{"metadata": {"vulnerability": "CVE-2025-24367", "count": 52, "kinds": {"milestone": 5, "sighting": 25, "kev": 5, "other": 17}}, "data": [{"timestamp": "2025-01-20T15:18:26.990Z", "date_only": false, "value": "2025-01-20T15:18:26.990Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-24367", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-27T17:12:40.174Z", "date_only": false, "value": "2025-01-27T17:12:40.174Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-24367", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-27T17:12:40.174Z", "date_only": false, "value": "2025-01-27T17:12:40.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-24367", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-27T17:20:06.872Z", "date_only": false, "value": "2025-01-27T17:20:06.872604Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113901463554547835", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "6c7eb251-f395-4247-b250-3f26db0ea5a5", "url": "https://infosec.exchange/users/cve/statuses/113901463554547835"}, {"timestamp": "2025-01-27T18:15:00Z", "date_only": false, "value": "2025-01-27T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-24367", "record": "UBUNTU-CVE-2025-24367", "field": "published"}, {"timestamp": "2025-01-27T18:15:42.003Z", "date_only": false, "value": "2025-01-27T18:15:42.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24367", "record": "FKIE_CVE-2025-24367", "field": "published"}, {"timestamp": "2025-01-27T18:16:28.222Z", "date_only": false, "value": "2025-01-27T18:16:28.222342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdmlf7e2e", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "07ba6dee-ba4d-4afd-8321-7f01bb19e8d9", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdmlf7e2e"}, {"timestamp": "2025-01-27T18:54:34.439Z", "date_only": false, "value": "2025-01-27T18:54:34.439469Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-24367", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-27T18:54:34.439Z", "date_only": false, "value": "2025-01-27T18:54:34.439469Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24367", "record": "FKIE_CVE-2025-24367", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-27T18:54:38.459Z", "date_only": false, "value": "2025-01-27T18:54:38.459Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-24367", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-27T18:55:22.115Z", "date_only": false, "value": "2025-01-27T18:55:22.115912Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5hia32k", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "367962ef-fc5d-4056-bea3-fe06e18951db", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5hia32k"}, {"timestamp": "2025-01-27T20:11:17Z", "date_only": false, "value": "2025-01-27T20:11:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/16486", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "274b212e-4276-4ebb-b1c6-28b0ec4eba6f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24367 - Cacti Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2025-24367 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/16486"}, {"timestamp": "2025-01-27T23:00:00Z", "date_only": false, "value": "2025-01-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-01-29T11:06:08.105Z", "date_only": false, "value": "2025-01-29T11:06:08.105174Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lgut7xfqcr2y", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "9f33f0e8-f854-4dbc-90ee-ba05bd55a723", "url": "https://bsky.app/profile/hackingne.ws/post/3lgut7xfqcr2y"}, {"timestamp": "2025-01-30T18:04:04Z", "date_only": false, "value": "2025-01-30T18:04:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6679", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "8f85dacb-1abe-4365-a619-00f2dde373ed", "content": "\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u0435\u0442\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Cacti \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-22604 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,1 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10,0, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u043e\u0434 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c u32i.\n\n\u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0440\u043e\u0447\u043d\u044b\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 SNMP \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0432 \u043e\u0442\u0432\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0435 OID.\n\n\u041f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u0436\u0434\u043e\u0433\u043e OID \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043b\u044e\u0447\u0430 \u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043a\u0440\u0430\u0441\u0442\u044c, \u043e\u0442\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\nCVE-2025-22604 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 1.2.28 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.2.29. \n\n\u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 CVE-2025-24367\u00a0(CVSS: 7,2), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 PHP-\u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u0432\u0435\u0431-\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u0433\u0440\u0430\u0444\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Cacti, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u044d\u0442\u043e \u041f\u041e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u0435\u0442\u0438, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/6679"}, {"timestamp": "2025-02-07T12:56:59Z", "date_only": false, "value": "2025-02-07T12:56:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1006", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "c7a8ed28-87bf-401f-aafa-44db8699a7fc", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0646\u0638\u0627\u0631\u062a \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u062e\u0637\u0627\u06cc \u0634\u0628\u06a9\u0647 \u0645\u0646\u0628\u0639 \u0628\u0627\u0632 Cacti \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u06a9\u062f \u0631\u0627 \u0631\u0648\u06cc \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0646\u0627\u0645 CVE-2025-22604 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc \u0634\u0648\u062f \u0648 \u062f\u0627\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 9.1 \u0627\u0632 \u062d\u062f\u0627\u06a9\u062b\u0631 10.0 \u0627\u0633\u062a \u0648 \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0645\u062d\u0642\u0642 \u062e\u0635\u0648\u0635\u06cc \u0628\u0627 \u0646\u0627\u0645 \u0645\u0633\u062a\u0639\u0627\u0631 \u0622\u0646\u0644\u0627\u06cc\u0646 u32i \u0641\u0627\u0634 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062a\u062c\u0632\u06cc\u0647 \u06a9\u0646\u0646\u062f\u0647 \u0646\u062a\u06cc\u062c\u0647 SNMP \u0686\u0646\u062f \u062e\u0637\u06cc \u0627\u0633\u062a \u0648 \u0628\u0627\u0639\u062b \u0645\u06cc \u0634\u0648\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u062f\u0647 OID \u0647\u0627\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0631\u0627 \u062f\u0631 \u067e\u0627\u0633\u062e \u0648\u0627\u0631\u062f \u06a9\u0646\u0646\u062f.\n\n\u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u0628\u0627 ss_net_snmp_disk_io() \u06cc\u0627 ss_net_snmp_disk_bytes() \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u062e\u0634\u06cc \u0627\u0632 \u0647\u0631 OID \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u06a9\u0644\u06cc\u062f \u062f\u0631 \u0622\u0631\u0627\u06cc\u0647 \u0627\u06cc \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0628\u062e\u0634\u06cc \u0627\u0632 \u06cc\u06a9 \u0641\u0631\u0645\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f \u0648 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631 \u0645\u06cc \u0634\u0648\u062f.\n\n\u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0627 \u062d\u0642\u0648\u0642 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0631\u0627 \u0633\u0631\u0642\u062a\u060c \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06cc\u0627 \u062d\u0630\u0641 \u06a9\u0646\u062f.\n\nCVE-2025-22604 \u0628\u0631 \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u062a\u0627 \u0648 \u0627\u0632 \u062c\u0645\u0644\u0647 1.2.28 \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f. \u0645\u0634\u06a9\u0644 \u062f\u0631 \u0646\u0633\u062e\u0647 1.2.29 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0646\u0633\u062e\u0647 \u062c\u062f\u06cc\u062f \u0647\u0645\u0686\u0646\u06cc\u0646 CVE-2025-24367 (CVSS: 7.2) \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u0645\u06cc \u06a9\u0646\u062f\u060c \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u062c\u0627\u062f \u0646\u0645\u0648\u062f\u0627\u0631 \u0648 \u0639\u0645\u0644\u06a9\u0631\u062f \u0627\u0644\u06af\u0648\u06cc \u0646\u0645\u0648\u062f\u0627\u0631\u060c \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc PHP \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u062f\u0631 \u0631\u06cc\u0634\u0647 \u0648\u0628 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 RCE \u0627\u06cc\u062c\u0627\u062f \u0634\u0648\u062f.\n\n\u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u062a\u062c\u0631\u0628\u0647 \u0646\u0627\u062e\u0648\u0634\u0627\u06cc\u0646\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u062f\u0631 Cacti\u060c \u06a9\u0633\u0627\u0646\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u0634\u0628\u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0628\u0627\u06cc\u062f \u0628\u0647 \u0633\u0631\u0639\u062a \u0648\u0635\u0644\u0647 \u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0631\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631 \u0633\u0627\u0632\u0634 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0646\u0646\u062f.\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "url": "https://t.me/ics_cert/1006"}, {"timestamp": "2025-02-10T23:00:00Z", "date_only": false, "value": "2025-02-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-02-11T23:00:00Z", "date_only": false, "value": "2025-02-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-10-30T19:44:32Z", "date_only": false, "value": "2025-10-30T19:44:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57617", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "e8780340-09d1-45e0-b905-63dba0286f54", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof of Concept for CVE-2025-24367\nURL\uff1ahttps://github.com/TheCyberGeek/CVE-2025-24367-Cacti-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57617"}, {"timestamp": "2025-10-31T03:00:06Z", "date_only": false, "value": "2025-10-31T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HrqnhivTlyUmMMsC-cihOL2_RX8BUHsohtWOn5UNPDK-VTs", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "8f233607-6db8-4e8a-9ddb-a945cba78620"}, {"timestamp": "2025-11-03T21:12:40.550Z", "date_only": false, "value": "2025-11-03T21:12:40.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-24367", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T21:12:40.550Z", "date_only": false, "value": "2025-11-03T21:12:40.