{"metadata": {"vulnerability": "CVE-2025-22457", "count": 314, "kinds": {"milestone": 8, "sighting": 267, "kev": 15, "other": 24}}, "data": [{"timestamp": "2025-01-07T02:19:22.796Z", "date_only": false, "value": "2025-01-07T02:19:22.796Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-22457", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0105", "record": "NCSC-2025-0105", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0273", "record": "CERTFR-2025-AVI-0273", "field": "last_revision_date"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": true, "value": "2025-04-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0273", "record": "CERTFR-2025-AVI-0273", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-22457", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-22457", "record": "FKIE_CVE-2025-22457", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-003", "record": "CERTFR-2025-ALE-003", "field": "revisions.2.revision_date"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0273", "record": "CERTFR-2025-AVI-0273", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-03T14:19:37.560Z", "date_only": false, "value": "2025-04-03T14:19:37.560619Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0105", "record": "NCSC-2025-0105", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-03T14:19:37.560Z", "date_only": false, "value": "2025-04-03T14:19:37.560619Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0105", "record": "NCSC-2025-0105", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-03T14:19:37.560Z", "date_only": false, "value": "2025-04-03T14:19:37.560619Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0105", "record": "NCSC-2025-0105", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-03T14:22:18.432Z", "date_only": false, "value": "2025-04-03T14:22:18.432321Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rcinghio.bsky.social/post/3llw3znpsvc2d", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5bf14f74-662b-4961-b6cb-7dc956c189e3", "url": "https://bsky.app/profile/rcinghio.bsky.social/post/3llw3znpsvc2d"}, {"timestamp": "2025-04-03T14:24:04Z", "date_only": false, "value": "2025-04-03T14:24:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_9/2025", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "0fcd0276-ca8b-4fd1-92d1-41bf81fe6a4b", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_9/2025"}, {"timestamp": "2025-04-03T14:38:36.684Z", "date_only": false, "value": "2025-04-03T14:38:36.684927Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/114274540992962057", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b6bd2603-a234-4d8c-a764-99d3e9cdef94", "url": "https://infosec.exchange/users/decio/statuses/114274540992962057"}, {"timestamp": "2025-04-03T14:38:36.686Z", "date_only": false, "value": "2025-04-03T14:38:36.686809Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/114274540992962057", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "06a79a12-23bb-493c-8916-adacc2a8e153", "url": "https://infosec.exchange/users/decio/statuses/114274540992962057"}, {"timestamp": "2025-04-03T14:39:31.880Z", "date_only": false, "value": "2025-04-03T14:39:31.880738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3llw4yhpjym22", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f699ac9d-ce20-40fd-ad9f-5495b29b0fa1", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3llw4yhpjym22"}, {"timestamp": "2025-04-03T15:10:24.783Z", "date_only": false, "value": "2025-04-03T15:10:24.783772Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/moksec.fi/post/3llw6pmsxvc2w", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "759cf11f-6100-41bb-b2eb-a971c3baaa2e", "url": "https://bsky.app/profile/moksec.fi/post/3llw6pmsxvc2w"}, {"timestamp": "2025-04-03T15:17:32Z", "date_only": false, "value": "2025-04-03T15:17:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/04/03/chinese-apt-pounces-on-misdiagnosed.html", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cfc2c794-4216-4339-b7b9-5c49500ad4d5", "url": "https://threatintel.cc/2025/04/03/chinese-apt-pounces-on-misdiagnosed.html"}, {"timestamp": "2025-04-03T15:20:23.628Z", "date_only": false, "value": "2025-04-03T15:20:23.628Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-22457", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-03T15:20:23.628Z", "date_only": false, "value": "2025-04-03T15:20:23.628Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ivanti", "record": "CVE-2025-22457", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-03T15:30:12.262Z", "date_only": false, "value": "2025-04-03T15:30:12.262447Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allthebuzz.bsky.social/post/3llw7szuqw22u", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f9042f08-bbb5-437e-b319-f46f3628036f", "url": "https://bsky.app/profile/allthebuzz.bsky.social/post/3llw7szuqw22u"}, {"timestamp": "2025-04-03T15:35:10Z", "date_only": false, "value": "2025-04-03T15:35:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10253", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5f6261f2-8894-4cae-bfaf-3afaf6f647f9", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22457\n\ud83d\udd25 CVSS Score: 9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.\n\ud83d\udccf Published: 2025-04-03T15:20:23.628Z\n\ud83d\udccf Modified: 2025-04-03T15:20:23.628Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457", "url": "https://t.me/DarkWebInformer_CVEAlerts/10253"}, {"timestamp": "2025-04-03T15:45:51.436Z", "date_only": false, "value": "2025-04-03T15:45:51.436490Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114274805391775814", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "dfa7d9bd-5c65-46a5-8922-732054923779", "url": "https://infosec.exchange/users/cR0w/statuses/114274805391775814"}, {"timestamp": "2025-04-03T15:45:51.452Z", "date_only": false, "value": "2025-04-03T15:45:51.452316Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114274805391775814", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "1591f7f4-62f7-4707-92b6-3191ed859177", "url": "https://infosec.exchange/users/cR0w/statuses/114274805391775814"}, {"timestamp": "2025-04-03T16:15:35Z", "date_only": false, "value": "2025-04-03T16:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JJR5-FPCG-GC53", "record": "GHSA-JJR5-FPCG-GC53", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-03T16:15:35.370Z", "date_only": false, "value": "2025-04-03T16:15:35.370", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-22457", "record": "FKIE_CVE-2025-22457", "field": "published"}, {"timestamp": "2025-04-03T16:21:21.248Z", "date_only": false, "value": "2025-04-03T16:21:21.248988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llwco5dvqxy2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "68557d2f-19b7-493d-b50b-4802ca31af97", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llwco5dvqxy2"}, {"timestamp": "2025-04-03T16:26:44.650Z", "date_only": false, "value": "2025-04-03T16:26:44.650963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bigbadw0lf.bsky.social/post/3llwcy5g57c2l", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "495e0b8d-1131-4c75-bde0-6d15f2286bc9", "url": "https://bsky.app/profile/bigbadw0lf.bsky.social/post/3llwcy5g57c2l"}, {"timestamp": "2025-04-03T16:35:08.055Z", "date_only": false, "value": "2025-04-03T16:35:08.055451Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariorojaschin.bsky.social/post/3llwdh2bsrk2j", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c791bdd2-73bd-49f1-bb9a-b405a26304a3", "url": "https://bsky.app/profile/mariorojaschin.bsky.social/post/3llwdh2bsrk2j"}, {"timestamp": "2025-04-03T16:40:23.073Z", "date_only": false, "value": "2025-04-03T16:40:23.073456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llwdqkv2pf2v", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "4b091d58-51b8-487c-a79b-bd2183abba45", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llwdqkv2pf2v"}, {"timestamp": "2025-04-03T16:58:21.081Z", "date_only": false, "value": "2025-04-03T16:58:21.081042Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3llweqoql7c22", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c5442d0d-619c-4710-804d-634be5ca4ee5", "url": "https://bsky.app/profile/cert-fr.bsky.social/post/3llweqoql7c22"}, {"timestamp": "2025-04-03T17:06:08.822Z", "date_only": false, "value": "2025-04-03T17:06:08.822791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3llwf6le6fs2r", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "1e321b60-d283-4b0e-b1bc-61c42f478c83", "url": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3llwf6le6fs2r"}, {"timestamp": "2025-04-03T17:14:37.503Z", "date_only": false, "value": "2025-04-03T17:14:37.503484Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ethicalhack3r.bsky.social/post/3llwfnqezfk2f", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cac41537-769c-4813-a4b9-a31bfb0655ea", "url": "https://bsky.app/profile/ethicalhack3r.bsky.social/post/3llwfnqezfk2f"}, {"timestamp": "2025-04-03T17:43:15.832Z", "date_only": false, "value": "2025-04-03T17:43:15.832903Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3llwhaxvh2r2k", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a9f39875-40f0-4f19-afee-c3889e8d3487", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3llwhaxvh2r2k"}, {"timestamp": "2025-04-03T17:48:27.105Z", "date_only": false, "value": "2025-04-03T17:48:27.105340Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114275287438692806", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d66d9bec-b91b-441d-9b01-cf2f9ce155b6", "url": "https://mastodon.social/users/CyberSignaler/statuses/114275287438692806"}, {"timestamp": "2025-04-03T17:48:27.106Z", "date_only": false, "value": "2025-04-03T17:48:27.106911Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114275287438692806", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "05e00fbe-802d-44b4-a913-7abeec8a9e61", "url": "https://mastodon.social/users/CyberSignaler/statuses/114275287438692806"}, {"timestamp": "2025-04-03T17:54:32.376Z", "date_only": false, "value": "2025-04-03T17:54:32.376918Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3llwhv6ae5l2p", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "19aefec2-bbc4-432f-9288-c342b8221e3a", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3llwhv6ae5l2p"}, {"timestamp": "2025-04-03T17:56:08.849Z", "date_only": false, "value": "2025-04-03T17:56:08.849029Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3llwhxtwxw22m", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "211e18d2-a8c9-4943-bad6-2208adfc46be", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3llwhxtwxw22m"}, {"timestamp": "2025-04-03T18:06:04.131Z", "date_only": false, "value": "2025-04-03T18:06:04.131792Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114275356652135088", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "3da8cbbf-6a68-4431-92d2-55934b43815a", "url": "https://infosec.exchange/users/wdormann/statuses/114275356652135088"}, {"timestamp": "2025-04-03T18:06:04.133Z", "date_only": false, "value": "2025-04-03T18:06:04.133565Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114275356652135088", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "eb9fdb39-6db3-4a5c-8cd3-497a55cd5081", "url": "https://infosec.exchange/users/wdormann/statuses/114275356652135088"}, {"timestamp": "2025-04-03T18:06:15.626Z", "date_only": false, "value": "2025-04-03T18:06:15.626761Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3llwijsidy5k2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "77ab75b7-545a-40b5-9391-3fda830829e4", "url": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3llwijsidy5k2"}, {"timestamp": "2025-04-03T18:16:47.436Z", "date_only": false, "value": "2025-04-03T18:16:47.436995Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3llwj4xftgd27", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "93b95ced-a31f-4f5d-9a79-c05a78bb436b", "url": "https://bsky.app/profile/hackingne.ws/post/3llwj4xftgd27"}, {"timestamp": "2025-04-03T18:30:58Z", "date_only": false, "value": "2025-04-03T18:30:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JJR5-FPCG-GC53", "record": "GHSA-JJR5-FPCG-GC53", "field": "published"}, {"timestamp": "2025-04-03T18:32:56.740Z", "date_only": false, "value": "2025-04-03T18:32:56.740885Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llwjztq4pq2i", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b86e8916-a6ca-4ade-b3aa-89390ca5e51e", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llwjztq4pq2i"}, {"timestamp": "2025-04-03T18:47:01.385Z", "date_only": false, "value": "2025-04-03T18:47:01.385555Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llwkszbu4o2e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "35ffd581-3ac5-4b8e-b428-89a32ed14a2d", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3llwkszbu4o2e"}, {"timestamp": "2025-04-03T18:50:42Z", "date_only": false, "value": "2025-04-03T18:50:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_News/2774", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a4a5cbd0-ec05-4024-93f8-544a360a60db", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-22457: April Security Advisory Ivanti Connect Secure, Policy Secure & ZTA Gateways (CVE-2025-22457)\nLink: https://darkwebinformer.com/cve-2025-22457-april-security-advisory-ivanti-connect-secure-policy-secure-zta-gateways-cve-2025-22457/", "url": "https://t.me/DarkWebInformer_News/2774"}, {"timestamp": "2025-04-03T18:51:08.544Z", "date_only": false, "value": "2025-04-03T18:51:08.544748Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114275533789609826", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "80e3b318-d67f-470c-8ed5-18debc9336c7", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114275533789609826"}, {"timestamp": "2025-04-03T18:51:08.546Z", "date_only": false, "value": "2025-04-03T18:51:08.546057Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114275533789609826", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "0bd3567e-b92c-42a3-8386-7b0a62706374", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114275533789609826"}, {"timestamp": "2025-04-03T18:51:12.358Z", "date_only": false, "value": "2025-04-03T18:51:12.358818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3llwl2g6z222e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ab94c1ca-9593-4c11-9e1d-b38d0ba62b15", "url": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3llwl2g6z222e"}, {"timestamp": "2025-04-03T18:52:47.868Z", "date_only": false, "value": "2025-04-03T18:52:47.868796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llwl5dgsid2v", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c57209c5-3314-4812-a2b5-840980e23f58", "url": "https://bsky.app/profile/aakl.bsky.social/post/3llwl5dgsid2v"}, {"timestamp": "2025-04-03T18:55:33.954Z", "date_only": false, "value": "2025-04-03T18:55:33.954909Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rapid7.com/post/3llwlca2y522x", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "bcd6e43a-4501-4050-afc9-f3735405a4a0", "url": "https://bsky.app/profile/rapid7.com/post/3llwlca2y522x"}, {"timestamp": "2025-04-03T18:57:10.215Z", "date_only": false, "value": "2025-04-03T18:57:10.215043Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114275557601801461", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a0badfce-ecb5-48ba-93e0-e2812a2fba95", "url": "https://infosec.exchange/users/wdormann/statuses/114275557601801461"}, {"timestamp": "2025-04-03T18:57:10.217Z", "date_only": false, "value": "2025-04-03T18:57:10.217764Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114275557601801461", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a5afa1d1-16b8-4692-9eca-39760e3e419d", "url": "https://infosec.exchange/users/wdormann/statuses/114275557601801461"}, {"timestamp": "2025-04-03T18:59:10.006Z", "date_only": false, "value": "2025-04-03T18:59:10.006974Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3llwlgr7vmn42", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "4f75de04-193c-41e7-91f4-5dfbeeaddfff", "url": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3llwlgr7vmn42"}, {"timestamp": "2025-04-03T19:06:23.480Z", "date_only": false, "value": "2025-04-03T19:06:23.480445Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llwlvmjqqe2w", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "794d9cfd-33e1-4b4b-89f1-90ce5d2be90a", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3llwlvmjqqe2w"}, {"timestamp": "2025-04-03T19:13:09.922Z", "date_only": false, "value": "2025-04-03T19:13:09.922024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3llwmbm6tuc24", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "856fde6c-b881-4c95-9784-4e8851c3b2e8", "url": "https://bsky.app/profile/modat-io.bsky.social/post/3llwmbm6tuc24"}, {"timestamp": "2025-04-03T19:16:59.191Z", "date_only": false, "value": "2025-04-03T19:16:59.191781Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114275635613940623", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "2d981ceb-ed40-4739-9a23-07f205e0a69e", "url": "https://infosec.exchange/users/threatcodex/statuses/114275635613940623"}, {"timestamp": "2025-04-03T19:16:59.194Z", "date_only": false, "value": "2025-04-03T19:16:59.194525Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114275635613940623", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a193247d-5f44-413d-ae52-fb9089d5cbd5", "url": "https://infosec.exchange/users/threatcodex/statuses/114275635613940623"}, {"timestamp": "2025-04-03T19:25:02Z", "date_only": false, "value": "2025-04-03T19:25:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21995", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5c765a48-4e24-429f-af51-bcacae38b45c", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-22457 - Ivanti Connect Secure Remote Code Execution Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-22457 \nPublished : April 3, 2025, 4:15 p.m. | 47\u00a0minutes ago \nDescription : A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21995"}, {"timestamp": "2025-04-03T20:50:49Z", "date_only": false, "value": "2025-04-03T20:50:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TheDarkWebInformer/15655", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d3286381-a89f-4204-8206-18a7d7f80585", "content": "\ud83d\udea8CVE-2025-22457: April Security Advisory Ivanti Connect Secure, Policy Secure & ZTA Gateways (CVE-2025-22457)\n\nCVSS: 9.0\n\nhttps://darkwebinformer.com/cve-2025-22457-april-security-advisory-ivanti-connect-secure-policy-secure-zta-gateways-cve-2025-22457/", "url": "https://t.me/TheDarkWebInformer/15655"}, {"timestamp": "2025-04-03T22:00:00Z", "date_only": false, "value": "2025-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0703", "record": "WID-SEC-W-2025-0703", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-03T22:00:00Z", "date_only": false, "value": "2025-04-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0703", "record": "WID-SEC-W-2025-0703", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-03T22:00:00Z", "date_only": false, "value": "2025-04-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0703", "record": "WID-SEC-W-2025-0703", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-03T22:00:00Z", "date_only": false, "value": "2025-04-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0703", "record": "WID-SEC-W-2025-0703", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-03T23:23:40.055Z", "date_only": false, "value": "2025-04-03T23:23:40.055302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3llx2bkk6rc2l", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cad96bb2-9af4-4b43-b976-68b72b6dedc7", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3llx2bkk6rc2l"}, {"timestamp": "2025-04-03T23:23:57.587Z", "date_only": false, "value": "2025-04-03T23:23:57.587617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llx27szvyxy2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f4087052-9790-4fa9-9646-37161cb6fb35", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llx27szvyxy2"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-22457", "field": "timestamps.asserted_at", "uuid": "49b7bb50-2bbe-4cf1-9519-9011a43f4b63", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-22457", "field": "timestamps.asserted_at", "uuid": "133b328d-4cdb-4462-8795-e3c2399051b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": true, "value": "2025-04-04", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-22457", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-22457", "field": "evidence.0.details.added_date", "uuid": "133b328d-4cdb-4462-8795-e3c2399051b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": true, "value": "2025-04-04", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-22457", "field": "evidence.0.details.date_added", "uuid": "49b7bb50-2bbe-4cf1-9519-9011a43f4b63", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-22457", "field": "timestamps.first_seen_at", "uuid": "49b7bb50-2bbe-4cf1-9519-9011a43f4b63", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-22457", "field": "timestamps.first_seen_at", "uuid": "133b328d-4cdb-4462-8795-e3c2399051b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-003", "record": "CERTFR-2025-ALE-003", "field": "initial_release_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-003", "record": "CERTFR-2025-ALE-003", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-22457", "field": "status.status_updated_at", "uuid": "49b7bb50-2bbe-4cf1-9519-9011a43f4b63", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-22457", "field": "status.status_updated_at", "uuid": "133b328d-4cdb-4462-8795-e3c2399051b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-22457", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-04-04T00:24:55.376Z", "date_only": false, "value": "2025-04-04T00:24:55.376061Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3llx5p5nb2o2e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "56e9165b-517f-4b2d-bcdb-9249aff9e982", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3llx5p5nb2o2e"}, {"timestamp": "2025-04-04T00:38:36Z", "date_only": false, "value": "2025-04-04T00:38:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/04/03/ivanti-patches-connect-secure-zeroday.html", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "92411755-7c1e-4629-ae46-932257c123d6", "url": "https://threatintel.cc/2025/04/03/ivanti-patches-connect-secure-zeroday.html"}, {"timestamp": "2025-04-04T00:53:52.450Z", "date_only": false, "value": "2025-04-04T00:53:52.450792Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3llx7cynyzc2e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "aaf7d2eb-482e-4ae6-a5e6-176bd5db5676", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3llx7cynyzc2e"}, {"timestamp": "2025-04-04T01:56:03.628Z", "date_only": false, "value": "2025-04-04T01:56:03.628861Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3llxcs4xiul2z", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "e25234ff-8730-4076-a9ea-325ebc410329", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3llxcs4xiul2z"}, {"timestamp": "2025-04-04T02:12:41.367Z", "date_only": false, "value": "2025-04-04T02:12:41.367676Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llxdpwjlkr2n", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cfb5960e-0bf4-472d-a2e9-39bb05da7d77", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3llxdpwjlkr2n"}, {"timestamp": "2025-04-04T03:18:09.639Z", "date_only": false, "value": "2025-04-04T03:18:09.639444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llxhevqy7c23", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "e63faad1-49b1-4b11-a274-4c29a876d3fd", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llxhevqy7c23"}, {"timestamp": "2025-04-04T03:19:38.362Z", "date_only": false, "value": "2025-04-04T03:19:38.362350Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llxhhlrq3s23", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "40028a3a-6245-4b86-9b6f-33e3eb7ecffa", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llxhhlrq3s23"}, {"timestamp": "2025-04-04T03:20:56.270Z", "date_only": false, "value": "2025-04-04T03:20:56.270893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llxhjrqkoc23", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ca8bb400-afce-4945-a4c1-009c5dbc12a0", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llxhjrqkoc23"}, {"timestamp": "2025-04-04T03:40:14.003Z", "date_only": false, "value": "2025-04-04T03:40:14.003117Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3llximho6xp2f", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c5f5965b-8354-4da4-a3c7-1aeeefbadc7c", "url": "https://bsky.app/profile/osanpo.bsky.social/post/3llximho6xp2f"}, {"timestamp": "2025-04-04T04:07:00Z", "date_only": false, "value": "2025-04-04T04:07:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/04/critical-ivanti-flaw-actively-exploited.html", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "79a2f378-0e43-46d9-8e28-03c3cfb7b640", "url": "https://thehackernews.com/2025/04/critical-ivanti-flaw-actively-exploited.html"}, {"timestamp": "2025-04-04T04:23:47.921Z", "date_only": false, "value": "2025-04-04T04:23:47.921195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3llxl2eix6424", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "1af87394-2e5b-49fb-b567-27bddc94393a", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3llxl2eix6424"}, {"timestamp": "2025-04-04T05:46:19.691Z", "date_only": false, "value": "2025-04-04T05:46:19.691370Z", "kind": "sighting", "label": "Seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114278110029673028", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "af0419c5-a795-481d-bcce-b5c019817a16", "url": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114278110029673028"}, {"timestamp": "2025-04-04T05:46:19.692Z", "date_only": false, "value": "2025-04-04T05:46:19.692547Z", "kind": "sighting", "label": "Seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114278110029673028", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ddc50c0f-584d-402b-a190-26c7be6f718c", "url": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114278110029673028"}, {"timestamp": "2025-04-04T06:17:37.802Z", "date_only": false, "value": "2025-04-04T06:17:37.802613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3llxrfvy4ha2y", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d94025a2-e8cd-4916-9ac8-45aab185d533", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3llxrfvy4ha2y"}, {"timestamp": "2025-04-04T06:27:16.146Z", "date_only": false, "value": "2025-04-04T06:27:16.146032Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3llxrx54rx62x", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ace4befa-6cee-44f3-904c-4bfa146c0c45", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3llxrx54rx62x"}, {"timestamp": "2025-04-04T06:28:06.482Z", "date_only": false, "value": "2025-04-04T06:28:06.482749Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llxrymy5xc2z", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "73afb1fd-981d-45ab-a26d-7a0b06d85af8", "url": "https://bsky.app/profile/nimblenerd.social/post/3llxrymy5xc2z"}, {"timestamp": "2025-04-04T08:11:07Z", "date_only": false, "value": "2025-04-04T08:11:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6613", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a19a50e5-cf64-4b14-ac24-04065749a73f", "content": "\ud83d\udd25 New Ivanti ZERO-DAY exploited in the wild \u2014 China-linked UNC5221 hits Connect Secure (CVE-2025-22457, CVSS 9.0).\n\n\ud83d\udca3 Exploits spotted mid-March by Mandiant.\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0fMalware: TRAILBLAZE, BRUSHFIRE, SPAWN.\n\ud83c\udfaf Persistence. Credential theft. Data exfiltration.\n\n\u26a1 Patch now | See full story + urgent guidance: https://thehackernews.com/2025/04/critical-ivanti-flaw-actively-exploited.html", "url": "https://t.me/thehackernews/6613"}, {"timestamp": "2025-04-04T08:15:50.959Z", "date_only": false, "value": "2025-04-04T08:15:50.959713Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3llxxzcbdvk2p", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "30c09682-8dfb-47fa-8b58-256a557726f9", "url": "https://bsky.app/profile/shiojiri.com/post/3llxxzcbdvk2p"}, {"timestamp": "2025-04-04T08:29:36.979Z", "date_only": false, "value": "2025-04-04T08:29:36.979638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llxyrtafhs2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "2ce23052-b2a5-4095-8160-02a21a9294d1", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3llxyrtafhs2s"}, {"timestamp": "2025-04-04T09:21:40Z", "date_only": false, "value": "2025-04-04T09:21:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5714", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b4d4037c-9c16-4c1e-91ec-e1a19d1017d6", "content": "\u200b\u26a1\ufe0fIvanti: \u00ab\u041c\u044b \u0432\u0441\u0451 \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438\u00bb. UNC5221: \u00ab\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0437\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e\u00bb\n\n\ud83d\udcac Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0448\u043b\u044e\u0437\u0430\u0445 Connect Secure.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 CVE-2025-22457 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.0) \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0438\u0431\u0435\u0440 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430. \u041f\u043e \u0438 \u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Google \u0438 Mandiant, \u0430\u0442\u0430\u043a\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 UNC5221, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u043d\u0435\u0435 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 Zero-Day \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti.\n\n\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 (buffer overflow) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Pulse Connect Secure 9.1x, \u0430 \u0442\u0430\u043a\u0436\u0435 Ivanti Connect Secure \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R2.6 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e, Policy Secure \u0438 \u0448\u043b\u044e\u0437\u044b Neurons for ZTA. \u0425\u043e\u0442\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0431\u0430\u0433 \u0431\u044b\u043b \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0437\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0435\u0449\u0451 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 22.7R2.6. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u2014 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c \u0432 \u0431\u0443\u0444\u0435\u0440\u0435 \u044f\u043a\u043e\u0431\u044b \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u0430\u0442\u0430\u043a. \u0422\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0434\u043d\u0435\u0435 Ivanti \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0447\u0442\u043e \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 UNC5221 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 2023 \u0433\u043e\u0434\u0430. \u0412 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u043d\u043e\u0432\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e: \u0434\u0440\u043e\u043f\u043f\u0435\u0440 TRAILBLAZE, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 BRUSHFIRE \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e SPAWN \u2014 \u0446\u0435\u043b\u0443\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ICS 22.7R2.6 \u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c 22.7R2.