{"metadata": {"vulnerability": "CVE-2025-23013", "count": 79, "kinds": {"milestone": 12, "sighting": 23, "kev": 0, "other": 44}}, "data": [{"timestamp": "2025-01-09T00:00:00Z", "date_only": false, "value": "2025-01-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-23013", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23013", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-15T03:56:38.534Z", "date_only": false, "value": "2025-01-15T03:56:38.534Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-23013", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-15T04:14:10Z", "date_only": false, "value": "2025-01-15T04:14:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1698", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "6aa1b1eb-a257-4fbc-9547-41461197f1bc", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23013\n\ud83d\udd39 Description: In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue that allows for an authentication bypass in some configurations. An attacker would require the ability to access the system as an unprivileged user. Depending on the configuration, the attacker may also need to know the user's password.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T03:56:38.534Z\n\ud83d\udd17 References:\n1. https://www.yubico.com/support/security-advisories/ysa-2025-01/", "url": "https://t.me/DarkWebInformer_CVEAlerts/1698"}, {"timestamp": "2025-01-15T04:15:00Z", "date_only": false, "value": "2025-01-15T04:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-23013", "record": "UBUNTU-CVE-2025-23013", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-15T04:15:20Z", "date_only": false, "value": "2025-01-15T04:15:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WWR4-CJ7G-985F", "record": "GHSA-WWR4-CJ7G-985F", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-01-15T04:15:20.037Z", "date_only": false, "value": "2025-01-15T04:15:20.037", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23013", "record": "FKIE_CVE-2025-23013", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-15T05:54:39Z", "date_only": false, "value": "2025-01-15T05:54:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15402", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "bbc4cd34-48b5-491f-ad60-3b3df570387d", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23013 - Yubico pam-u2f Local Privilege Escalation Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-23013 \nPublished : Jan. 15, 2025, 4:15 a.m. | 35\u00a0minutes ago \nDescription : In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue that allows for an authentication bypass in some configurations. An attacker would require the ability to access the system as an unprivileged user. Depending on the configuration, the attacker may also need to know the user's password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15402"}, {"timestamp": "2025-01-15T06:30:49Z", "date_only": false, "value": "2025-01-15T06:30:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WWR4-CJ7G-985F", "record": "GHSA-WWR4-CJ7G-985F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-15T12:24:49.536Z", "date_only": false, "value": "2025-01-15T12:24:49.536048Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfrr3rkq7b25", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "247e5253-1e3f-4519-9df2-0ce04c399ff1", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfrr3rkq7b25"}, {"timestamp": "2025-01-15T14:51:01.272Z", "date_only": false, "value": "2025-01-15T14:51:01.272240Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23013", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-15T14:51:01.272Z", "date_only": false, "value": "2025-01-15T14:51:01.272240Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23013", "record": "FKIE_CVE-2025-23013", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-01-15T14:51:14.757Z", "date_only": false, "value": "2025-01-15T14:51:14.757Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23013", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-15T23:16:48.496Z", "date_only": false, "value": "2025-01-15T23:16:48.496234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfsvjlfark2e", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "ea5b039d-0951-4c14-bf83-3f939f87a2ac", "url": "https://bsky.app/profile/omo.bsky.social/post/3lfsvjlfark2e"}, {"timestamp": "2025-01-16T06:30:01.039Z", "date_only": false, "value": "2025-01-16T06:30:01.039768Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lftnqaxmwj25", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "f6004c56-eaa5-4ffa-b8ad-881544c78ca4", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lftnqaxmwj25"}, {"timestamp": "2025