{"metadata": {"vulnerability": "CVE-2025-30066", "count": 164, "kinds": {"milestone": 4, "sighting": 138, "kev": 11, "other": 11}}, "data": [{"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-30066", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-30066", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-15T05:47:12Z", "date_only": false, "value": "2025-03-15T05:47:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7671", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "02e0de52-c2c2-4a76-82a3-9ccc6b95783c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30066\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were not originally affected, but were modified by a threat actor to point at commit 0e58ed8, which contains the malicious updateFeatures code.)\n\ud83d\udccf Published: 2025-03-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-15T05:43:06.432Z\n\ud83d\udd17 References:\n1. https://github.com/github/docs/blob/962a1c8dccb8c0f66548b324e5b921b5e4fbc3d6/content/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions.md?plain=1#L191-L193\n2. https://github.com/tj-actions/changed-files/issues/2463\n3. https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised\n4. https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/\n5. https://news.ycombinator.com/item?id=43368870", "url": "https://t.me/DarkWebInformer_CVEAlerts/7671"}, {"timestamp": "2025-03-15T06:15:12Z", "date_only": false, "value": "2025-03-15T06:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MRRH-FWG8-R2C3", "record": "GHSA-MRRH-FWG8-R2C3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-15T06:15:12.193Z", "date_only": false, "value": "2025-03-15T06:15:12.193", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30066", "record": "FKIE_CVE-2025-30066", "field": "published"}, {"timestamp": "2025-03-15T06:30:34Z", "date_only": false, "value": "2025-03-15T06:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MRRH-FWG8-R2C3", "record": "GHSA-MRRH-FWG8-R2C3", "field": "published"}, {"timestamp": "2025-03-15T06:30:34Z", "date_only": false, "value": "2025-03-15T06:30:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-mrrh-fwg8-r2c3", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "3ef328a6-f70b-470a-bc77-812a67ecb8ce", "url": "https://github.com/advisories/GHSA-mrrh-fwg8-r2c3"}, {"timestamp": "2025-03-15T07:00:26Z", "date_only": false, "value": "2025-03-15T07:00:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FOz4rd7XuutkjQXbcIrCTHy3zJGbsBsUj-O6IEGiQu3y4sE", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "6a093bc3-b3d1-4a64-aad2-635cc1b7662e"}, {"timestamp": "2025-03-15T07:48:55.582Z", "date_only": false, "value": "2025-03-15T07:48:55.582464Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114165346135872333", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "fb6cfc65-70fc-4008-a185-c421c7e68a88", "url": "https://mastodon.social/users/CyberSignaler/statuses/114165346135872333"}, {"timestamp": "2025-03-15T08:55:58.062Z", "date_only": false, "value": "2025-03-15T08:55:58.062499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfqwmzhrk2m", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "86b1d5f6-9820-4cc8-ace0-c465788e6093", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfqwmzhrk2m"}, {"timestamp": "2025-03-15T09:26:16Z", "date_only": false, "value": "2025-03-15T09:26:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20364", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "6ce54c1c-6f96-48bd-9e40-caadb2f7fdbc", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-30066 - Tj-Actions Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-30066 \nPublished : March 15, 2025, 6:15 a.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were not originally affected, but were modified by a threat actor to point at commit 0e58ed8, which contains the malicious updateFeatures code.) \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20364"}, {"timestamp": "2025-03-15T19:19:23.586Z", "date_only": false, "value": "2025-03-15T19:19:23.586912Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114168061125224055", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "92e55308-ea8f-4333-9e29-4852daec30b6", "url": "https://infosec.exchange/users/cR0w/statuses/114168061125224055"}, {"timestamp": "2025-03-15T21:28:09Z", "date_only": false, "value": "2025-03-15T21:28:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Bv88UFAs2S-bfkt5nVJnWnNXs0wqmAKkroALbyJD8-4KcaQ", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "5bc3f2f7-a6ab-4ef7-82e1-12b645989f48"}, {"timestamp": "2025-03-16T09:45:39Z", "date_only": false, "value": "2025-03-16T09:45:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2641", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "b65d56af-77b7-44aa-8ed4-a70761bbc666", "content": "\u26a1Popular GitHub Action \u201ctj-actions/changed-files\u201d Compromised (CVE-2025-30066).