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0448\u043b\u044e\u0437\u044b Policy Secure \u0438 ZTA \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a, \u0445\u043e\u0442\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 19 \u0438 21 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. Ivanti \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0440\u0438\u0441\u043a \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u043d\u0438\u0436\u0435\u043d \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0445 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443, Ivanti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R2.6. \u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0430\u0442\u0430\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5714"}, {"timestamp": "2025-04-04T10:00:52Z", "date_only": false, "value": "2025-04-04T10:00:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/8T_bzrz6xvRDm9bjTqaiGamcBxJ28ZaKaFQmxVSWtB6D0w", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "03431f42-b778-4219-8c98-52227952646a"}, {"timestamp": "2025-04-04T10:28:53.775Z", "date_only": false, "value": "2025-04-04T10:28:53.775958Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lly7h6za2i2q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "943ac578-1377-488f-99ea-6190857e6d81", "url": "https://bsky.app/profile/nimblenerd.social/post/3lly7h6za2i2q"}, {"timestamp": "2025-04-04T12:14:44.643Z", "date_only": false, "value": "2025-04-04T12:14:44.643+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0703", "record": "WID-SEC-W-2025-0703", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-04T12:15:44.681Z", "date_only": false, "value": "2025-04-04T12:15:44.681461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3llyfg5qpnk2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "931c1b02-c20d-4433-a082-45da6380ffef", "url": "https://bsky.app/profile/rajsamani.bsky.social/post/3llyfg5qpnk2t"}, {"timestamp": "2025-04-04T13:58:14.909Z", "date_only": false, "value": "2025-04-04T13:58:14.909069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3llyl5k3tr72j", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "62cca64f-af1a-4bdc-86ea-e6b68958af35", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3llyl5k3tr72j"}, {"timestamp": "2025-04-04T14:09:32.099Z", "date_only": false, "value": "2025-04-04T14:09:32.099060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3llylrqlvag2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "94d6b251-3add-487c-bed7-81c727528862", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3llylrqlvag2s"}, {"timestamp": "2025-04-04T14:25:28.677Z", "date_only": false, "value": "2025-04-04T14:25:28.677055Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114280151477152127", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "79b4952b-e699-4f6f-9ed2-a1180ce854ea", "url": "https://infosec.exchange/users/wdormann/statuses/114280151477152127"}, {"timestamp": "2025-04-04T14:25:28.678Z", "date_only": false, "value": "2025-04-04T14:25:28.678807Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114280151477152127", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "37cc7014-3e3d-443b-bb9b-b33a18643c30", "url": "https://infosec.exchange/users/wdormann/statuses/114280151477152127"}, {"timestamp": "2025-04-04T15:00:48Z", "date_only": false, "value": "2025-04-04T15:00:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6912", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "86d8cd6c-0c2f-45ed-bb0e-f8669186b17d", "content": "\u041d\u043e\u0432\u0430\u044f \u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u0430\u044f \u043f\u043e\u043b\u043e\u0441\u0430 \u0432 \u0436\u0438\u0437\u043d\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Ivanti \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Connect Secure, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\nCVE-2025-22457 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Pulse Connect Secure 9.1x (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0430\u0441\u044c \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435), Ivanti Connect Secure 22.7R2.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Policy Secure \u0438 Neurons \u0434\u043b\u044f \u0448\u043b\u044e\u0437\u043e\u0432 ZTA.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c Ivanti, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u041e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c Ivanti Connect Secure 22.7R2.6.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u043a\u0430\u043a \u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u0430\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043d\u0435 \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0430\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043a \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u0438\u044e Ivanti \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432, \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0448\u043b\u044e\u0437\u043e\u0432 ZTA \u0438 Ivanti Policy Secure \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043a 19 \u0438 21 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043d\u043e Ivanti \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u00ab\u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\u00bb \u0448\u043b\u044e\u0437\u043e\u0432.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Ivanti \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043d\u0430 ICT \u0438 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c\u0438 \u0441\u0431\u043e\u044f\u043c\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0415\u0441\u043b\u0438 \u0431\u0443\u0434\u0443\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0438\u0445 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0440\u0441\u0438\u0438 22.7R2.6.\n\n\u041f\u043e\u043a\u0430 \u0432 Ivanti \u043e\u0442\u043c\u0430\u043b\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0438 Google Threat Intelligence Group (GTIG) \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a (UNC5221) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\nUNC5221 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 0-day \u0432 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 2023 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Ivanti \u0438 NetScaler.\n\n\u0421\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 CVE-2025-0282, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 Ivanti Connect Secure \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Dryhook \u0438 Phasejam \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 VPN.\n\n\u0413\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 0-day Connect Secure \u0438 Policy Secure (CVE-2023-46805 \u0438 CVE-2024-21887) \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 ICS VPN \u0438 IPS network access control (NAC). \u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u0441\u0442\u0430\u043b\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f MITRE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Volexity, \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2024 \u0433\u043e\u0434\u0430 UNC5221\u00a0\u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0431\u043e\u043b\u0435\u0435 2100 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Ivanti,\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0435\u0431-\u0448\u0435\u043b\u043b  GIFTEDVISITOR, \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u0432\u0435 0-day.\n\n\u0412 \u043d\u043e\u0432\u044b\u0445 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0434\u0432\u0443\u0445 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e: \u0434\u0440\u043e\u043f\u043f\u0435\u0440\u0430 TRAILBLAZE, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0438 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 BRUSHFIRE.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439  \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e SPAWN, \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u0439 UNC5221.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0437\u0443\u0447\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ICS 22.7R2.6, \u043e\u0442\u044b\u0441\u043a\u0430\u0432 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 22.7R2.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0442\u0430\u043a\u0438\u043c\u0438 \u0442\u0435\u043c\u043f\u0430\u043c\u0438 \u0438 \u043e\u0431\u0445\u043e\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u043a\u043e\u0440\u043e \u043d\u0430\u0437\u0440\u0435\u044e\u0442.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0437\u043e\u043d \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Ivanti, \u043c\u043e\u0436\u043d\u043e \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, - \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f.", "url": "https://t.me/true_secator/6912"}, {"timestamp": "2025-04-04T15:01:19.106Z", "date_only": false, "value": "2025-04-04T15:01:19.106774Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/114280292538329178", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "8d7662c3-7bf1-4da9-929e-f4287b7dba51", "url": "https://infosec.exchange/users/decio/statuses/114280292538329178"}, {"timestamp": "2025-04-04T15:01:19.108Z", "date_only": false, "value": "2025-04-04T15:01:19.108860Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/114280292538329178", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "8f3e07ca-2c33-443b-a68d-41e636212884", "url": "https://infosec.exchange/users/decio/statuses/114280292538329178"}, {"timestamp": "2025-04-04T17:19:32Z", "date_only": false, "value": "2025-04-04T17:19:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/8646", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "abc5450d-acc8-4486-b470-ce6451b2f9a6", "content": "Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware\n\nIvanti patches CVE-2025-22457 exploited by UNC5221 in March 2025, risking remote code execution and credential theft.\n\nThe Hacker News | thehackernews.com \u2022 Apr 4, 2025", "url": "https://t.me/ton618cyber/8646"}, {"timestamp": "2025-04-04T17:19:33Z", "date_only": false, "value": "2025-04-04T17:19:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/3408", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "069c6551-f9f2-4ab4-b911-65ddf5f0bfa4", "content": "Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware\n\nIvanti patches CVE-2025-22457 exploited by UNC5221 in March 2025, risking remote code execution and credential theft.\n\nThe Hacker News | thehackernews.com \u2022 Apr 4, 2025", "url": "https://t.me/ton618cyber/3408"}, {"timestamp": "2025-04-04T17:45:12.902Z", "date_only": false, "value": "2025-04-04T17:45:12.902280Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llyxtfng3g2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b27954fa-2f13-4245-b983-b439ae3f91e0", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llyxtfng3g2s"}, {"timestamp": "2025-04-04T17:46:34.232Z", "date_only": false, "value": "2025-04-04T17:46:34.232249Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114280942372547495", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "be0cd9e0-561f-4789-9dfb-0699c193ef63", "url": "https://infosec.exchange/users/cR0w/statuses/114280942372547495"}, {"timestamp": "2025-04-04T17:46:34.244Z", "date_only": false, "value": "2025-04-04T17:46:34.244748Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114280942372547495", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "6b2d0ebc-0358-4aa8-a494-adf6f07a3cd1", "url": "https://infosec.exchange/users/cR0w/statuses/114280942372547495"}, {"timestamp": "2025-04-04T18:23:05.419Z", "date_only": false, "value": "2025-04-04T18:23:05.419882Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3727527", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "611e619c-01ac-4319-a611-496fee4525b1", "url": "https://feedsin.space/feed/CISAKevBot/items/3727527"}, {"timestamp": "2025-04-04T18:23:05.422Z", "date_only": false, "value": "2025-04-04T18:23:05.422447Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3727527", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "afa8f9b8-7a13-4274-9544-82117f545acf", "url": "https://feedsin.space/feed/CISAKevBot/items/3727527"}, {"timestamp": "2025-04-04T19:12:12.572Z", "date_only": false, "value": "2025-04-04T19:12:12.572671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llz4owuykk2x", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "6f4cc886-d17a-454c-a509-794a0fa7365a", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3llz4owuykk2x"}, {"timestamp": "2025-04-04T20:12:24.328Z", "date_only": false, "value": "2025-04-04T20:12:24.328582Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3llza2cdb222w", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "e257fb3f-1c6d-47fe-9d10-6e1cb27f13d0", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3llza2cdb222w"}, {"timestamp": "2025-04-04T20:13:03.215Z", "date_only": false, "value": "2025-04-04T20:13:03.215385Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llza3qoll32d", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cc019509-6337-47be-ab1f-f925c7d2eb05", "url": "https://bsky.app/profile/nimblenerd.social/post/3llza3qoll32d"}, {"timestamp": "2025-04-04T20:47:51.820Z", "date_only": false, "value": "2025-04-04T20:47:51.820346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llzbxv5fieq2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "54933162-cb85-4df6-a3bb-ddea1cda0e60", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llzbxv5fieq2"}, {"timestamp": "2025-04-04T21:02:04.418Z", "date_only": false, "value": "2025-04-04T21:02:04.418953Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzcten6s42l", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f23011a2-0a40-47e3-9c45-fb7dbb069daa", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzcten6s42l"}, {"timestamp": "2025-04-04T22:29:10Z", "date_only": false, "value": "2025-04-04T22:29:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/233381", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d32315ef-eb06-485f-913d-0038611f554e", "content": "Ivanti Releases Security Updates for Connect Secure, Policy Secure & ZTA Gateways Vulnerability (CVE-2025-22457)\nhttps://ift.tt/4HtlawR", "url": "https://t.me/ctinow/233381"}, {"timestamp": "2025-04-05T02:11:25.808Z", "date_only": false, "value": "2025-04-05T02:11:25.808480Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llzu4lk5jl2n", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "089482a9-1faa-42df-8fc6-0a1d87c5d4ae", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3llzu4lk5jl2n"}, {"timestamp": "2025-04-05T07:02:03.130Z", "date_only": false, "value": "2025-04-05T07:02:03.130076Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-38443b8e-9ac59311ff2ab39e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "53b38470-8192-44f8-b313-d76f236157ad", "url": "https://poliverso.org/objects/0477a01e-38443b8e-9ac59311ff2ab39e"}, {"timestamp": "2025-04-05T07:02:03.133Z", "date_only": false, "value": "2025-04-05T07:02:03.133706Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-38443b8e-9ac59311ff2ab39e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "462e3ba3-9a73-4b28-85af-e20a8c5f895f", "url": "https://poliverso.org/objects/0477a01e-38443b8e-9ac59311ff2ab39e"}, {"timestamp": "2025-04-05T09:56:23.194Z", "date_only": false, "value": "2025-04-05T09:56:23.194593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lm2o3yf2nk2x", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "31c502cb-e689-4eea-b51d-8b73733b8ac9", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3lm2o3yf2nk2x"}, {"timestamp": "2025-04-05T10:28:31.185Z", "date_only": false, "value": "2025-04-05T10:28:31.185816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/moksec.fi/post/3lm2pvebfw22s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c61aeff1-69da-449d-a6f7-53348f3373ed", "url": "https://bsky.app/profile/moksec.fi/post/3lm2pvebfw22s"}, {"timestamp": "2025-04-05T10:28:31.704Z", "date_only": false, "value": "2025-04-05T10:28:31.704165Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/moksec.fi/post/3lm2pvgz6j22s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a0eece70-7487-4185-9e8a-23f8c630afa1", "url": "https://bsky.app/profile/moksec.fi/post/3lm2pvgz6j22s"}, {"timestamp": "2025-04-05T10:28:32.229Z", "date_only": false, "value": "2025-04-05T10:28:32.229779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/moksec.fi/post/3lm2pvgz7ic2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "fa777014-2975-47c9-8762-4d1013501258", "url": "https://bsky.app/profile/moksec.fi/post/3lm2pvgz7ic2s"}, {"timestamp": "2025-04-05T11:04:30.725Z", "date_only": false, "value": "2025-04-05T11:04:30.725063Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114285023692664985", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d081ac6d-dbed-4164-bb49-730ea7413b3e", "url": "https://infosec.exchange/users/dragonjar/statuses/114285023692664985"}, {"timestamp": "2025-04-05T11:04:30.730Z", "date_only": false, "value": "2025-04-05T11:04:30.730593Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114285023692664985", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cc33c5d3-d3f9-47b3-a2b9-e7161878a72f", "url": "https://infosec.exchange/users/dragonjar/statuses/114285023692664985"}, {"timestamp": "2025-04-05T14:10:17.764Z", "date_only": false, "value": "2025-04-05T14:10:17.764243Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lm34bznz4p2c", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "2cbe097e-4006-4062-b06d-b4cd2dfbaf49", "url": "https://bsky.app/profile/hackingne.ws/post/3lm34bznz4p2c"}, {"timestamp": "2025-04-05T20:19:05.546Z", "date_only": false, "value": "2025-04-05T20:19:05.546705Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/winobs.com/post/3lm3qved22e2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cd68000a-636f-4fbb-894c-c13c74a3f219", "url": "https://bsky.app/profile/winobs.com/post/3lm3qved22e2s"}, {"timestamp": "2025-04-05T20:33:14Z", "date_only": false, "value": "2025-04-05T20:33:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/94Jlqf1Np0QBabp6Ps9lybu-wgVQj70d9gN5otdpb9p1soM", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "eb40e6cf-f156-41e2-ab79-d8a6fd9ce229"}, {"timestamp": "2025-04-05T22:20:09.903Z", "date_only": false, "value": "2025-04-05T22:20:09.903201Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lm3xnx2n572m", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "c582de44-c570-414f-a5a3-3855c5d1aa39", "url": "https://bsky.app/profile/calebpr.bsky.social/post/3lm3xnx2n572m"}, {"timestamp": "2025-04-06T01:13:16.989Z", "date_only": false, "value": "2025-04-06T01:13:16.989422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm4bdhzka22x", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "aaaa9e66-6d9e-4b9a-9cc2-6c8185520d7d", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm4bdhzka22x"}, {"timestamp": "2025-04-06T01:58:19.843Z", "date_only": false, "value": "2025-04-06T01:58:19.843098Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114288538066776753", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "9f928060-a12b-4c68-b221-8999a542c293", "url": "https://mstdn.ca/users/rfwaveio/statuses/114288538066776753"}, {"timestamp": "2025-04-06T02:16:07.252Z", "date_only": false, "value": "2025-04-06T02:16:07.252966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lm4etv2ihs2q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "9f0bf75b-f718-48f2-9626-aebae2e4df57", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lm4etv2ihs2q"}, {"timestamp": "2025-04-06T07:16:25.378Z", "date_only": false, "value": "2025-04-06T07:16:25.378638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm4vmsjvk22s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "43230cdd-4673-4255-83a7-837b943dd392", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm4vmsjvk22s"}, {"timestamp": "2025-04-06T08:20:08.872Z", "date_only": false, "value": "2025-04-06T08:20:08.872190Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lm4z6tdovo2k", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "bdf5dd4c-98a6-4662-a279-e893b7493cd3", "url": "https://bsky.app/profile/calebpr.bsky.social/post/3lm4z6tdovo2k"}, {"timestamp": "2025-04-06T08:53:54.859Z", "date_only": false, "value": "2025-04-06T08:53:54.859047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm5335l62s2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a447c786-50fc-41fa-851d-79f279f9a6f9", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm5335l62s2s"}, {"timestamp": "2025-04-06T09:16:45.026Z", "date_only": false, "value": "2025-04-06T09:16:45.026414Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm54dyqvt22s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "42da46a7-042e-4031-88c4-6d8f78ef8eef", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm54dyqvt22s"}, {"timestamp": "2025-04-06T09:19:36.611Z", "date_only": false, "value": "2025-04-06T09:19:36.611129Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm54j4vqnc2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "096795a5-1653-402c-ae90-026f313e8bd3", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm54j4vqnc2s"}, {"timestamp": "2025-04-06T09:24:19.909Z", "date_only": false, "value": "2025-04-06T09:24:19.909419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm54rjt3qc2s", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "e42ae11d-1206-4156-8965-2ace64e6e575", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lm54rjt3qc2s"}, {"timestamp": "2025-04-06T19:50:40.224Z", "date_only": false, "value": "2025-04-06T19:50:40.224259Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lm67rlhjmv2h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "1b9d99b6-a586-4ba3-8181-4142b3d2fa11", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lm67rlhjmv2h"}, {"timestamp": "2025-04-06T21:31:11.854Z", "date_only": false, "value": "2025-04-06T21:31:11.854760Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lm6ffdp34326", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "bc235078-b453-4e38-8636-a5a60633d4de", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lm6ffdp34326"}, {"timestamp": "2025-04-07T00:46:11.555Z", "date_only": false, "value": "2025-04-07T00:46:11.555269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/christinaayiotis.bsky.social/post/3lm6qbxu3xk22", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "72c3d2f6-db09-42dc-9d62-933dc605775e", "url": "https://bsky.app/profile/christinaayiotis.bsky.social/post/3lm6qbxu3xk22"}, {"timestamp": "2025-04-07T02:15:02.372Z", "date_only": false, "value": "2025-04-07T02:15:02.372130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lm6vavccoe2z", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "947d0ba0-ca58-4f22-821b-0c48c71c3dd6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lm6vavccoe2z"}, {"timestamp": "2025-04-07T04:00:00Z", "date_only": false, "value": "2025-04-07T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1518", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "0a290f12-afdf-45b9-8785-2ef797417084", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1518"}, {"timestamp": "2025-04-07T04:02:10.205Z", "date_only": false, "value": "2025-04-07T04:02:10.205880Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/d302d303-b999-46ae-9812-71067bf20469", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "4e0c2e71-39bb-4b52-8bf9-166d36ae6698", "url": "https://vulnerability.circl.lu/comment/d302d303-b999-46ae-9812-71067bf20469"}, {"timestamp": "2025-04-07T09:08:02.421Z", "date_only": false, "value": "2025-04-07T09:08:02.421926Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lm7mdeomir2e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "820152ea-81dd-4416-accc-52a31847936a", "url": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lm7mdeomir2e"}, {"timestamp": "2025-04-07T10:17:08.251Z", "date_only": false, "value": "2025-04-07T10:17:08.251550Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lm7q6oanmhj2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "de746ec4-2dd8-4d47-9285-dabd78421d93", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lm7q6oanmhj2"}, {"timestamp": "2025-04-07T11:09:05.679Z", "date_only": false, "value": "2025-04-07T11:09:05.679159Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille.bsky.social/post/3lm7t3qii7v2n", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "52e1c5ab-105f-45bd-b52c-d25c103abfbc", "url": "https://bsky.app/profile/cyberveille.bsky.social/post/3lm7t3qii7v2n"}, {"timestamp": "2025-04-07T11:16:47.859Z", "date_only": false, "value": "2025-04-07T11:16:47.859431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lm7tj5wfblz2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "0aae1ef8-1d4f-4c48-87c7-33f9cc80791b", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lm7tj5wfblz2"}, {"timestamp": "2025-04-07T15:20:20.373Z", "date_only": false, "value": "2025-04-07T15:20:20.373723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmab2tjjg2e2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "192e3841-e0a6-4be8-a907-49239ea4b417", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmab2tjjg2e2"}, {"timestamp": "2025-04-07T16:27:18.713Z", "date_only": false, "value": "2025-04-07T16:27:18.713459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmaeuosmzxe2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "89d336c3-029f-46fb-b9c8-e252ec060e80", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmaeuosmzxe2"}, {"timestamp": "2025-04-07T17:19:15.372Z", "date_only": false, "value": "2025-04-07T17:19:15.372713Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmahrmsxwk2h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "33f926f8-4606-41c8-bca4-271e0369394f", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmahrmsxwk2h"}, {"timestamp": "2025-04-07T17:19:16.346Z", "date_only": false, "value": "2025-04-07T17:19:16.346401Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmahrq7z6s2h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "1f4e48b8-216a-452d-b75b-c43d76802cd3", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmahrq7z6s2h"}, {"timestamp": "2025-04-07T17:19:17.348Z", "date_only": false, "value": "2025-04-07T17:19:17.348905Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmahrqa2622h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5f8a7740-e8e1-4681-8b4e-b84d4f6a4c4f", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmahrqa2622h"}, {"timestamp": "2025-04-07T17:21:54.329Z", "date_only": false, "value": "2025-04-07T17:21:54.329365Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114297832243509038", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "919ec680-25f4-4ef8-9035-505e62a04ffc", "url": "https://infosec.exchange/users/shadowserver/statuses/114297832243509038"}, {"timestamp": "2025-04-07T17:21:57.468Z", "date_only": false, "value": "2025-04-07T17:21:57.468747Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmahspflaxm2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "264575ed-7c1c-4514-87ec-22d52496df7e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmahspflaxm2"}, {"timestamp": "2025-04-07T17:24:07.686Z", "date_only": false, "value": "2025-04-07T17:24:07.686735Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmai2crtoc2h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d69885f9-19fc-4be6-acec-86106e8a0bda", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmai2crtoc2h"}, {"timestamp": "2025-04-07T17:24:08.629Z", "date_only": false, "value": "2025-04-07T17:24:08.629407Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmai2g26k22h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ee3f5f56-cb67-4488-9033-1512473b255b", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmai2g26k22h"}, {"timestamp": "2025-04-07T17:24:09.589Z", "date_only": false, "value": "2025-04-07T17:24:09.589672Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmai2g27jc2h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c76271e5-757c-477f-96fc-089cb708a09c", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lmai2g27jc2h"}, {"timestamp": "2025-04-07T17:32:02Z", "date_only": false, "value": "2025-04-07T17:32:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hackyourmom/11089", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "7ce114e3-0c1c-434a-8132-b323612dc888", "content": "\ud83d\udc7e \u041d\u043e\u0432\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u2014 CVE-2025-22457! \u0445\u0430\u043a\u0435\u0440\u0438, \u043f\u043e\u0432\u2019\u044f\u0437\u0430\u043d\u0456 \u0437 \ud83c\udde8\ud83c\uddf3, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c \u0431\u0430\u0433 \u0443 Connect Secure, Policy Secure \u0442\u0430 ZTA Gateways. \u041f\u043e\u0441\u0442\u0440\u0430\u0436\u0434\u0430\u043b\u0438 \u043d\u0430\u0432\u0456\u0442\u044c \u0434\u0435\u0440\u0436\u0430\u0432\u043d\u0456 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438 \u2328\ufe0f\u2328\ufe0f #cybernews", "url": "https://t.me/hackyourmom/11089"}, {"timestamp": "2025-04-08T00:23:37.797Z", "date_only": false, "value": "2025-04-08T00:23:37.797520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lmb7ilpyaa2a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "df9e7692-5a28-4926-9488-7a012e09e106", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lmb7ilpyaa2a"}, {"timestamp": "2025-04-08T01:42:10.249Z", "date_only": false, "value": "2025-04-08T01:42:10.249102Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lmbduzuohr2d", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f22bc52c-c1d3-4cd4-854f-2f7c5aa904af", "url": "https://bsky.app/profile/calebpr.bsky.social/post/3lmbduzuohr2d"}, {"timestamp": "2025-04-08T02:13:09.413Z", "date_only": false, "value": "2025-04-08T02:13:09.413306Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmbfmgsnn32t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "153bf98d-a799-49f7-bad4-ba55284341ba", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmbfmgsnn32t"}, {"timestamp": "2025-04-08T08:57:31.296Z", "date_only": false, "value": "2025-04-08T08:57:31.296498Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmc44osx6jf2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "8be846c4-6e18-40b1-afdc-8de6d6fe614d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmc44osx6jf2"}, {"timestamp": "2025-04-08T09:16:32.014Z", "date_only": false, "value": "2025-04-08T09:16:32.014689Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmc5bipges2h", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "14e3a1ff-d24e-4049-af5a-2d97ff43ba78", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmc5bipges2h"}, {"timestamp": "2025-04-08T09:34:21Z", "date_only": false, "value": "2025-04-08T09:34:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/30531", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "03ef2df4-f1af-4de1-800f-d868becf6791", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPrevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN\nURL\uff1ahttps://github.com/Vinylrider/ivantiunlocker\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/30531"}, {"timestamp": "2025-04-08T09:42:10.219Z", "date_only": false, "value": "2025-04-08T09:42:10.219177Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lmc6pdlkx22m", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ce2ce181-d800-44c7-86ac-81e07cbff3f6", "url": "https://bsky.app/profile/calebpr.bsky.social/post/3lmc6pdlkx22m"}, {"timestamp": "2025-04-08T11:31:40.899Z", "date_only": false, "value": "2025-04-08T11:31:40.899883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmcersyiriy2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "c79bd6c4-6f62-4e96-b259-df917b0cf4b8", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmcersyiriy2"}, {"timestamp": "2025-04-08T12:06:55Z", "date_only": false, "value": "2025-04-08T12:06:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/30551", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "68544941-50c9-410b-bca3-293ef1ef1fbd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-22457 