-01-16T10:45:17.498Z", "date_only": false, "value": "2025-01-16T10:45:17.498459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfu3ypnhzl2u", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "0d0ce379-10b0-43df-8a7e-a718024d78de", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfu3ypnhzl2u"}, {"timestamp": "2025-01-16T17:14:59.508Z", "date_only": false, "value": "2025-01-16T17:14:59.508616Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfurrkhlyl2u", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "93d5a8ec-eebb-4444-8428-00f61415e47a", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfurrkhlyl2u"}, {"timestamp": "2025-01-16T19:45:07.944Z", "date_only": false, "value": "2025-01-16T19:45:07.944870Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfv25zzaps2x", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "9ec62a25-57e9-426c-ba66-03bf8ef0244c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfv25zzaps2x"}, {"timestamp": "2025-01-17T04:19:07.020Z", "date_only": false, "value": "2025-01-17T04:19:07.020982Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfvwv42lik2m", "record": "cve-2025-23013", "field": "creation_timestamp", "uuid": "78f9d030-b7f4-4b4f-b843-f8d9f7be65dc", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfvwv42lik2m"}, {"timestamp": "2025-01-17T05:09:42.745Z", "date_only": false, "value": "2025-01-17T05:09:42.745476Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfvzpkypyq2x", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "fdaa3992-6d2f-4cfa-af15-8c59042b2ccb", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfvzpkypyq2x"}, {"timestamp": "2025-01-17T13:40:04.118Z", "date_only": false, "value": "2025-01-17T13:40:04.118766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfwwa466272j", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "9e57f9c1-ee3c-4ea1-b4ef-748a1dd9a19b", "url": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfwwa466272j"}, {"timestamp": "2025-01-17T15:30:27.014Z", "date_only": false, "value": "2025-01-17T15:30:27.014594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3lfx4fig3e22f", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "8d245ede-9062-4183-a7e4-aacfaf803709", "url": "https://bsky.app/profile/happygeek.bsky.social/post/3lfx4fig3e22f"}, {"timestamp": "2025-01-17T16:09:54Z", "date_only": false, "value": "2025-01-17T16:09:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0167-1", "record": "SUSE-SU-2025:0167-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-01-17T16:09:54Z", "date_only": false, "value": "2025-01-17T16:09:54Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0167-1", "record": "SUSE-SU-2025:0167-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-17T16:09:54Z", "date_only": false, "value": "2025-01-17T16:09:54Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0167-1", "record": "SUSE-SU-2025:0167-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-01-17T16:09:54Z", "date_only": false, "value": "2025-01-17T16:09:54Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0167-1", "record": "SUSE-SU-2025:0167-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-18T14:51:01Z", "date_only": false, "value": "2025-01-18T14:51:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/01/18/yubico-issues-security-advisory-as.html", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "d6742098-b36a-4018-952d-a53061ee1d8c", "url": "https://threatintel.cc/2025/01/18/yubico-issues-security-advisory-as.html"}, {"timestamp": "2025-01-18T19:54:31.980Z", "date_only": false, "value": "2025-01-18T19:54:31.980138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lg23mofhiz2v", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "ab567808-44a0-41a3-adb3-8800d4ece6c0", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lg23mofhiz2v"}, {"timestamp": "2025-01-20T09:04:08Z", "date_only": false, "value": "2025-01-20T09:04:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0192-1", "record": "SUSE-SU-2025:0192-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-01-20T09:04:08Z", "date_only": false, "value": "2025-01-20T09:04:08Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0192-1", "record": "SUSE-SU-2025:0192-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-20T09:04:08Z", "date_only": false, "value": "2025-01-20T09:04:08Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0192-1", "record": "SUSE-SU-2025:0192-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-01-20T09:04:08Z", "date_only": false, "value": "2025-01-20T09:04:08Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0192-1", "record": "SUSE-SU-2025:0192-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-21T03:14:24Z", "date_only": false, "value": "2025-01-21T03:14:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/240", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "bd262b04-3844-4ac2-a37a-5080bbd1d98e", "content": "1. CVE-2025-0107:\nPalo