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-24367", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-12-08T05:24:14.436Z", "date_only": false, "value": "2025-12-08T05:24:14.436358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/1337sheets.bsky.social/post/3m7hc2qozy42a", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "37dd27b8-e8db-48f0-a738-6169ca975544", "url": "https://bsky.app/profile/1337sheets.bsky.social/post/3m7hc2qozy42a"}, {"timestamp": "2025-12-12T15:00:09Z", "date_only": false, "value": "2025-12-12T15:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lyuwqGswTPvwbvko5U3DMMdPvOzdp8ycElEn6YGBEP42daM", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "9815af0c-a21b-4aad-922e-da68058f4da2"}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-24367", "field": "timestamps.asserted_at", "uuid": "4d648d8c-039a-43b4-9bca-dda487f712be", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-24367", "field": "evidence.0.details.added_date", "uuid": "4d648d8c-039a-43b4-9bca-dda487f712be", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/MXX7s40szsHIOahCmZYUo1oPbzx8GV2ib_l3MQ9GkEPvzG8", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "b149fc00-70b8-4d6e-bce0-8ab42511333f"}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-24367", "field": "timestamps.first_seen_at", "uuid": "4d648d8c-039a-43b4-9bca-dda487f712be", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-24367", "field": "status.status_updated_at", "uuid": "4d648d8c-039a-43b4-9bca-dda487f712be", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-20T05:27:22Z", "date_only": false, "value": "2026-01-20T05:27:22Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-24367", "record": "UBUNTU-CVE-2025-24367", "field": "modified"}, {"timestamp": "2026-01-22T19:35:48Z", "date_only": false, "value": "2026-01-22T19:35:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_graph_template_rce.rb", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "0220c911-d520-47e9-afff-4b345a665948", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_graph_template_rce.rb"}, {"timestamp": "2026-01-23T21:03:00.750Z", "date_only": false, "value": "2026-01-23T21:03:00.750869Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxpctpn2k", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "953173e6-88bc-4555-96a1-d22646fe671e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxpctpn2k"}, {"timestamp": "2026-02-01T23:00:00Z", "date_only": false, "value": "2026-02-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-04-23T22:00:00Z", "date_only": false, "value": "2026-04-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-04-23T22:00:00Z", "date_only": false, "value": "2026-04-23T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-24T08:39:54.059Z", "date_only": false, "value": "2026-04-24T08:39:54.059+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0190", "record": "WID-SEC-W-2025-0190", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-02T07:02:11Z", "date_only": false, "value": "2026-05-02T07:02:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/82441", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "fd13e69b-333c-4781-81fc-0d8daf821447", "url": "https://t.me/GithubRedTeam/82441"}, {"timestamp": "2026-05-02T09:00:04Z", "date_only": false, "value": "2026-05-02T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3a2jD3gjNHncLnKc8fyr9DC3SGOgXMvvZ9Cx1ndl6893LxY", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "b6dcbe7e-5241-4393-acf9-fd00717e4ed7"}, {"timestamp": "2026-05-03T03:00:05Z", "date_only": false, "value": "2026-05-03T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/MurpDVre-4LCYzH5BvUtvVRvpJ9yqT35RKsHtthqDCH1oSA", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "54df116f-16d6-498c-89b4-d02d0b36aff7"}, {"timestamp": "2026-06-17T08:58:54.787Z", "date_only": false, "value": "2026-06-17T08:58:54.787", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24367", "record": "FKIE_CVE-2025-24367", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-24367", "field": "timestamps.recorded_at", "uuid": "4d648d8c-039a-43b4-9bca-dda487f712be", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:39.015Z", "date_only": false, "value": "2026-06-19T12:42:39.015902Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4d648d8c-039a-43b4-9bca-dda487f712be", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "0b6e08a4-cdcc-4305-8ad3-5efeeeb28fbf", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4d648d8c-039a-43b4-9bca-dda487f712be"}, {"timestamp": "2026-06-19T12:45:44.559Z", "date_only": false, "value": "2026-06-19T12:45:44.559184Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c48249c-c20c-4d91-8a2e-0fa937187d45", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "026bc063-91ce-4d4e-a2e9-979ee68d5c73", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c48249c-c20c-4d91-8a2e-0fa937187d45"}, {"timestamp": "2026-08-04T13:00:23.620Z", "date_only": false, "value": "2026-08-04T13:00:23.620591Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/70", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "12570b35-ef9a-447f-9cf5-7961a723b094", "url": "https://t.me/wh_lab/70"}, {"timestamp": "2026-08-04T13:00:25.396Z", "date_only": false, "value": "2026-08-04T13:00:25.396973Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/267", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "986981e3-b939-4df9-822e-0ac0eb0319af", "url": "https://t.me/bagl3y_notes/267"}, {"timestamp": "2026-08-05T00:00:39.743Z", "date_only": false, "value": "2026-08-05T00:00:39.743658Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/70", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "a00aed10-3e07-411a-a66d-ad4840f27302", "url": "https://t.me/wh_lab/70"}, {"timestamp": "2026-08-05T00:00:41.010Z", "date_only": false, "value": "2026-08-05T00:00:41.010023Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/267", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "d9511c99-8e85-4638-a4c8-18cb338bd4dc", "url": "https://t.me/bagl3y_notes/267"}, {"timestamp": "2026-08-06T00:00:40.698Z", "date_only": false, "value": "2026-08-06T00:00:40.698726Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bagl3y_notes/267", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "f3050a5a-d360-46f2-863d-010c9267fedd", "url": "https://t.me/bagl3y_notes/267"}, {"timestamp": "2026-08-06T00:00:42.255Z", "date_only": false, "value": "2026-08-06T00:00:42.255599Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wh_lab/70", "record": "CVE-2025-24367", "field": "creation_timestamp", "uuid": "b2c8e5de-37c2-494c-b72f-80d6e715ed4a", "url": "https://t.me/wh_lab/70"}]}