Python and Metasploit PoC for Ivanti unauthenticated RCE\nURL\uff1ahttps://github.com/N4SL1/CVE-2025-22457-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/30551"}, {"timestamp": "2025-04-08T17:00:08Z", "date_only": false, "value": "2025-04-08T17:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PFczZxou3M8bxtA_ogzzcgh7g-AmtdGPjCcJVMEUDXCS9Y4", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "19b78ec2-f9a5-4f80-8776-d4827a527089"}, {"timestamp": "2025-04-08T20:57:37.373Z", "date_only": false, "value": "2025-04-08T20:57:37.373687Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmdego7vkc2a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f49feee8-ad8a-4a6d-833a-58dc1b921fe1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmdego7vkc2a"}, {"timestamp": "2025-04-08T22:34:06.518Z", "date_only": false, "value": "2025-04-08T22:34:06.518800Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmdjs2j334p2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "c8db3592-cb5a-486f-b0d2-37d0efb2f740", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmdjs2j334p2"}, {"timestamp": "2025-04-09T02:13:25.534Z", "date_only": false, "value": "2025-04-09T02:13:25.534806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmdw3tpxyf2g", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "0055c3ec-bd20-4af4-960c-9873f0448ab9", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmdw3tpxyf2g"}, {"timestamp": "2025-04-09T02:57:55.017Z", "date_only": false, "value": "2025-04-09T02:57:55.017181Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lmdylg3hw22l", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5ab98c6b-d347-4e7e-8cea-ac2d34cd0557", "url": "https://bsky.app/profile/shiojiri.com/post/3lmdylg3hw22l"}, {"timestamp": "2025-04-09T06:45:20.038Z", "date_only": false, "value": "2025-04-09T06:45:20.038109Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmefby7pwyx2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "2cdffc1f-4012-4f17-b0ca-0435ff12ab46", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmefby7pwyx2"}, {"timestamp": "2025-04-09T07:23:45.631Z", "date_only": false, "value": "2025-04-09T07:23:45.631426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmehgppkqqx2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "bc9cbc5e-92fb-42a2-b86d-9a3fbe5b771c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmehgppkqqx2"}, {"timestamp": "2025-04-09T13:34:14.681Z", "date_only": false, "value": "2025-04-09T13:34:14.681906Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114308261607849068", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "97657019-ef2f-4b21-953f-7627a11263e1", "url": "https://infosec.exchange/users/jbhall56/statuses/114308261607849068"}, {"timestamp": "2025-04-10T02:13:18.605Z", "date_only": false, "value": "2025-04-10T02:13:18.605897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmggkjulyz2r", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "fc878208-ea79-40bd-936d-0f0b8bd78efc", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmggkjulyz2r"}, {"timestamp": "2025-04-10T04:39:43.382Z", "date_only": false, "value": "2025-04-10T04:39:43.382835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lmgoqehmcg25", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "afc30bed-7524-4550-a87a-1dc8156976ec", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lmgoqehmcg25"}, {"timestamp": "2025-04-10T09:27:15Z", "date_only": false, "value": "2025-04-10T09:27:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/30848", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "9bb19c55-c493-4210-ac4d-817b49394fdf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE\nURL\uff1ahttps://github.com/securekomodo/CVE-2025-22457\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/30848"}, {"timestamp": "2025-04-10T11:00:06Z", "date_only": false, "value": "2025-04-10T11:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Wgye_fk2HHfrT-NbBzuRz1CbWvgn9-luEJGaq_bv_KMyev8", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "9a951932-1dc7-41c9-9b9d-eae01ca58e34"}, {"timestamp": "2025-04-10T16:24:42.012Z", "date_only": false, "value": "2025-04-10T16:24:42.012133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nopfx.bsky.social/post/3lmhw4wzaik2q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "6267472e-162d-4cfe-a49c-2ab80e716c55", "url": "https://bsky.app/profile/nopfx.bsky.social/post/3lmhw4wzaik2q"}, {"timestamp": "2025-04-10T18:19:43.033Z", "date_only": false, "value": "2025-04-10T18:19:43.033075Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3lmi4kkurtk2r", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "0c085a01-727a-4492-96a9-fdcd9e35a053", "url": "https://bsky.app/profile/stephenfewer.bsky.social/post/3lmi4kkurtk2r"}, {"timestamp": "2025-04-10T19:23:51.407Z", "date_only": false, "value": "2025-04-10T19:23:51.407679Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/catc0n/statuses/114315298784163741", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "702a87c0-f25d-49c7-b9f1-7d60c01fedf8", "url": "https://infosec.exchange/users/catc0n/statuses/114315298784163741"}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": true, "value": "2025-04-11", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-22457", "field": "evidence.0.details.due_date", "uuid": "49b7bb50-2bbe-4cf1-9519-9011a43f4b63", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": false, "value": "2025-04-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-003", "record": "CERTFR-2025-ALE-003", "field": "revisions.3.revision_date"}, {"timestamp": "2025-04-11T01:36:34.848Z", "date_only": false, "value": "2025-04-11T01:36:34.848998Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114316760238013993", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "a60e7f15-3d2a-4c48-8dd6-d05e30948e72", "url": "https://infosec.exchange/users/wdormann/statuses/114316760238013993"}, {"timestamp": "2025-04-11T01:37:19.408Z", "date_only": false, "value": "2025-04-11T01:37:19.408376Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lmiuy6aqihs2", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "dbb10218-4cdb-4ba3-85e9-9113eedc243e", "url": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lmiuy6aqihs2"}, {"timestamp": "2025-04-11T02:13:23.824Z", "date_only": false, "value": "2025-04-11T02:13:23.824348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmiwzn44vy2n", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f547fac5-3260-4476-a150-9e1094443789", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmiwzn44vy2n"}, {"timestamp": "2025-04-11T06:58:38Z", "date_only": false, "value": "2025-04-11T06:58:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2585", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "8a0fe925-2e54-4914-b54b-578bf66ba030", "content": "CVE-2025-22457\n*\nIvanti Zero-Day", "url": "https://t.me/proxy_bar/2585"}, {"timestamp": "2025-04-11T07:19:07.589Z", "date_only": false, "value": "2025-04-11T07:19:07.589043Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmji4azoms2x", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b76d6823-f0f3-4ce2-b46b-5e427fe7e3e3", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lmji4azoms2x"}, {"timestamp": "2025-04-11T07:29:33.053Z", "date_only": false, "value": "2025-04-11T07:29:33.053457Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lmjioxxq422k", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "eb33d43b-0041-4e38-a1c5-ef1633c7746f", "url": "https://bsky.app/profile/shiojiri.com/post/3lmjioxxq422k"}, {"timestamp": "2025-04-11T07:43:03.949Z", "date_only": false, "value": "2025-04-11T07:43:03.949685Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/1b563420-7047-49bc-8488-2571aa82709c", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "7672991d-ccdb-46cd-a911-c36a4829b6b6", "url": "https://vulnerability.circl.lu/comment/1b563420-7047-49bc-8488-2571aa82709c"}, {"timestamp": "2025-04-11T07:47:34.917Z", "date_only": false, "value": "2025-04-11T07:47:34.917635Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/1140d063-7d5a-4971-8e08-9514c03dfef7", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "84419ac7-b43d-4c71-866f-991b7feb40bc", "url": "https://vulnerability.circl.lu/comment/1140d063-7d5a-4971-8e08-9514c03dfef7"}, {"timestamp": "2025-04-11T07:48:11.519Z", "date_only": false, "value": "2025-04-11T07:48:11.519326Z", "kind": "sighting", "label": "Exploited", "source": "https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c7108307-b294-4bb0-b5f4-25c9a8fa4f67", "url": "https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability"}, {"timestamp": "2025-04-11T07:48:34.131Z", "date_only": false, "value": "2025-04-11T07:48:34.131006Z", "kind": "sighting", "label": "Exploited", "source": "https://github.com/sfewer-r7/CVE-2025-22457", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "8a4c98d2-f1e4-498f-bb4b-f3910aac1559", "url": "https://github.com/sfewer-r7/CVE-2025-22457"}, {"timestamp": "2025-04-11T08:40:40.349Z", "date_only": false, "value": "2025-04-11T08:40:40.349647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmjmo5e4rc2g", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c8724911-c2b9-49ff-9880-af8c5504c813", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmjmo5e4rc2g"}, {"timestamp": "2025-04-11T11:03:30.266Z", "date_only": false, "value": "2025-04-11T11:03:30.266306Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114318993583529498", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "587d01a4-1a65-4e50-990e-2c5ec223da6e", "url": "https://infosec.exchange/users/dragonjar/statuses/114318993583529498"}, {"timestamp": "2025-04-11T14:11:48.400Z", "date_only": false, "value": "2025-04-11T14:11:48.400950Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-0da370a6-7d0129805c9046ed", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "ceb08131-ff81-4a30-9627-1615d680291a", "url": "https://poliverso.org/objects/0477a01e-0da370a6-7d0129805c9046ed"}, {"timestamp": "2025-04-11T16:09:31.874Z", "date_only": false, "value": "2025-04-11T16:09:31.874803Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lmkfqr3uwz23", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "290a2095-c9c7-48ca-ad1e-d4b2d2deb703", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lmkfqr3uwz23"}, {"timestamp": "2025-04-11T16:54:31.968Z", "date_only": false, "value": "2025-04-11T16:54:31.968220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lmkib7zbjm2a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "4384fc9f-5dfd-49f7-9692-a273cb8a5d50", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lmkib7zbjm2a"}, {"timestamp": "2025-04-11T19:13:07.200Z", "date_only": false, "value": "2025-04-11T19:13:07.200512Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lmkpyzr7qm2v", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "9acc4bbe-f011-45d1-9e26-0875f41ed9e8", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lmkpyzr7qm2v"}, {"timestamp": "2025-04-11T19:54:20Z", "date_only": false, "value": "2025-04-11T19:54:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/53383", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "e566e7f3-486a-4e3c-b2e1-aea5e6230856", "content": "Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle\nhttps://www.securityweek.com/rapid7-reveals-rce-path-in-ivanti-vpn-appliance-after-silent-patch-debacle/\n\nThe CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices.\nThe post Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle (https://www.securityweek.com/rapid7-reveals-rce-path-in-ivanti-vpn-appliance-after-silent-patch-debacle/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/53383"}, {"timestamp": "2025-04-12T02:11:28.816Z", "date_only": false, "value": "2025-04-12T02:11:28.816944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmlhf4lzyt2g", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "8bda4027-9533-4bd4-a626-1fee2d2ef7e7", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmlhf4lzyt2g"}, {"timestamp": "2025-04-12T08:46:17Z", "date_only": false, "value": "2025-04-12T08:46:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/1329", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c5c85904-ae8c-4b60-b99e-af76369e297c", "content": "\ud83c\udf1f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc RCE \u062f\u0631 Ivanti (CVE-2025-22457)\n\u2705 \u0627\u0633\u06a9\u0646\u0631:\nhttps://github.com/securekomodo/CVE-2025-22457\n\u2728 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a:\nhttps://github.com/sfewer-r7/CVE-2025-22457\n\n\n\ud83c\udf1fIvanti RCE (CVE-2025-22457)\n\u2705Scanner : \nhttps://github.com/securekomodo/CVE-2025-22457\n\u2728Exploit :\nhttps://github.com/sfewer-r7/CVE-2025-22457\n\u2b50MrVGunz", "url": "https://t.me/MrVGunz/1329"}, {"timestamp": "2025-04-12T08:54:31.778Z", "date_only": false, "value": "2025-04-12T08:54:31.778611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lmm5vtmemd27", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "7fe9c9e5-3bd9-4908-844e-9d2c8415bb23", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lmm5vtmemd27"}, {"timestamp": "2025-04-12T12:45:23.329Z", "date_only": false, "value": "2025-04-12T12:45:23.329902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lmmksn55ug2e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "91525d0a-86dd-43df-808a-3a8e79e57e81", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lmmksn55ug2e"}, {"timestamp": "2025-04-12T12:50:37Z", "date_only": false, "value": "2025-04-12T12:50:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cIub1337/194", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c23d462d-1c12-41d6-89b8-c1cda67e642d", "content": "Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457)\n\nhttps://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability\n\nTelegram   \u2709\ufe0f @club1337\nX (Twitter) \ud83d\udd4a @club31337", "url": "https://t.me/cIub1337/194"}, {"timestamp": "2025-04-12T17:03:40Z", "date_only": false, "value": "2025-04-12T17:03:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/31371", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f88f904f-d0a1-4298-a52b-fe946cefcc81", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-22457\nURL\uff1ahttps://github.com/sfewer-r7/CVE-2025-22457\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/31371"}, {"timestamp": "2025-04-13T02:30:19.479Z", "date_only": false, "value": "2025-04-13T02:30:19.479894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmnyvqnhhj2r", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "2c56f6e2-11fc-4dde-910f-a7b041086942", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmnyvqnhhj2r"}, {"timestamp": "2025-04-13T12:13:54Z", "date_only": false, "value": "2025-04-13T12:13:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ap_security/816", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "8ccd1050-6bef-4e5f-b37d-05d1e7f050d3", "content": "#pentest\n\nPoC CVE-2025-22457\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Connect Secure. \u041a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430 \u044d\u0442\u043e\u0442 \u0431\u0430\u0433 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u0438.