Alto Expedition Tool OS Command Injection\nhttps://ssd-disclosure.com/ssd-advisory-palo-alto-expedition-rce-regionsdiscovery\n\n2. CVE-2025-22710:\nhttps://github.com/DoTTak/CVE-2025-22710\n\n3. Yubico PAM Module Vulnerability (CVE-2025-23013): A Deep Dive into Authentication Bypass in Certain Configurations\nhttps://cybersrcc.com/2025/01/18/yubico-pam-module-vulnerability-cve-2025-23013-a-deep-dive-into-authentication-bypass-in-certain-configurations", "url": "https://t.me/hackingbra/240", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-21T09:08:44.712Z", "date_only": false, "value": "2025-01-21T09:08:44.712492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lgaiwaxv2uo2", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "9b83b505-f8dd-4f75-bb3d-5cd6a18cd928", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lgaiwaxv2uo2"}, {"timestamp": "2025-01-21T10:10:10Z", "date_only": false, "value": "2025-01-21T10:10:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0198-1", "record": "SUSE-SU-2025:0198-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-01-21T10:10:10Z", "date_only": false, "value": "2025-01-21T10:10:10Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0198-1", "record": "SUSE-SU-2025:0198-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-21T10:10:10Z", "date_only": false, "value": "2025-01-21T10:10:10Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0198-1", "record": "SUSE-SU-2025:0198-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-01-21T10:10:10Z", "date_only": false, "value": "2025-01-21T10:10:10Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0198-1", "record": "SUSE-SU-2025:0198-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-21T10:54:46.318Z", "date_only": false, "value": "2025-01-21T10:54:46.318917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lgaotjufnun2", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "019964d4-63f2-496e-af0c-855757e981b1", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lgaotjufnun2"}, {"timestamp": "2025-01-21T12:50:26Z", "date_only": false, "value": "2025-01-21T12:50:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0200-1", "record": "SUSE-SU-2025:0200-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-01-21T12:50:26Z", "date_only": false, "value": "2025-01-21T12:50:26Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0200-1", "record": "SUSE-SU-2025:0200-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-21T12:50:26Z", "date_only": false, "value": "2025-01-21T12:50:26Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0200-1", "record": "SUSE-SU-2025:0200-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-01-21T12:50:26Z", "date_only": false, "value": "2025-01-21T12:50:26Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0200-1", "record": "SUSE-SU-2025:0200-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-21T12:50:26Z", "date_only": false, "value": "2025-01-21T12:50:26Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0200-1", "record": "SUSE-SU-2025:0200-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-01-21T14:17:49.727Z", "date_only": false, "value": "2025-01-21T14:17:49.727964Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lgb273zzehe2", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "5a7f0e8b-6700-4e5c-9a07-d8c4de51b257", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lgb273zzehe2"}, {"timestamp": "2025-01-21T16:15:13Z", "date_only": false, "value": "2025-01-21T16:15:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ckeArsenal/367", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "62359fea-a0d0-4fd4-a1b6-6104521da9b6", "content": "https://cybersrcc.com/2025/01/18/yubico-pam-module-vulnerability-cve-2025-23013-a-deep-dive-into-authentication-bypass-in-certain-configurations/\n\nYubico PAM Module Vulnerability (CVE-2025-23013): A Deep Dive into Authentication Bypass in Certain Configurations\n#\u5206\u6790", "url": "https://t.me/ckeArsenal/367"}, {"timestamp": "2025-01-21T17:32:57.917Z", "date_only": false, "value": "2025-01-21T17:32:57.917629Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insightsintothings.bsky.social/post/3lgbf5qj3s223", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "902ac5f1-f0e2-4cb6-9cc0-bd89199e7f33", "url": "https://bsky.app/profile/insightsintothings.bsky.social/post/3lgbf5qj3s223"}, {"timestamp": "2025-01-21T17:53:47Z", "date_only": false, "value": "2025-01-21T17:53:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/11712", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "c031bb44-e8a2-4d78-a4eb-4839a4e74ff4", "content": "#exploit\n1. CVE-2025-0107:\nPalo