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2641"}, {"timestamp": "2025-03-16T10:59:26.561Z", "date_only": false, "value": "2025-03-16T10:59:26.561982Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lkiice3mqc2k", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "371802fb-142b-4f51-8d0b-2a14d0050c43", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3lkiice3mqc2k"}, {"timestamp": "2025-03-17T01:05:28.091Z", "date_only": false, "value": "2025-03-17T01:05:28.091897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkjxkzke5c2y", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "2783d1ea-a30e-42be-8f8f-aad7b68a1418", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkjxkzke5c2y"}, {"timestamp": "2025-03-17T01:39:31.903Z", "date_only": false, "value": "2025-03-17T01:39:31.903938Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lkjzi2wa2p2p", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7d45039c-7650-4159-b358-55101bb7f062", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lkjzi2wa2p2p"}, {"timestamp": "2025-03-17T03:04:24.941Z", "date_only": false, "value": "2025-03-17T03:04:24.941964Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lkk67tx4452u", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "10221d87-fd22-4e69-9807-686acb703eaa", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lkk67tx4452u"}, {"timestamp": "2025-03-17T06:05:47.927Z", "date_only": false, "value": "2025-03-17T06:05:47.927894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technews4869.bsky.social/post/3lkkie6i3aj2m", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "17818ccd-eee8-4b29-8926-58fe926e7440", "url": "https://bsky.app/profile/technews4869.bsky.social/post/3lkkie6i3aj2m"}, {"timestamp": "2025-03-17T10:38:47.650Z", "date_only": false, "value": "2025-03-17T10:38:47.650796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lkkxmd7ksc2y", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "0d88ac16-d66b-486a-934a-fedbdfebf364", "url": "https://bsky.app/profile/nimblenerd.social/post/3lkkxmd7ksc2y"}, {"timestamp": "2025-03-17T10:44:46.958Z", "date_only": false, "value": "2025-03-17T10:44:46.958652Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lkkxwzdzch2i", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "59e4df82-21fe-46a9-a71a-e4e26220a673", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lkkxwzdzch2i"}, {"timestamp": "2025-03-17T12:42:59Z", "date_only": false, "value": "2025-03-17T12:42:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6845", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "db3e80a2-b6a2-49a0-8967-b9a7fb8b574e", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 GitHub Action \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u043e\u0439 (CI/CD).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c StepSecurity, \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043d\u0430\u0447\u0430\u043b\u0441\u044f\u00a014 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u00a0tj-actions/changed-files\u00a0(\u0434\u0430\u043b\u0435\u0435 - Changed-Files), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 23 000 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 GitHub.\n\nAction \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430\u0445 CI/CD \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b. \u042d\u0442\u043e \u0431\u0430\u0437\u043e\u0432\u044b\u0439, \u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u0430\u043b \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 GitHub.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0437\u043c\u0435\u043d\u0438\u043b \u043a\u043e\u0434 Changed-files \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b CI/CD \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Runner Worker.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043b Changed-Files, \u043d\u043e, \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0432\u043d\u0443\u0442\u0440\u044c, \u043e\u043d \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u0430\u0436\u0434\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0430 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n\u0421\u0435\u043a\u0440\u0435\u0442\u044b \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0436\u0443\u0440\u043d\u0430\u043b \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 (build log), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u043a\u0438 \u043d\u0438\u0436\u0435, \u0430 \u0432\u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u043e\u0442\u0430\u0446\u0438\u044e \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, StepSecurity \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043a\u0430\u043a-\u043b\u0438\u0431\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0442\u0435\u0433\u043e\u0432 \u0432\u0435\u0440\u0441\u0438\u0439 Changed-files \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043b\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442.\u00a0\u042d\u0442\u043e\u043c\u0443 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0443 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u00a0 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u00a0CVE-2025-30066.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Endor Labs \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u043b\u0438 \u044d\u0442\u043e\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0438 \u043d\u0435 \u043d\u0430\u0448\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u0438\u0441\u043a\u0430\u043b \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 - \u043e\u043d\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u0447\u0435\u043d\u044b. \u0421\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0445\u043e\u0442\u0435\u043b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u041f\u041e \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435.