\n\n\u0421 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.", "url": "https://t.me/ap_security/816"}, {"timestamp": "2025-04-13T12:20:30.269Z", "date_only": false, "value": "2025-04-13T12:20:30.269946Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmozuzm6f22q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5e953740-617b-4c11-825c-1652120e7287", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmozuzm6f22q"}, {"timestamp": "2025-04-13T13:50:12.049Z", "date_only": false, "value": "2025-04-13T13:50:12.049082Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6vf43pc2q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "de35d5a7-5dab-4df9-9ff4-199c65d0f92f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp6vf43pc2q"}, {"timestamp": "2025-04-13T15:43:14.327Z", "date_only": false, "value": "2025-04-13T15:43:14.327813Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lmpf7lmbo426", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "64c8b2cf-36ae-4c76-88cb-5c1836f7834a", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lmpf7lmbo426"}, {"timestamp": "2025-04-14T02:16:06.605Z", "date_only": false, "value": "2025-04-14T02:16:06.605971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmqil5ansl2q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ded2fc3c-4947-4b0c-bda4-f494a6580fcc", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lmqil5ansl2q"}, {"timestamp": "2025-04-14T08:09:47.924Z", "date_only": false, "value": "2025-04-14T08:09:47.924555Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmr3ysuf22s2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "8f207e19-fbbc-4106-82e8-f2714610c9ee", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmr3ysuf22s2"}, {"timestamp": "2025-04-14T12:35:03.903Z", "date_only": false, "value": "2025-04-14T12:35:03.903641Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ashl3y-shen.bsky.social/post/3lmrl5vvgws2r", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "8721cdd1-c0b3-4fc5-baed-97a3764f1a71", "url": "https://bsky.app/profile/ashl3y-shen.bsky.social/post/3lmrl5vvgws2r"}, {"timestamp": "2025-04-14T14:42:37Z", "date_only": false, "value": "2025-04-14T14:42:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6942", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "09b2c883-8e6b-4dd4-a0d0-45c254078587", "content": "\u00a0Rapid7 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 PoC \u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Connect Secure VPN \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Ivanti \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u0430 \u0441 \u00ab\u0442\u0438\u0445\u0438\u043c\u00bb \u043f\u0430\u0442\u0447\u0435\u043c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, CVE-2025-22457 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0444\u0430\u043a\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0425\u043e\u0442\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435,\u00a0Ivanti \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u0434\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0435\u0435\u00a0\u043a\u0430\u043a \u00ab\u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u00bb (\u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u0443\u044e \u0434\u043b\u044f RCE) \u0438 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE \u0441 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0435\u0439.\n\n\u0422\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u0447\u0435\u0442\u0430 Mandiant \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e \u0441 \u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f \u0432 \u043f\u043e\u043b\u043d\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Rapid7, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 HTTP(S) \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Ivanti Connect Secure.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u00abX-Forwarded-For\u00bb, \u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u0434\u043b\u0438\u043d\u043e\u0439 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430, \u043e\u043d\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0447\u0430\u0441\u0442\u0438 \u0441\u0442\u0435\u043a\u0430.\u00a0\n\n\u041a\u0430\u043a \u043e\u043d\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e APT \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u043b\u0430\u0441\u0441\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 (\u0438\u043b\u0438 \u0438\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u043c\u044b\u0435) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a, Rapid7 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e 4 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f \u043a RCE, \u0430 \u0443 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0433\u0440\u0443\u043f\u043f \u0435\u0441\u0442\u044c \u0438 \u0432\u0440\u0435\u043c\u044f, \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0434\u043b\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0442\u043e\u043d\u043a\u0438\u0445 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9/10, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Ivanti Connect Secure \u0432\u0435\u0440\u0441\u0438\u0439 22.7R2.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 Pulse Connect Secure 9.x, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Ivanti Connect Secure, Ivanti \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Policy Secure \u0438 ZTA Gateways.\n\n\u0425\u043e\u0442\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Policy Secure \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0443 21 \u0430\u043f\u0440\u0435\u043b\u044f, \u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 ZTA Gateways - 19 \u0430\u043f\u0440\u0435\u043b\u044f, \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u0430.\u00a0\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Ivanti \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u0442\u043b\u0430\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Connect Secure 22.7R2.6 \u0438 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Connect Secure.\n\nRapid7 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0430\u0441\u044c \u043a Ivanti, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u0431\u043e\u0435\u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u043b\u0443\u0436\u0438\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 ASLR, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u043f\u043e\u0434\u0431\u043e\u0440 \u0430\u0434\u0440\u0435\u0441\u0430 \u043e\u0431\u0449\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u0430\u0436\u0434\u0430\u044f \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0430\u0434\u0440\u0435\u0441 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u0431\u043e\u044e \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0443.", "url": "https://t.me/true_secator/6942"}, {"timestamp": "2025-04-14T17:16:11Z", "date_only": false, "value": "2025-04-14T17:16:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/5553", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "be29cfe5-4789-4e32-ae27-819154eaefec", "content": "\u00a0Rapid7 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 PoC \u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Connect Secure VPN \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Ivanti \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u0430 \u0441 \u00ab\u0442\u0438\u0445\u0438\u043c\u00bb \u043f\u0430\u0442\u0447\u0435\u043c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, CVE-2025-22457 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0444\u0430\u043a\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0425\u043e\u0442\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435,\u00a0Ivanti \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u0434\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0435\u0435\u00a0\u043a\u0430\u043a \u00ab\u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u00bb (\u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u0443\u044e \u0434\u043b\u044f RCE) \u0438 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE \u0441 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0435\u0439.\n\n\u0422\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u0447\u0435\u0442\u0430 Mandiant \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e \u0441 \u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f \u0432 \u043f\u043e\u043b\u043d\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Rapid7, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 HTTP(S) \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Ivanti Connect Secure.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u00abX-Forwarded-For\u00bb, \u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u0434\u043b\u0438\u043d\u043e\u0439 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430, \u043e\u043d\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0447\u0430\u0441\u0442\u0438 \u0441\u0442\u0435\u043a\u0430.\u00a0\n\n\u041a\u0430\u043a \u043e\u043d\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e APT \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u043b\u0430\u0441\u0441\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 (\u0438\u043b\u0438 \u0438\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u043c\u044b\u0435) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a, Rapid7 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e 4 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f \u043a RCE, \u0430 \u0443 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0433\u0440\u0443\u043f\u043f \u0435\u0441\u0442\u044c \u0438 \u0432\u0440\u0435\u043c\u044f, \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0434\u043b\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0442\u043e\u043d\u043a\u0438\u0445 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9/10, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Ivanti Connect Secure \u0432\u0435\u0440\u0441\u0438\u0439 22.7R2.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 Pulse Connect Secure 9.x, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Ivanti Connect Secure, Ivanti \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Policy Secure \u0438 ZTA Gateways.\n\n\u0425\u043e\u0442\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Policy Secure \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0443 21 \u0430\u043f\u0440\u0435\u043b\u044f, \u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 ZTA Gateways - 19 \u0430\u043f\u0440\u0435\u043b\u044f, \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u0430.\u00a0\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Ivanti \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u0442\u043b\u0430\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Connect Secure 22.7R2.6 \u0438 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Connect Secure.\n\nRapid7 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0430\u0441\u044c \u043a Ivanti, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u0431\u043e\u0435\u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u043b\u0443\u0436\u0438\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 ASLR, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u043f\u043e\u0434\u0431\u043e\u0440 \u0430\u0434\u0440\u0435\u0441\u0430 \u043e\u0431\u0449\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u0430\u0436\u0434\u0430\u044f \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0430\u0434\u0440\u0435\u0441 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u0431\u043e\u044e \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0443.", "url": "https://t.me/S_E_Reborn/5553"}, {"timestamp": "2025-04-15T04:54:09.322Z", "date_only": false, "value": "2025-04-15T04:54:09.322647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lmtburepns2l", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "74275ab9-34cb-42f2-8211-8593dafa91ad", "url": "https://bsky.app/profile/shiojiri.com/post/3lmtburepns2l"}, {"timestamp": "2025-04-15T09:05:52.051Z", "date_only": false, "value": "2025-04-15T09:05:52.051348Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-31adc156-00e598977ea2736f", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "245bb651-0f6a-4265-8c8b-5f7949cb5d14", "url": "https://poliverso.org/objects/0477a01e-31adc156-00e598977ea2736f"}, {"timestamp": "2025-04-15T12:54:48Z", "date_only": false, "value": "2025-04-15T12:54:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/238add84-60d4-59b7-91a5-fb3919377cfb", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c2860eb1-eda6-4702-bc13-0a39587f774e"}, {"timestamp": "2025-04-15T14:26:30Z", "date_only": false, "value": "2025-04-15T14:26:30.