Alto Expedition Tool OS Command Injection\n\n2. CVE-2025-22710:\nWP WooCommerce SQLI\n\n3. CVE-2025-23013:\nYubico PAM Module Authentication Bypass in Certain Configurations", "url": "https://t.me/CyberSecurityTechnologies/11712"}, {"timestamp": "2025-01-30T14:30:14.396Z", "date_only": false, "value": "2025-01-30T14:30:14.396863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lgxp3ti4dg23", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "99fe3018-d86f-4dac-9cfc-63e1d2d62bfe", "url": "https://bsky.app/profile/bolhasec.com/post/3lgxp3ti4dg23"}, {"timestamp": "2025-02-03T10:03:09.695Z", "date_only": false, "value": "2025-02-03T10:03:09.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-23013", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-03T10:03:09.695Z", "date_only": false, "value": "2025-02-03T10:03:09.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-23013", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-03T12:30:59Z", "date_only": false, "value": "2025-02-03T12:30:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WWR4-CJ7G-985F", "record": "GHSA-WWR4-CJ7G-985F", "field": "modified", "linked_record": true}, {"timestamp": "2025-02-06T02:39:11Z", "date_only": false, "value": "2025-02-06T02:39:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/bXoVZr4sugSR9q3M__pI9zA4zjTuEIp8gXQ02aHAAxpoT8j1", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "4e37562e-d243-4aa8-9c00-2fab7504dc9b"}, {"timestamp": "2025-03-04T08:28:37Z", "date_only": false, "value": "2025-03-04T08:28:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20132-1", "record": "SUSE-SU-2025:20132-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-03-04T08:28:37Z", "date_only": false, "value": "2025-03-04T08:28:37Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20132-1", "record": "SUSE-SU-2025:20132-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-03-04T08:28:37Z", "date_only": false, "value": "2025-03-04T08:28:37Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:20132-1", "record": "SUSE-SU-2025:20132-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-03-04T08:28:37Z", "date_only": false, "value": "2025-03-04T08:28:37Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:20132-1", "record": "SUSE-SU-2025:20132-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-05T14:56:53Z", "date_only": false, "value": "2025-03-05T14:56:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20231-1", "record": "SUSE-SU-2025:20231-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-03-05T14:56:53Z", "date_only": false, "value": "2025-03-05T14:56:53Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20231-1", "record": "SUSE-SU-2025:20231-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-03-05T14:56:53Z", "date_only": false, "value": "2025-03-05T14:56:53Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:20231-1", "record": "SUSE-SU-2025:20231-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-03-05T14:56:53Z", "date_only": false, "value": "2025-03-05T14:56:53Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:20231-1", "record": "SUSE-SU-2025:20231-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-10-24T05:18:01Z", "date_only": false, "value": "2025-10-24T05:18:01Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-23013", "record": "UBUNTU-CVE-2025-23013", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T08:51:25.930Z", "date_only": false, "value": "2026-06-17T08:51:25.930", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23013", "record": "FKIE_CVE-2025-23013", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-20T17:20:28Z", "date_only": false, "value": "2026-09-20T17:20:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0167-1", "record": "SUSE-SU-2025:0167-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T17:20:28Z", "date_only": false, "value": "2026-09-20T17:20:28Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0167-1", "record": "SUSE-SU-2025:0167-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T17:23:45Z", "date_only": false, "value": "2026-09-20T17:23:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0192-1", "record": "SUSE-SU-2025:0192-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T17:23:45Z", "date_only": false, "value": "2026-09-20T17:23:45Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0192-1", "record": "SUSE-SU-2025:0192-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T17:24:52Z", "date_only": false, "value": "2026-09-20