\n\n\u041b\u044e\u0431\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430 CI, \u043c\u043e\u0433 \u0431\u044b\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442. \u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e 1000 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0415\u0441\u043b\u0438 \u044d\u0442\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430 CI/CD \u0434\u043b\u044f \u0440\u0435\u0435\u0441\u0442\u0440\u043e\u0432 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n15 \u043c\u0430\u0440\u0442\u0430 GitHub \u0443\u0434\u0430\u043b\u0438\u043b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 tj-actions/changed-files \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0435\u0433\u043e \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0438\u0437 \u0432\u0441\u0435\u0445 \u0442\u0435\u0433\u043e\u0432 \u0438 \u0432\u0435\u0442\u043e\u043a.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Tj-actions \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438, IoC \u0438 \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b.\u00a0\n\n\u041f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u044d\u0442\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0432\u044b\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u043e \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0430\u0442\u0430\u043a\u0430, \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u0430\u044f \u043d\u0435\u043e\u043f\u044b\u0442\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u043b\u0438 \u044d\u0442\u043e \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0441\u0442\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0434\u0438\u043d \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0435\u0449\u0435 \u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u043e\u043d \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 tj-actions/changed-files.", "url": "https://t.me/true_secator/6845"}, {"timestamp": "2025-03-17T12:43:30Z", "date_only": false, "value": "2025-03-17T12:43:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/5486", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "8df01ddd-8c1b-45de-94bb-06a01467bd26", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 GitHub Action \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u043e\u0439 (CI/CD).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c StepSecurity, \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043d\u0430\u0447\u0430\u043b\u0441\u044f\u00a014 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u00a0tj-actions/changed-files\u00a0(\u0434\u0430\u043b\u0435\u0435 - Changed-Files), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 23 000 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 GitHub.\n\nAction \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430\u0445 CI/CD \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b. \u042d\u0442\u043e \u0431\u0430\u0437\u043e\u0432\u044b\u0439, \u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u0430\u043b \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 GitHub.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0437\u043c\u0435\u043d\u0438\u043b \u043a\u043e\u0434 Changed-files \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b CI/CD \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Runner Worker.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043b Changed-Files, \u043d\u043e, \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0432\u043d\u0443\u0442\u0440\u044c, \u043e\u043d \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u0430\u0436\u0434\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0430 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n\u0421\u0435\u043a\u0440\u0435\u0442\u044b \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0436\u0443\u0440\u043d\u0430\u043b \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 (build log), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u043a\u0438 \u043d\u0438\u0436\u0435, \u0430 \u0432\u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u043e\u0442\u0430\u0446\u0438\u044e \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, StepSecurity \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043a\u0430\u043a-\u043b\u0438\u0431\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0442\u0435\u0433\u043e\u0432 \u0432\u0435\u0440\u0441\u0438\u0439 Changed-files \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043b\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442.\u00a0\u042d\u0442\u043e\u043c\u0443 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0443 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u00a0 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u00a0CVE-2025-30066.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Endor Labs \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u043b\u0438 \u044d\u0442\u043e\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0438 \u043d\u0435 \u043d\u0430\u0448\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0431\u044b\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u0438\u0441\u043a\u0430\u043b \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 - \u043e\u043d\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u0447\u0435\u043d\u044b. \u0421\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0445\u043e\u0442\u0435\u043b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u041f\u041e \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435.