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/db5f885b-7a82-4952-b138-956e39033df0", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "871e53c5-78a9-4ec4-a34f-798d42a03913"}, {"timestamp": "2025-04-17T01:03:48.180Z", "date_only": false, "value": "2025-04-17T01:03:48.180030Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogm4m2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "30850c60-8582-4f07-ae25-a378536f3321", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogm4m2t"}, {"timestamp": "2025-04-17T01:03:51.330Z", "date_only": false, "value": "2025-04-17T01:03:51.330195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogsxe2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "db880958-190b-419c-95fa-8339a72db675", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogsxe2t"}, {"timestamp": "2025-04-17T01:03:54.505Z", "date_only": false, "value": "2025-04-17T01:03:54.505418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogtwm2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "bc81be3f-e941-40c0-99d1-71a8d70a5e2a", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogtwm2t"}, {"timestamp": "2025-04-17T01:03:57.619Z", "date_only": false, "value": "2025-04-17T01:03:57.619213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogtwn2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c3f48f66-9391-4f0a-a0bf-c737366d0337", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogtwn2t"}, {"timestamp": "2025-04-17T01:04:00.736Z", "date_only": false, "value": "2025-04-17T01:04:00.736426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwoguvv2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d32903de-e198-4d53-9202-8a9312a2d725", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwoguvv2t"}, {"timestamp": "2025-04-17T01:04:03.817Z", "date_only": false, "value": "2025-04-17T01:04:03.817246Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv52t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c6794790-e39e-41cf-b686-0ccb8c591100", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv52t"}, {"timestamp": "2025-04-17T01:04:07.026Z", "date_only": false, "value": "2025-04-17T01:04:07.026522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv62t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "031a5606-5e41-420f-8936-eb6f6a91b809", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv62t"}, {"timestamp": "2025-04-17T01:04:10.269Z", "date_only": false, "value": "2025-04-17T01:04:10.269906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv72t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "da495eff-14c6-4a8f-b2b5-f4c97f6ad715", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv72t"}, {"timestamp": "2025-04-17T01:04:13.497Z", "date_only": false, "value": "2025-04-17T01:04:13.497298Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuh2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "6a6917d6-a0bf-40bb-9ef0-c64a39043a6d", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuh2t"}, {"timestamp": "2025-04-17T01:04:16.649Z", "date_only": false, "value": "2025-04-17T01:04:16.649854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwui2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b0b4694f-cd0f-442c-9f4d-1a74afc812a8", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwui2t"}, {"timestamp": "2025-04-17T01:04:19.774Z", "date_only": false, "value": "2025-04-17T01:04:19.774461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuj2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b71d2351-8845-48d8-b27e-68b88309444a", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuj2t"}, {"timestamp": "2025-04-17T01:04:23.001Z", "date_only": false, "value": "2025-04-17T01:04:23.001213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuk2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "8cf9c439-f3f2-4e1e-8831-3ed099e19b1a", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuk2t"}, {"timestamp": "2025-04-17T01:04:26.164Z", "date_only": false, "value": "2025-04-17T01:04:26.164586Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwul2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "14c25a06-b9ad-4c24-9efc-0ec0a4338abe", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwul2t"}, {"timestamp": "2025-04-17T01:04:29.441Z", "date_only": false, "value": "2025-04-17T01:04:29.441332Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogxtt2t", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "87444bfe-31bc-4605-a9dd-9115163deb10", "url": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogxtt2t"}, {"timestamp": "2025-04-18T09:14:17.471Z", "date_only": false, "value": "2025-04-18T09:14:17.471728Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3brmxyp3e2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "493b270a-bdfb-4212-9e1c-18f61549470d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3brmxyp3e2"}, {"timestamp": "2025-04-20T09:15:02.154Z", "date_only": false, "value": "2025-04-20T09:15:02.154035Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnacrrpc7s2x", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "00c6703b-3a1a-4ae5-b566-4cbd114891a9", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnacrrpc7s2x"}, {"timestamp": "2025-04-21T15:55:01.990Z", "date_only": false, "value": "2025-04-21T15:55:01.990411Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114376763000434092", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "bdcf7760-66fd-4bf1-b94e-fb4f11267a73", "url": "https://infosec.exchange/users/wdormann/statuses/114376763000434092"}, {"timestamp": "2025-04-21T15:57:13.167Z", "date_only": false, "value": "2025-04-21T15:57:13.167713Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lndjmazj6gq2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d2fc2e44-c5ff-4694-9574-fe66a8512be9", "url": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lndjmazj6gq2"}, {"timestamp": "2025-04-23T15:01:07.038Z", "date_only": false, "value": "2025-04-23T15:01:07.038326Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rhisac.org/post/3lnihjftbhs24", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "7be7b5fe-019e-43ab-92ab-dacc0ed72b3f", "url": "https://bsky.app/profile/rhisac.org/post/3lnihjftbhs24"}, {"timestamp": "2025-04-24T14:25:40.627Z", "date_only": false, "value": "2025-04-24T14:25:40.627812Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-4767cd56-ab8d85329d413a77", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5544d9bd-f4bd-4674-987b-f843f54554a5", "url": "https://poliverso.org/objects/0477a01e-4767cd56-ab8d85329d413a77"}, {"timestamp": "2025-04-25T01:43:52.069Z", "date_only": false, "value": "2025-04-25T01:43:52.069225Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lnm3vpwbsn2u", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "a67cb4bf-ab37-4a78-a06a-fc868138b7c7", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lnm3vpwbsn2u"}, {"timestamp": "2025-04-26T12:52:30.061Z", "date_only": false, "value": "2025-04-26T12:52:30.061389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3lnprqaa6e52r", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "90b0aa69-6f34-46d0-bb05-3b19e8e8615f", "url": "https://bsky.app/profile/royans.bsky.social/post/3lnprqaa6e52r"}, {"timestamp": "2025-04-27T03:42:30Z", "date_only": false, "value": "2025-04-27T03:42:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberBulletin/10687", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "87a6f049-9384-4ad4-b2f2-15f12eb24e94", "content": "The Hidden Dangers of VPNs: Critical Vulnerabilities Exposed (Late 2024 \u2013 Early 2025)\n\nVirtual Private Networks (VPNs) have long been considered an essential tool for securing online activity. However, a closer examination reveals an unsettling reality: VPNs themselves are increasingly becoming high-value targets for attackers. Over the past several months, a wave of critical vulnerabilities has shaken trust in these technologies, impacting both consumers and enterprises alike.\n\nIn this report, we highlight the most significant VPN vulnerabilities discovered from late 2024 into early 2025 \u2014 and why blind reliance on VPNs may no longer be a safe bet.\n\n\n---\n\nCVE-2025-22457: Critical Buffer Overflow in Ivanti Connect Secure and Pulse Connect Secure\n\nIn April 2025, researchers uncovered CVE-2025-22457, a critical unauthenticated stack-based buffer overflow vulnerability affecting Ivanti Connect Secure (ICS) and Pulse Connect Secure VPN appliances. Impacted versions include ICS 22.7R2.5 and earlier, as well as Pulse Connect Secure 9.1x, which reached end-of-support in December 2024.\n\nInitially, Ivanti assessed the issue as non-exploitable due to character restrictions (periods and numbers only) within the overflow. However, a suspected Chinese advanced persistent threat (APT) group, dubbed UNC5221, demonstrated that \u2014 through intricate exploitation techniques \u2014 remote code execution was indeed achievable.\n\nExploitation Details:\n\nProof-of-concept (PoC) exploits are already available publicly, such as the sfewer-r7 implementation on GitHub. Attackers can leverage these to gain a reverse shell with limited user privileges (\"nr\"), circumventing initial vendor assumptions about exploitability.\n\nA netcat listener captures the shell.\n\nThe exploit brute-forces address space layout randomization (ASLR) protections by guessing base addresses for libdsplibs.so.\n\nSuccessful exploitation results in unauthorized access to the underlying system.\n\n\nExposure:\nAs of April 2025, Shodan scans indicated over 4,000 vulnerable instances exposed online.\n\n\n---\n\nCVE-2024-53704: Authentication Bypass in SonicWall SSL VPN\n\nAnother significant threat emerged with CVE-2024-53704, a critical authentication bypass vulnerability impacting SonicWall\u2019s SSL VPN solutions based on SonicOS versions 7.1.x (through 7.1.1-7058), 7.1.2-7019, and 8.0.0-8035.\n\nDiscovered by Computest Security in November 2024 and patched in January 2025, this flaw allows attackers to hijack active VPN sessions by manipulating Base64-encoded session cookies \u2014 bypassing even multi-factor authentication (MFA) mechanisms.\n\nAttack Technique:\n\nBy inserting 32 null bytes encoded in Base64 into the swap cookie of a GET request, adversaries can effectively impersonate legitimate users without valid credentials.\n\nDespite available patches, thousands of systems remained unpatched into early 2025. According to Bishop Fox, more than 4,500 SonicWall VPN instances were still exposed as of February 2025.\n\n\n---\n\nCVE-2025-0282 and CVE-2025-0283: Stack-Based Buffer Overflows in Ivanti Products\n\nIn January 2025, Ivanti disclosed two additional vulnerabilities:\n\nCVE-2025-0282 (CVSS 9.0): Unauthenticated stack-based buffer overflow enabling remote code execution.\n\nCVE-2025-0283 (CVSS 7.0): Local privilege escalation via stack-based buffer overflow.\n\n\nAffected products included Ivanti Connect Secure, Policy Secure, and Neurons for Zero Trust Access (ZTA) gateways.\n\nExploitation Insights:\n\nPublic exploits, such as the one by sfewer-r7, target specific product versions with tailored ROP (Return-Oriented Programming) chains.\n\nSuccessful exploitation allows execution of operating system commands under non-root privileges, confirming breach activity.\n\n\nNotably, the exploit requires multiple attempts due to ASLR protections but ultimately grants unauthorized access if persistence is maintained.\n\n\n---\n\nCVE-2025-20212: Cisco Meraki AnyConnect VPN Denial-of-Service Vulnerability\n\nCisco disclosed CVE-2025-20212, a high-severity DoS vulnerability affecting AnyConnect VPN servers on Meraki MX and Z series devices.", "url": "https://t.me/CyberBulletin/10687"}, {"timestamp": "2025-04-27T05:42:31Z", "date_only": false, "value": "2025-04-27T05:42:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberBulletin/3124", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "701631a8-6fe7-48be-b66e-53dd0ce084ba", "content": "The Hidden Dangers of VPNs: Critical Vulnerabilities Exposed (Late 2024 \u2013 Early 2025)\n\nVirtual Private Networks (VPNs) have long been considered an essential tool for securing online activity. However, a closer examination reveals an unsettling reality: VPNs themselves are increasingly becoming high-value targets for attackers. Over the past several months, a wave of critical vulnerabilities has shaken trust in these technologies, impacting both consumers and enterprises alike.\n\nIn this report, we highlight the most significant VPN vulnerabilities discovered from late 2024 into early 2025 \u2014 and why blind reliance on VPNs may no longer be a safe bet.\n\n\n---\n\nCVE-2025-22457: Critical Buffer Overflow in Ivanti Connect Secure and Pulse Connect Secure\n\nIn April 2025, researchers uncovered CVE-2025-22457, a critical unauthenticated stack-based buffer overflow vulnerability affecting Ivanti Connect Secure (ICS) and Pulse Connect Secure VPN appliances. Impacted versions include ICS 22.7R2.5 and earlier, as well as Pulse Connect Secure 9.1x, which reached end-of-support in December 2024.\n\nInitially, Ivanti assessed the issue as non-exploitable due to character restrictions (periods and numbers only) within the overflow. However, a suspected Chinese advanced persistent threat (APT) group, dubbed UNC5221, demonstrated that \u2014 through intricate exploitation techniques \u2014 remote code execution was indeed achievable.\n\nExploitation Details:\n\nProof-of-concept (PoC) exploits are already available publicly, such as the sfewer-r7 implementation on GitHub. Attackers can leverage these to gain a reverse shell with limited user privileges (\"nr\"), circumventing initial vendor assumptions about exploitability.\n\nA netcat listener captures the shell.\n\nThe exploit brute-forces address space layout randomization (ASLR) protections by guessing base addresses for libdsplibs.so.\n\nSuccessful exploitation results in unauthorized access to the underlying system.\n\n\nExposure:\nAs of April 2025, Shodan scans indicated over 4,000 vulnerable instances exposed online.\n\n\n---\n\nCVE-2024-53704: Authentication Bypass in SonicWall SSL VPN\n\nAnother significant threat emerged with CVE-2024-53704, a critical authentication bypass vulnerability impacting SonicWall\u2019s SSL VPN solutions based on SonicOS versions 7.1.x (through 7.1.1-7058), 7.1.2-7019, and 8.0.0-8035.\n\nDiscovered by Computest Security in November 2024 and patched in January 2025, this flaw allows attackers to hijack active VPN sessions by manipulating Base64-encoded session cookies \u2014 bypassing even multi-factor authentication (MFA) mechanisms.\n\nAttack Technique:\n\nBy inserting 32 null bytes encoded in Base64 into the swap cookie of a GET request, adversaries can effectively impersonate legitimate users without valid credentials.\n\nDespite available patches, thousands of systems remained unpatched into early 2025. According to Bishop Fox, more than 4,500 SonicWall VPN instances were still exposed as of February 2025.\n\n\n---\n\nCVE-2025-0282 and CVE-2025-0283: Stack-Based Buffer Overflows in Ivanti Products\n\nIn January 2025, Ivanti disclosed two additional vulnerabilities:\n\nCVE-2025-0282 (CVSS 9.0): Unauthenticated stack-based buffer overflow enabling remote code execution.\n\nCVE-2025-0283 (CVSS 7.0): Local privilege escalation via stack-based buffer overflow.\n\n\nAffected products included Ivanti Connect Secure, Policy Secure, and Neurons for Zero Trust Access (ZTA) gateways.\n\nExploitation Insights:\n\nPublic exploits, such as the one by sfewer-r7, target specific product versions with tailored ROP (Return-Oriented Programming) chains.\n\nSuccessful exploitation allows execution of operating system commands under non-root privileges, confirming breach activity.\n\n\nNotably, the exploit requires multiple attempts due to ASLR protections but ultimately grants unauthorized access if persistence is maintained.