T17:24:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0198-1", "record": "SUSE-SU-2025:0198-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T17:24:52Z", "date_only": false, "value": "2026-09-20T17:24:52Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0198-1", "record": "SUSE-SU-2025:0198-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T18:09:00Z", "date_only": false, "value": "2026-09-20T18:09:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20132-1", "record": "SUSE-SU-2025:20132-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T18:09:00Z", "date_only": false, "value": "2026-09-20T18:09:00Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20132-1", "record": "SUSE-SU-2025:20132-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T18:10:18Z", "date_only": false, "value": "2026-09-20T18:10:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:20231-1", "record": "SUSE-SU-2025:20231-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T18:10:18Z", "date_only": false, "value": "2026-09-20T18:10:18Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:20231-1", "record": "SUSE-SU-2025:20231-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T21:24:51Z", "date_only": false, "value": "2026-09-20T21:24:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:24:51Z", "date_only": false, "value": "2026-09-20T21:24:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-10T10:18:20.306Z", "anchors": {"origin": {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-01-21T03:14:24Z", "date_only": false, "value": "2025-01-21T03:14:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/240", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "bd262b04-3844-4ac2-a37a-5080bbd1d98e", "content": "1. CVE-2025-0107:\nPalo Alto Expedition Tool OS Command Injection\nhttps://ssd-disclosure.com/ssd-advisory-palo-alto-expedition-rce-regionsdiscovery\n\n2. CVE-2025-22710:\nhttps://github.com/DoTTak/CVE-2025-22710\n\n3. Yubico PAM Module Vulnerability (CVE-2025-23013): A Deep Dive into Authentication Bypass in Certain Configurations\nhttps://cybersrcc.com/2025/01/18/yubico-pam-module-vulnerability-cve-2025-23013-a-deep-dive-into-authentication-bypass-in-certain-configurations", "url": "https://t.me/hackingbra/240", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 530064.0, "hours": 147.24, "days": 6.135, "min_seconds": 443664.0, "max_seconds": 530064.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-01-21T03:14:24Z", "date_only": false, "value": "2025-01-21T03:14:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/240", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "bd262b04-3844-4ac2-a37a-5080bbd1d98e", "content": "1. CVE-2025-0107:\nPalo Alto Expedition Tool OS Command Injection\nhttps://ssd-disclosure.com/ssd-advisory-palo-alto-expedition-rce-regionsdiscovery\n\n2. CVE-2025-22710:\nhttps://github.com/DoTTak/CVE-2025-22710\n\n3. Yubico PAM Module Vulnerability (CVE-2025-23013): A Deep Dive into Authentication Bypass in Certain Configurations\nhttps://cybersrcc.com/2025/01/18/yubico-pam-module-vulnerability-cve-2025-23013-a-deep-dive-into-authentication-bypass-in-certain-configurations", "url": "https://t.me/hackingbra/240", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 57406700.306234, "hours": 15946.305640620556, "days": 664.4294016925231, "min_seconds": 57320300.306234, "max_seconds": 57406700.306234, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14650-1", "record": "OPENSUSE-SU-2025:14650-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-10T10:18:20.306Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 56876636.306234, "hours": 15799.065640620556, "days": 658.2944016925231, "min_seconds": 56876636.306234, "max_seconds": 56876636.306234, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-21T03:14:24Z", "date_only": false, "value": "2025-01-21T03:14:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/240", "record": "CVE-2025-23013", "field": "creation_timestamp", "uuid": "bd262b04-3844-4ac2-a37a-5080bbd1d98e", "content": "1. CVE-2025-0107:\nPalo Alto Expedition Tool OS Command Injection\nhttps://ssd-disclosure.com/ssd-advisory-palo-alto-expedition-rce-regionsdiscovery\n\n2. CVE-2025-22710:\nhttps://github.com/DoTTak/CVE-2025-22710\n\n3. Yubico PAM Module Vulnerability (CVE-2025-23013): A Deep Dive into Authentication Bypass in Certain Configurations\nhttps://cybersrcc.com/2025/01/18/yubico-pam-module-vulnerability-cve-2025-23013-a-deep-dive-into-authentication-bypass-in-certain-configurations", "url": "https://t.me/hackingbra/240", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-10T10:18:20.306Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}