\n\n\u041b\u044e\u0431\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430 CI, \u043c\u043e\u0433 \u0431\u044b\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442. \u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e 1000 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0415\u0441\u043b\u0438 \u044d\u0442\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430 CI/CD \u0434\u043b\u044f \u0440\u0435\u0435\u0441\u0442\u0440\u043e\u0432 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n15 \u043c\u0430\u0440\u0442\u0430 GitHub \u0443\u0434\u0430\u043b\u0438\u043b \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 tj-actions/changed-files \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0435\u0433\u043e \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0438\u0437 \u0432\u0441\u0435\u0445 \u0442\u0435\u0433\u043e\u0432 \u0438 \u0432\u0435\u0442\u043e\u043a.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Tj-actions \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438, IoC \u0438 \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b.\u00a0\n\n\u041f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u044d\u0442\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0432\u044b\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u043e \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0430\u0442\u0430\u043a\u0430, \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u0430\u044f \u043d\u0435\u043e\u043f\u044b\u0442\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u043b\u0438 \u044d\u0442\u043e \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0441\u0442\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u0430\u0445.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0434\u0438\u043d \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0435\u0449\u0435 \u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u043e\u043d \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 tj-actions/changed-files.", "url": "https://t.me/S_E_Reborn/5486"}, {"timestamp": "2025-03-17T15:43:41.130Z", "date_only": false, "value": "2025-03-17T15:43:41.130494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lklingqdss2v", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "dc8dbb53-f3ab-449b-a706-63f6726ac708", "url": "https://bsky.app/profile/hackread.bsky.social/post/3lklingqdss2v"}, {"timestamp": "2025-03-17T16:00:09Z", "date_only": false, "value": "2025-03-17T16:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uz3Ii5rPCysehEa9OU0_DuESJ8cYigCIC8uNS5druarIJng", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "9232db3e-082c-4ee5-91af-fd9cb141af91"}, {"timestamp": "2025-03-17T16:51:39.889Z", "date_only": false, "value": "2025-03-17T16:51:39.889721Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deployhub.bsky.social/post/3lklmh2lffz2b", "record": "cve-2025-30066", "field": "creation_timestamp", "uuid": "72c9c7e6-8137-420a-bf2a-602b2b778f41", "url": "https://bsky.app/profile/deployhub.bsky.social/post/3lklmh2lffz2b"}, {"timestamp": "2025-03-17T16:51:43.362Z", "date_only": false, "value": "2025-03-17T16:51:43.362281Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/orteliusos.bsky.social/post/3lklmh63wi62j", "record": "cve-2025-30066", "field": "creation_timestamp", "uuid": "b702201f-ce75-4cd2-a2ec-ec2bc81c5e0e", "url": "https://bsky.app/profile/orteliusos.bsky.social/post/3lklmh63wi62j"}, {"timestamp": "2025-03-17T16:51:46.574Z", "date_only": false, "value": "2025-03-17T16:51:46.574770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tracyragan.bsky.social/post/3lklmhbeadx25", "record": "cve-2025-30066", "field": "creation_timestamp", "uuid": "6e8cc3e8-570a-4bc6-9a05-f3ae488abfee", "url": "https://bsky.app/profile/tracyragan.bsky.social/post/3lklmhbeadx25"}, {"timestamp": "2025-03-17T18:49:52.763Z", "date_only": false, "value": "2025-03-17T18:49:52.763861Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3lklt2h33p42r", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "bd59f956-092e-47c4-9cdf-77fb70ace6e7", "url": "https://bsky.app/profile/rxerium.com/post/3lklt2h33p42r"}, {"timestamp": "2025-03-17T20:58:38.644Z", "date_only": false, "value": "2025-03-17T20:58:38.644648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lkm2amr6is2f", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "67de8ae4-d176-44d3-bb0b-c9a01b22cc1a", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3lkm2amr6is2f"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-30066", "field": "timestamps.asserted_at", "uuid": "d008f86f-14e9-4438-9637-80033988877f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-30066", "field": "timestamps.asserted_at", "uuid": "19cfd110-7666-45e6-aa59-eccb7b49ff12", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": true, "value": "2025-03-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30066", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-30066", "field": "evidence.0.details.added_date", "uuid": "19cfd110-7666-45e6-aa59-eccb7b49ff12", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": true, "value": "2025-03-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-30066", "field": "evidence.0.details.date_added", "uuid": "d008f86f-14e9-4438-9637-80033988877f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-30066", "field": "timestamps.first_seen_at", "uuid": "d008f86f-14e9-4438-9637-80033988877f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-30066", "field": "timestamps.first_seen_at", "uuid": "19cfd110-7666-45e6-aa59-eccb7b49ff12", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