1: \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 \u0633\u0627\u062e\u062a \u06f2\u06f0\u06f2\u06f5\u06f1\u06f0\u06f2\u06f4 (CVE-2025-62847\u060c CVE-2025-62848\u060c CVE-2025-62849)\n\n\u0647\u0631 \u0647\u0641\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 \u062a\u06cc\u0645 Summoning\u060c DEVCORE\u060c \u062a\u06cc\u0645 DDOS \u0648 \u06cc\u06a9 \u06a9\u0627\u0631\u0622\u0645\u0648\u0632 \u0627\u0632 CyCraft technology \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udc46QNAP \u0627\u06a9\u06cc\u062f\u0627\u064b \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec \u0628\u067e\u06cc\u0648\u0646\u062f\u06cc\u062f:\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t", "url": "https://t.me/ics_cert/1382"}, {"timestamp": "2026-01-02T15:51:28.839Z", "date_only": false, "value": "2026-01-02T15:51:28.839Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-11837", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-01-02T15:51:28.839Z", "date_only": false, "value": "2026-01-02T15:51:28.839Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / qnap", "record": "CVE-2025-11837", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-02T16:15:48Z", "date_only": false, "value": "2026-01-02T16:15:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-92W4-HF76-4GWF", "record": "GHSA-92W4-HF76-4GWF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-01-02T16:15:48.403Z", "date_only": false, "value": "2026-01-02T16:15:48.403", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11837", "record": "FKIE_CVE-2025-11837", "field": "published"}, {"timestamp": "2026-01-02T16:38:09.435Z", "date_only": false, "value": "2026-01-02T16:38:09.435571Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/115826484118955550", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "c14256ff-f601-448e-b7bd-e510fcae105b", "url": "https://infosec.exchange/users/vuldb/statuses/115826484118955550"}, {"timestamp": "2026-01-02T18:30:28Z", "date_only": false, "value": "2026-01-02T18:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-92W4-HF76-4GWF", "record": "GHSA-92W4-HF76-4GWF", "field": "published"}, {"timestamp": "2026-01-02T18:54:45Z", "date_only": false, "value": "2026-01-02T18:54:45.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ixvst1zhHfk7lK_UhI5B29IE_UYLZOT2b0wkW9xa8GvuAtM", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "683d066c-5cda-4d54-8051-f6f1960c511f"}, {"timestamp": "2026-01-02T21:56:46Z", "date_only": false, "value": "2026-01-02T21:56:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VT6__BfG-NV3TfbCsF7d29L1QsNikCty5LjazQa3RLsn_wI", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "6fab6303-4983-4ea2-a38a-5adde9fb7d63"}, {"timestamp": "2026-01-02T21:56:58Z", "date_only": false, "value": "2026-01-02T21:56:58.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/guHHmyvoy-6slTWOk0lscaybhLQRVuwB2X4Pgg0KWuUC6I8", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "6e3516d2-c2af-46a4-bcf9-77b29e699ac6"}, {"timestamp": "2026-01-05T20:33:37.598Z", "date_only": false, "value": "2026-01-05T20:33:37.598770Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11837", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-05T20:33:37.598Z", "date_only": false, "value": "2026-01-05T20:33:37.598770Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11837", "record": "FKIE_CVE-2025-11837", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-05T20:38:25.200Z", "date_only": false, "value": "2026-01-05T20:38:25.200Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-11837", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-05T20:38:25.200Z", "date_only": false, "value": "2026-01-05T20:38:25.200Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11837", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-22T18:30:29Z", "date_only": false, "value": "2026-01-22T18:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-92W4-HF76-4GWF", "record": "GHSA-92W4-HF76-4GWF", "field": "modified"}, {"timestamp": "2026-06-17T08:31:15.370Z", "date_only": false, "value": "2026-06-17T08:31:15.370", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11837", "record": "FKIE_CVE-2025-11837", "field": "lastModified"}, {"timestamp": "2026-06-22T03:33:58.569Z", "date_only": false, "value": "2026-06-22T03:33:58.569058Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3motxbzt5uj2u", "record": "cve-2025-11837", "field": "creation_timestamp", "uuid": "dfe7939d-4a9f-4db4-8c1e-91f0c5b1ec34", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3motxbzt5uj2u"}, {"timestamp": "2026-06-26T13:15:07.370Z", "date_only": false, "value": "2026-06-26T13:15:07.370847Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/06/cert-se-veckobrev-v26.html", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "6a6eab21-e178-43da-96a0-0e635575b35a", "url": "https://www.cert.se/2026/06/cert-se-veckobrev-v26.html"}, {"timestamp": "2026-09-02T06:00:17.305Z", "date_only": false, "value": "2026-09-02T06:00:17.305865Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Russian_OSINT/7369", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "cdf69f95-2747-4c38-bfd7-5d803121eb4b", "url": "https://t.me/Russian_OSINT/7369"}, {"timestamp": "2026-09-03T00:00:45.891Z", "date_only": false, "value": "2026-09-03T00:00:45.891847Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Russian_OSINT/7369", "record": "CVE-2025-11837", "field": "creation_timestamp", "uuid": "a5156f45-4e10-4887-bc19-d3dd592739dc", "url": "https://t.me/Russian_OSINT/7369"}]}