\n\n\n---\n\nCVE-2025-20212: Cisco Meraki AnyConnect VPN Denial-of-Service Vulnerability\n\nCisco disclosed CVE-2025-20212, a high-severity DoS vulnerability affecting AnyConnect VPN servers on Meraki MX and Z series devices.", "url": "https://t.me/CyberBulletin/3124"}, {"timestamp": "2025-04-29T12:49:14.610Z", "date_only": false, "value": "2025-04-29T12:49:14.610847Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/wdormann/statuses/114421330992040665", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "5139212f-b612-4e6d-9e79-3a70a80a67c7", "url": "https://infosec.exchange/users/wdormann/statuses/114421330992040665"}, {"timestamp": "2025-04-30T06:11:57.544Z", "date_only": false, "value": "2025-04-30T06:11:57.544556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lnz57jonz22c", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "0359b720-3737-4333-b5fa-3666a2f8beaf", "url": "https://bsky.app/profile/shiojiri.com/post/3lnz57jonz22c"}, {"timestamp": "2025-04-30T08:35:46.051Z", "date_only": false, "value": "2025-04-30T08:35:46.051595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybercrimeinfo.bsky.social/post/3lnzfas6vvk2q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b1254394-9a0d-4c1a-8bb9-93fd7b4b656b", "url": "https://bsky.app/profile/cybercrimeinfo.bsky.social/post/3lnzfas6vvk2q"}, {"timestamp": "2025-04-30T08:35:46.775Z", "date_only": false, "value": "2025-04-30T08:35:46.775325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lnzfauxwg72q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f919f4f7-e463-4765-a2cc-ab84c1a32952", "url": "https://bsky.app/profile/potato.software/post/3lnzfauxwg72q"}, {"timestamp": "2025-05-01T09:31:20.758Z", "date_only": false, "value": "2025-05-01T09:31:20.758865Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3lo3yt63n372b", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "59fd8130-1a03-4797-9f6f-f762c89a43eb", "url": "https://bsky.app/profile/keiwork35.bsky.social/post/3lo3yt63n372b"}, {"timestamp": "2025-05-02T21:26:14.418Z", "date_only": false, "value": "2025-05-02T21:26:14.418997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lo7rafkx2c23", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "01d44f72-3ef4-4ae2-943a-2d1fdacb9135", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lo7rafkx2c23"}, {"timestamp": "2025-05-03T22:03:18.876Z", "date_only": false, "value": "2025-05-03T22:03:18.876171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3locdrksjgs2r", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "2a5eeb30-685e-4799-a096-f71b5be8623c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3locdrksjgs2r"}, {"timestamp": "2025-05-15T16:52:39Z", "date_only": false, "value": "2025-05-15T16:52:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_stack_overflow_rce_cve_2025_22457.rb", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "37832f2d-be9d-4623-86e3-8f4173409217", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_stack_overflow_rce_cve_2025_22457.rb"}, {"timestamp": "2025-05-16T21:02:20.989Z", "date_only": false, "value": "2025-05-16T21:02:20.989288Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgiyvfj27", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "db894df8-0185-4b2f-b2a2-f65ef03c94f1", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgiyvfj27"}, {"timestamp": "2025-05-28T10:35:01.280Z", "date_only": false, "value": "2025-05-28T10:35:01.280535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7yw3au5zc2", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "1e489a48-f37d-4ad3-afd8-a8af078d4e10", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7yw3au5zc2"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-003", "record": "CERTFR-2025-ALE-003", "field": "last_revision_date"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-003", "record": "CERTFR-2025-ALE-003", "field": "revisions.1.revision_date"}, {"timestamp": "2025-07-13T10:47:28Z", "date_only": false, "value": "2025-07-13T10:47:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/43887", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "92a3067b-12af-414c-9910-580940dbc6a0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-22457\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-22457\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/43887"}, {"timestamp": "2025-07-13T15:00:06Z", "date_only": false, "value": "2025-07-13T15:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/G-kx-DTDWfPOp5cJepg92j2e9E9yyQ0k9SVYaxiupb8kGRk", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "cd49ddad-c388-4852-a5f9-1d219b814df8"}, {"timestamp": "2025-07-18T10:15:51.454Z", "date_only": false, "value": "2025-07-18T10:15:51.454465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3lua7ohlgc22a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "6360bdbf-aab1-4e12-a1d6-ab73db79e562", "url": "https://bsky.app/profile/virusbtn.bsky.social/post/3lua7ohlgc22a"}, {"timestamp": "2025-07-18T12:19:05Z", "date_only": false, "value": "2025-07-18T12:19:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/69b951bb-34b6-4390-9f3d-0bf526662506", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c8ed87e1-efaa-4406-9081-7b1ea51e58db"}, {"timestamp": "2025-07-18T16:13:00Z", "date_only": false, "value": "2025-07-18T16:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/07/ivanti-zero-days-exploited-to-drop.html", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "d6eb4cca-6272-40c4-b34d-c2c2e2c73d79", "url": "https://thehackernews.com/2025/07/ivanti-zero-days-exploited-to-drop.html"}, {"timestamp": "2025-07-18T21:46:40Z", "date_only": false, "value": "2025-07-18T21:46:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/dLN9P6gJsmc7So2pdSN-39vlZ3RhghrWdsOMruumJOzh0Q", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "0674d01e-79b2-40f0-8ce9-0febc61f55c0"}, {"timestamp": "2025-07-19T01:54:13.688Z", "date_only": false, "value": "2025-07-19T01:54:13.688346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lubu4fs4fs2w", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "44d773a9-a7dc-4968-8412-4f25070b9fe3", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lubu4fs4fs2w"}, {"timestamp": "2025-07-22T03:54:24Z", "date_only": false, "value": "2025-07-22T03:54:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "f0a1e52e-9047-43cc-b7db-0d50adc6062d"}, {"timestamp": "2025-08-22T02:25:36Z", "date_only": false, "value": "2025-08-22T02:25:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6a8e5bb3-f4fc-5687-8689-d3e4069b9c4d", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "9fbb4a13-a22d-46e7-a2b9-29fe42e86d07"}, {"timestamp": "2025-08-27T14:01:55.402Z", "date_only": false, "value": "2025-08-27T14:01:55.402833Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-5996e413-521accfb6cd2622e", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "686d1785-4242-4478-b1e3-422fa70be4b9", "url": "https://poliverso.org/objects/0477a01e-5996e413-521accfb6cd2622e"}, {"timestamp": "2025-08-30T18:47:15Z", "date_only": false, "value": "2025-08-30T18:47:15.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/code/cves/2025/CVE-2025-22457.yaml", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "965d3d82-1a42-46f7-951a-88349ee45f6a", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/code/cves/2025/CVE-2025-22457.yaml"}, {"timestamp": "2025-09-09T11:53:44Z", "date_only": false, "value": "2025-09-09T11:53:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "7165576f-53a9-4390-9035-2e9ea0ae54ad"}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "0cb37da2-123c-443b-b1ad-cf4e8949714c"}, {"timestamp": "2025-09-29T03:12:16Z", "date_only": false, "value": "2025-09-29T03:12:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "52cc8244-892c-486b-9845-1209acf6d488"}, {"timestamp": "2025-10-21T18:38:28.752Z", "date_only": false, "value": "2025-10-21T18:38:28.752911Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115413608520893439", "record": "cve-2025-22457", "field": "creation_timestamp", "uuid": "36689eb0-5764-49bf-a5f9-a37bcc89cb31", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115413608520893439"}, {"timestamp": "2025-10-22T00:33:16Z", "date_only": false, "value": "2025-10-22T00:33:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JJR5-FPCG-GC53", "record": "GHSA-JJR5-FPCG-GC53", "field": "modified"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "91fd469a-694a-4604-9dba-9159ed2464be"}, {"timestamp": "2025-11-04T03:27:24.408Z", "date_only": false, "value": "2025-11-04T03:27:24.408054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m4rlokbbjs2a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "93223831-55c4-41a4-a8a8-80b2a8cfda59", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m4rlokbbjs2a"}, {"timestamp": "2026-02-02T12:26:04.320Z", "date_only": false, "value": "2026-02-02T12:26:04.320214Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9be262d6-0d01-4d80-8129-f59b23fedb56", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "99392757-9a78-4079-951c-ad46c3f75e3f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9be262d6-0d01-4d80-8129-f59b23fedb56"}, {"timestamp": "2026-02-02T12:26:04.320Z", "date_only": false, "value": "2026-02-02T12:26:04.320214Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9be262d6-0d01-4d80-8129-f59b23fedb56", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "88bac010-2864-4add-8cbd-f5df39345911", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9be262d6-0d01-4d80-8129-f59b23fedb56"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-22457", "field": "timestamps.recorded_at", "uuid": "49b7bb50-2bbe-4cf1-9519-9011a43f4b63", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2025-22457", "field": "timestamps.asserted_at", "uuid": "6dd50d49-9a6e-4a69-a343-aeacf95bb49a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2025-22457", "field": "timestamps.first_seen_at", "uuid": "6dd50d49-9a6e-4a69-a343-aeacf95bb49a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2025-22457", "field": "status.status_updated_at", "uuid": "6dd50d49-9a6e-4a69-a343-aeacf95bb49a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-28T15:04:46.154Z", "date_only": false, "value": "2026-04-28T15:04:46.154427Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mkkuanitwx27", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "9ca74bad-e211-47aa-8a5b-8123871f3e50", "url": "https://bsky.app/profile/hakksaww.bsky.social/post/3mkkuanitwx27"}, {"timestamp": "2026-06-05T16:59:25.126Z", "date_only": false, "value": "2026-06-05T16:59:25.126111Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/50e9db76-374f-4d94-9409-2a9f835f79cf", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "759fcf72-2e7b-4c88-a409-a335454fbd3c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/50e9db76-374f-4d94-9409-2a9f835f79cf"}, {"timestamp": "2026-06-05T17:01:37Z", "date_only": false, "value": "2026-06-05T17:01:37+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2025-22457", "field": "timestamps.recorded_at", "uuid": "6dd50d49-9a6e-4a69-a343-aeacf95bb49a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T17:01:38.312Z", "date_only": false, "value": "2026-06-05T17:01:38.312180Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6dd50d49-9a6e-4a69-a343-aeacf95bb49a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "2f3ead45-e6b1-402a-9dc5-71cbec9dd1ed", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6dd50d49-9a6e-4a69-a343-aeacf95bb49a"}, {"timestamp": "2026-06-19T12:46:23.240Z", "date_only": false, "value": "2026-06-19T12:46:23.240496Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/63cb24d0-6262-45db-91b7-8f8aa66a8a1a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "dd13fd32-c535-4b13-9913-04942e585166", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/63cb24d0-6262-45db-91b7-8f8aa66a8a1a"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-22457", "field": "timestamps.recorded_at", "uuid": "133b328d-4cdb-4462-8795-e3c2399051b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:35.691Z", "date_only": false, "value": "2026-06-23T11:14:35.691287Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/133b328d-4cdb-4462-8795-e3c2399051b6", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "ecbbf392-eda7-4966-925c-d3902eb524f7", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/133b328d-4cdb-4462-8795-e3c2399051b6"}, {"timestamp": "2026-06-23T14:06:08.020Z", "date_only": false, "value": "2026-06-23T14:06:08.020302Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/198f55a1-f498-4b55-bb9c-b12752603c6a", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "732e81ba-cdd0-4247-a8ba-076b893adf7b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/198f55a1-f498-4b55-bb9c-b12752603c6a"}, {"timestamp": "2026-07-09T03:00:08.691Z", "date_only": false, "value": "2026-07-09T03:00:08.691971Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1714", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "01d22d08-9d40-4b86-909d-bbcfdddbf7e6", "url": "https://t.me/brutsecurity/1714"}, {"timestamp": "2026-07-10T00:00:32.231Z", "date_only": false, "value": "2026-07-10T00:00:32.231964Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1714", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "3f371d29-ac9a-4f25-9527-f8a380b1c1e4", "url": "https://t.me/brutsecurity/1714"}, {"timestamp": "2026-07-11T13:00:05.075Z", "date_only": false, "value": "2026-07-11T13:00:05.075937Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1714", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "4f5799e5-a347-4742-b0a8-d77a9422a3bf", "url": "https://t.me/brutsecurity/1714"}, {"timestamp": "2026-07-12T00:00:48.601Z", "date_only": false, "value": "2026-07-12T00:00:48.601383Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1714", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "60db55c4-d29a-45f2-9863-5556979d694d", "url": "https://t.me/brutsecurity/1714"}, {"timestamp": "2026-07-16T19:00:13.769Z", "date_only": false, "value": "2026-07-16T19:00:13.769683Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "c4460c1b-b4ad-4f5a-aac5-1fb7b330a7da"}, {"timestamp": "2026-07-17T00:00:30.018Z", "date_only": false, "value": "2026-07-17T00:00:30.018581Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "37af608b-e3f3-4058-b363-fc68dd602179"}, {"timestamp": "2026-07-18T00:00:42.608Z", "date_only": false, "value": "2026-07-18T00:00:42.608895Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "61261acc-285a-428c-88a9-7273149467a7"}, {"timestamp": "2026-07-20T22:00:03.657Z", "date_only": false, "value": "2026-07-20T22:00:03.657345Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/276", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "b39332cb-f69a-4810-85b3-5dbef8b511e6", "url": "https://t.me/pphm_HackerNews/276"}, {"timestamp": "2026-07-21T00:00:10.010Z", "date_only": false, "value": "2026-07-21T00:00:10.010419Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/276", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "623a64fc-4b6e-402f-af9e-e360a3fe69b5", "url": "https://t.me/pphm_HackerNews/276"}, {"timestamp": "2026-07-25T15:00:14.663Z", "date_only": false, "value": "2026-07-25T15:00:14.663869Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/466", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "e668cbc1-9607-4929-9120-ef81cd02156e", "url": "https://t.me/ZerodayAlert/466"}, {"timestamp": "2026-07-26T00:00:14.185Z", "date_only": false, "value": "2026-07-26T00:00:14.185910Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/466", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "fc1c5c59-a580-4bde-9bd2-6e1205780490", "url": "https://t.me/ZerodayAlert/466"}, {"timestamp": "2026-07-29T09:00:07.889Z", "date_only": false, "value": "2026-07-29T09:00:07.889143Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rtinfobez/389", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "93e7c412-9fdf-4fd6-8366-1a0d017e074b", "url": "https://t.me/rtinfobez/389"}, {"timestamp": "2026-07-30T00:02:06.461Z", "date_only": false, "value": "2026-07-30T00:02:06.461213Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rtinfobez/389", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "1750f8d4-fa94-4885-9e24-00bd0e5a256c", "url": "https://t.me/rtinfobez/389"}, {"timestamp": "2026-08-04T03:55:47.416Z", "date_only": false, "value": "2026-08-04T03:55:47.416Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-22457", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:55:47.416Z", "date_only": false, "value": "2026-08-04T03:55:47.416Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-22457", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:33.707Z", "date_only": false, "value": "2026-08-04T05:16:33.707", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-22457", "record": "FKIE_CVE-2025-22457", "field": "lastModified"}, {"timestamp": "2026-08-04T11:02:13.099Z", "date_only": false, "value": "2026-08-04T11:02:13.099956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msauezrokc22", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "837fefc7-dc32-4a7f-afe8-3ffb7ce6787d", "url": "https://bsky.app/profile/vulnsea.com/post/3msauezrokc22"}, {"timestamp": "2026-08-14T16:00:20.015Z", "date_only": false, "value": "2026-08-14T16:00:20.015622Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/467", "record": "CVE-2025-22457", "field": "creation_timestamp", "uuid": "421a241a-cc9c-4447-a484-06d53ff3e133", "url": "https://t.me/purp_sec/467"}]}