-30066", "field": "status.status_updated_at", "uuid": "d008f86f-14e9-4438-9637-80033988877f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-30066", "field": "status.status_updated_at", "uuid": "19cfd110-7666-45e6-aa59-eccb7b49ff12", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30066", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-03-18T02:11:47.469Z", "date_only": false, "value": "2025-03-18T02:11:47.469794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lkmlqo277k24", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "06983964-3942-4135-8f3f-2429188776be", "url": "https://bsky.app/profile/hackingne.ws/post/3lkmlqo277k24"}, {"timestamp": "2025-03-18T07:02:33.559Z", "date_only": false, "value": "2025-03-18T07:02:33.559938Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yarlob.bsky.social/post/3lkn3yi2er22e", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "d1d3bec4-d649-4b6e-8bbe-efb57cbd8131", "url": "https://bsky.app/profile/yarlob.bsky.social/post/3lkn3yi2er22e"}, {"timestamp": "2025-03-18T15:27:29Z", "date_only": false, "value": "2025-03-18T15:27:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/krstp/6674b8ed7627efed95a167a099a0b67b", "record": "cve-2025-30066", "field": "creation_timestamp", "uuid": "90fda08c-2f3f-4b58-96e7-a3f8d18c7181", "url": "https://gist.github.com/krstp/6674b8ed7627efed95a167a099a0b67b"}, {"timestamp": "2025-03-18T15:37:05Z", "date_only": false, "value": "2025-03-18T15:37:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11941", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "d777bf5e-ec21-4d3e-a1dd-6712f3cd4974", "content": "#exploit\n1. CVE-2024-7014:\nTelegram EvilVideo Vulnerability\nhttps://github.com/absholi7ly/PoC-for-CVE-2024-7014-Exploit\n\n2. CVE-2025-30066:\nEmbedded Malicious Code\n(\"tj-actions/changed-files\" Attack)\nhttps://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised\n\n3. CVE-2024-0406:\nPath Traversal in mholt/archiver\nhttps://github.com/walidpyh/CVE-2024-0406-POC", "url": "https://t.me/CyberSecurityTechnologies/11941"}, {"timestamp": "2025-03-18T18:30:17.953Z", "date_only": false, "value": "2025-03-18T18:30:17.953924Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkocgewvgh2u", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "1e8d65fb-a60f-4b54-8d14-4f8e520ed845", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkocgewvgh2u"}, {"timestamp": "2025-03-18T20:10:48.605Z", "date_only": false, "value": "2025-03-18T20:10:48.605223Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lkoi23knza2e", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "1ad7a640-9068-4de6-b36d-f88963d0fcd9", "url": "https://bsky.app/profile/nimblenerd.social/post/3lkoi23knza2e"}, {"timestamp": "2025-03-18T20:31:08.056Z", "date_only": false, "value": "2025-03-18T20:31:08.056288Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3601809", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "00ed0e43-03d5-4e31-833e-c56aad48d30b", "url": "https://feedsin.space/feed/CISAKevBot/items/3601809"}, {"timestamp": "2025-03-18T20:49:44Z", "date_only": false, "value": "2025-03-18T20:49:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/232486", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "84d2c005-d3f3-42e9-bf03-85b8e188b5af", "content": "Supply Chain Compromise of Third-Party GitHub Action, CVE-2025-30066\nhttps://ift.tt/Pvabw73", "url": "https://t.me/ctinow/232486"}, {"timestamp": "2025-03-18T21:01:56.740Z", "date_only": false, "value": "2025-03-18T21:01:56.740099Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkokvkcyms2a", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4d8ada15-b055-4148-a179-03d157120241", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkokvkcyms2a"}, {"timestamp": "2025-03-18T21:05:17.427Z", "date_only": false, "value": "2025-03-18T21:05:17.427Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-30066", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-18T21:10:04Z", "date_only": false, "value": "2025-03-18T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "25450abe-14f3-4c14-a542-fdc825b5b64c"}, {"timestamp": "2025-03-18T21:31:02.819Z", "date_only": false, "value": "2025-03-18T21:31:02.819580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjiwbgs2t", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "0343cfe9-a3f9-400c-874d-244bef0432ed", "url": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjiwbgs2t"}, {"timestamp": "2025-03-18T21:31:03.320Z", "date_only": false, "value": "2025-03-18T21:31:03.320334Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjiwtyk2t", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "1cbc031f-7964-4844-a6f2-a28d48bcf55b", "url": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjiwtyk2t"}, {"timestamp": "2025-03-18T21:31:04.058Z", "date_only": false, "value": "2025-03-18T21:31:04.058506Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjiwxvk2t", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "3cda91ad-83c1-4e05-8acb-8ff7a808e43a", "url": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjiwxvk2t"}, {"timestamp": "2025-03-18T21:31:04.544Z", "date_only": false, "value": "2025-03-18T21:31:04.544100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjkhat22t", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "c55114bf-e6d4-4f3e-ae3c-910d2ef393b1", "url": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjkhat22t"}, {"timestamp": "2025-03-18T21:31:05.047Z", "date_only": false, "value": "2025-03-18T21:31:05.047250Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjkhfpc2t", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "115ccd07-506a-4a80-8d16-aebb8e7f3968", "url": "https://bsky.app/profile/bijouxbeejuice.bsky.social/post/3lkomjkhfpc2t"}, {"timestamp": "2025-03-18T21:54:33.774Z", "date_only": false, "value": "2025-03-18T21:54:33.774900Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lkontmgegz2p", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7753f8e3-9872-47b4-a488-3d5f72421bac", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lkontmgegz2p"}, {"timestamp": "2025-03-18T21:55:25.734Z", "date_only": false, "value": "2025-03-18T21:55:25.734690Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lkonv6k34n2s", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4ce4fe3a-7e7d-4494-8762-55a46448e567", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lkonv6k34n2s"}, {"timestamp": "2025-03-18T21:59:21.617Z", "date_only": false, "value": "2025-03-18T21:59:21.617Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-30066", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-19T02:02:05.962Z", "date_only": false, "value": "2025-03-19T02:02:05.962690Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114186631339542690", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "5085628e-ff64-4ede-bfc3-bcbd6e3640c3", "url": "https://mstdn.ca/users/rfwaveio/statuses/114186631339542690"}, {"timestamp": "2025-03-19T02:27:35.807Z", "date_only": false, "value": "2025-03-19T02:27:35.807144Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkp53qxjvk2u", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "11ebe3e8-ba42-4e16-9e35-32cb42bfbe5c", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkp53qxjvk2u"}, {"timestamp": "2025-03-19T04:05:00Z", "date_only": false, "value": "2025-03-19T04:05:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/03/cisa-warns-of-active-exploitation-in.html", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "f14ddd03-6604-4856-b2d5-94934d030ddb", "url": "https://thehackernews.com/2025/03/cisa-warns-of-active-exploitation-in.html"}, {"timestamp": "2025-03-19T04:24:22.189Z", "date_only": false, "value": "2025-03-19T04:24:22.189181Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lkpdmnrjlm25", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "affb6284-4868-4b3e-894d-cafd3f5f0fd1", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lkpdmnrjlm25"}, {"timestamp": "2025-03-19T05:15:53.389Z", "date_only": false, "value": "2025-03-19T05:15:53.389184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpgirxp6z2a", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "9c1dbacf-68f3-4413-a3bb-c9bc09a2cbea", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpgirxp6z2a"}, {"timestamp": "2025-03-19T06:10:48Z", "date_only": false, "value": "2025-03-19T06:10:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6515", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "03043af1-ff05-4e60-ac31-09b6a0a70db3", "content": "\ud83d\udea8 GitHub Actions are under attack!\n\nA supply chain attack hit tj-actions/changed-files, leaking AWS keys, GitHub PATs & more. CISA confirms active exploitation.\n\n\ud83d\udd39 CVE-2025-30066 (CVSS 8.6)\n\ud83d\udd39 Attack spread via another compromised Action\n\ud83d\udd39 Sensitive secrets exposed via logs\n\nDetails: https://thehackernews.com/2025/03/cisa-warns-of-active-exploitation-in.html\n\n\u26a0\ufe0f Rotate secrets, audit workflows, pin actions to commits\u2014this won\u2019t be the last attack.", "url": "https://t.me/thehackernews/6515"}, {"timestamp": "2025-03-19T07:20:30Z", "date_only": false, "value": "2025-03-19T07:20:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/EI-xkUA6CHxoU0INo2rmdUIZDmCbkoA5I3OJzlMQPdIyMQ", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "654c9297-ff4e-4bf0-a89a-751850dfb2d6"}, {"timestamp": "2025-03-19T07:57:26.162Z", "date_only": false, "value": "2025-03-19T07:57:26.162382Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkpp6ioj3dn2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "1e60771e-23c6-4bc2-b2ad-d24d9d340232", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkpp6ioj3dn2"}, {"timestamp": "2025-03-19T08:00:09Z", "date_only": false, "value": "2025-03-19T08:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3ZjmZbxq3HNmCMq1qwcNBbhaNpORE_O2rzLvzBK7gqIu8XA", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "afbffa18-9db7-4e43-878e-feaf9c2be319"}, {"timestamp": "2025-03-19T08:47:37Z", "date_only": false, "value": "2025-03-19T08:47:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/claytechsolution/252", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "d441d36f-931c-4ecc-8f0d-befe93cb197f", "content": "The Hacker News\nCISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a vulnerability linked to the supply chain compromise of the GitHub Action, tj-actions/changed-files, to its Known Exploited Vulnerabilities (KEV) catalog.\nThe high-severity flaw, tracked as CVE-2025-30066 (CVSS score: 8.6), involves the breach of the GitHub Action to inject malicious code that enables a remote", "url": "https://t.me/claytechsolution/252"}, {"timestamp": "2025-03-19T08:52:49.008Z", "date_only": false, "value": "2025-03-19T08:52:49.008430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkpsebpn7fv2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4d583da6-06d9-4a0c-8865-0c9c3c07faf5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkpsebpn7fv2"}, {"timestamp": "2025-03-19T09:37:45.111Z", "date_only": false, "value": "2025-03-19T09:37:45.111351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lkpv4vdfbs2f", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "c80fc693-aebd-4365-8d4a-0740797422d2", "url": "https://bsky.app/profile/malwhere.bsky.social/post/3lkpv4vdfbs2f"}, {"timestamp": "2025-03-19T10:27:40.426Z", "date_only": false, "value": "2025-03-19T10:27:40.426717Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkpxvupzl3n2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "b9e333f7-68fd-4853-87c2-ce363392bf49", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkpxvupzl3n2"}, {"timestamp": "2025-03-19T14:05:02.944Z", "date_only": false, "value": "2025-03-19T14:05:02.944029Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mbissey.bsky.social/post/3lkqe2y56z72f", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "c1afed03-a4fd-4368-99fe-a57d7c771a95", "url": "https://bsky.app/profile/mbissey.bsky.social/post/3lkqe2y56z72f"}, {"timestamp": "2025-03-19T15:02:43Z", "date_only": false, "value": "2025-03-19T15:02:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/83769", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "2ae1445a-8880-4577-b98e-5928a938991c", "content": "\ud83e\udd85 CISA Adds Two Critical Vulnerabilities (CVE-2025-24472 and CVE-2025-30066) to the Known Exploited Vulnerabilities Catalog \ud83e\udd85\n\nCyble CISA Adds Two Critical Vulnerabilities CVE202524472 and CVE202530066 to the Known Exploited Vulnerabilities Catalog \" dataimagecaption\"Cyble CISA Adds Two Critical Vulnerabilities CVE202524472 and CVE202530066 to the Known Exploited Vulnerabilities Catalog \" datamediumfile\"httpscyble.comwpcontentuploads202503CybleBlogsCISACVE202524472300x150.png\" datalargefile\"httpscyble.comwpcontentuploads202503CybleBlogsCISACVE2025244721024x512.png\" title\"CISA Adds Two Critical Vulnerabilities CVE202524472 and CVE202530066 to the Known Exploited Vulnerabilities Catalog 1\"  Overview     The Cybersecurity and Infrastructure Security Agency CISA has recently added two major vulnerabilities to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. These vulnerabilities, ...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/83769"}, {"timestamp": "2025-03-19T15:21:55.087Z", "date_only": false, "value": "2025-03-19T15:21:55.087313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/chunkylumplump.bsky.social/post/3lkqiegsbf22q", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "bd1ac5c6-7250-4a5c-8252-0e3076f4a85a", "url": "https://bsky.app/profile/chunkylumplump.bsky.social/post/3lkqiegsbf22q"}, {"timestamp": "2025-03-19T20:05:38Z", "date_only": false, "value": "2025-03-19T20:05:38.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Okmx1F9Jo1J3yfRabNJBgs_VmLY1ma9TMNpGFy5-li84i7g", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "69786f1e-a1f4-415c-9332-406f2b390e21"}, {"timestamp": "2025-03-19T20:43:26.338Z", "date_only": false, "value": "2025-03-19T20:43:26.338520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lkr2dclw622p", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "d62512da-ba74-4b65-b277-c6806e24096c", "url": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lkr2dclw622p"}, {"timestamp": "2025-03-19T21:02:06.537Z", "date_only": false, "value": "2025-03-19T21:02:06.537335Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkr3emqvjm2u", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "264cd3c8-816a-432b-a888-9d6f366ca1e1", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkr3emqvjm2u"}, {"timestamp": "2025-03-19T22:59:26.018Z", "date_only": false, "value": "2025-03-19T22:59:26.018904Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkrbwinv7s23", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "f4f00b4d-8430-4b58-9c9d-53524f9dd562", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkrbwinv7s23"}, {"timestamp": "2025-03-19T23:49:37.918Z", "date_only": false, "value": "2025-03-19T23:49:37.918412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkreqbcrvk23", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "68dde1bb-1fcf-476d-9a9a-6f99fc883b5e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkreqbcrvk23"}, {"timestamp": "2025-03-20T06:29:31.348Z", "date_only": false, "value": "2025-03-20T06:29:31.348512Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lks33blhec23", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "b703f910-e416-40e1-9cbd-98c8fa0a6846", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lks33blhec23"}, {"timestamp": "2025-03-20T18:28:28.533Z", "date_only": false, "value": "2025-03-20T18:28:28.533583Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lktd6pypgx42", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "df417ee6-c540-483c-9678-e6e5915e42ab", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lktd6pypgx42"}, {"timestamp": "2025-03-21T07:32:25Z", "date_only": false, "value": "2025-03-21T07:32:25.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0d58ff39-a69c-40e6-a9cc-80eb494aa646", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "88110388-c554-48ba-b60a-d0d6868b16f8"}, {"timestamp": "2025-03-21T08:45:35.175Z", "date_only": false, "value": "2025-03-21T08:45:35.175706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkut5ekzv7j2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "1788cfaa-dbcb-4801-aa2c-da05401a9288", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lkut5ekzv7j2"}, {"timestamp": "2025-03-21T09:31:31.565Z", "date_only": false, "value": "2025-03-21T09:31:31.565646Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/114199723453880990", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "35c95f67-59b0-4fe2-b24d-ad740695a24f", "url": "https://infosec.exchange/users/tomcat/statuses/114199723453880990"}, {"timestamp": "2025-03-21T10:27:03Z", "date_only": false, "value": "2025-03-21T10:27:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/EYqwvZ7L5VFMmfCIJHFN2QnCetWyBG0SU4L3U7DtBpGGdA", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "964c9b29-8567-4d8f-86f7-3b7e7a4e645d"}, {"timestamp": "2025-03-21T21:22:59.639Z", "date_only": false, "value": "2025-03-21T21:22:59.639700Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/users/nopatience/statuses/114202520435383429", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "14076f6f-3fcb-4c41-9147-2e992c486a38", "url": "https://swecyb.com/users/nopatience/statuses/114202520435383429"}, {"timestamp": "2025-03-22T03:55:44.803Z", "date_only": false, "value": "2025-03-22T03:55:44.803134Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30066", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-22T03:55:44.803Z", "date_only": false, "value": "2025-03-22T03:55:44.803134Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30066", "record": "FKIE_CVE-2025-30066", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-22T12:26:15.985Z", "date_only": false, "value": "2025-03-22T12:26:15.985563Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technews4869.bsky.social/post/3lkxpx4b36m2l", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7425351e-c16c-4ae6-9b8a-262014208374", "url": "https://bsky.app/profile/technews4869.bsky.social/post/3lkxpx4b36m2l"}, {"timestamp": "2025-03-22T15:56:08Z", "date_only": false, "value": "2025-03-22T15:56:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/tj-actions/changed-files/security/advisories/GHSA-mw4p-6x4p-x5m5", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7251be38-89a3-4b49-bd3b-d37633ade23d", "url": "https://github.com/tj-actions/changed-files/security/advisories/GHSA-mw4p-6x4p-x5m5"}, {"timestamp": "2025-03-22T22:33:21Z", "date_only": false, "value": "2025-03-22T22:33:21.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0d58ff39-a69c-40e6-a9cc-80eb494aa646", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "9cb7ba0f-45a1-4b22-9f3b-2c46e5361e60"}, {"timestamp": "2025-03-23T06:33:21Z", "date_only": false, "value": "2025-03-23T06:33:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6538", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "52af4ce3-5303-4496-b2c0-6e1935b8465c", "content": "\ud83d\udea8 Coinbase dodged a bullet\u2014but 218 repos weren\u2019t so lucky.\n\nA GitHub supply chain attack hijacked tj-actions/changed-files, leaking secrets from 200+ projects.\n\n\ud83d\udd0d CVE-2025-30066 + CVE-2025-30154 | CVSS 8.6\n\ud83c\udfaf Targets: DockerHub, npm, AWS creds\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Tactics: Fork PRs, dangling commits, burner GitHub accounts\n\nThis isn\u2019t just a glitch. It\u2019s a playbook for future CI/CD attacks.\n\nWhy it matters now? Thousands still trust infected actions. The exploit may be gone\u2014but the method isn\u2019t.\n\n\ud83d\udd17 Dig deeper before your next push: https://thehackernews.com/2025/03/github-supply-chain-breach-coinbase.html", "url": "https://t.me/thehackernews/6538"}, {"timestamp": "2025-03-23T10:42:21.836Z", "date_only": false, "value": "2025-03-23T10:42:21.836097Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll22lr3zerf2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "6ff31178-1e11-4b0b-b468-1b0bd4fa9536", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll22lr3zerf2"}, {"timestamp": "2025-03-24T08:28:19.867Z", "date_only": false, "value": "2025-03-24T08:28:19.867131Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4dd2zlieo2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "fd3e59e1-6f97-49e5-b3ab-b5566b0a87e7", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4dd2zlieo2"}, {"timestamp": "2025-03-24T11:00:08.831Z", "date_only": false, "value": "2025-03-24T11:00:08.831947Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4m2ndecwo2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "6c09ea80-36f1-4617-948a-c1f42ed4027a", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4m2ndecwo2"}, {"timestamp": "2025-03-24T11:20:53.506Z", "date_only": false, "value": "2025-03-24T11:20:53.506736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4n63b43yo2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "a216828c-a8e8-4c7b-82d5-9aba195eca17", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4n63b43yo2"}, {"timestamp": "2025-03-24T12:10:42.701Z", "date_only": false, "value": "2025-03-24T12:10:42.701576Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4pcuhbhvg2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "10ce7e99-a09c-423a-9a33-7c13080d8ecd", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4pcuhbhvg2"}, {"timestamp": "2025-03-24T14:59:34.697Z", "date_only": false, "value": "2025-03-24T14:59:34.697045Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4zb4aiv7o2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "72770ad4-52e6-4661-80a6-6792cedbd410", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll4zb4aiv7o2"}, {"timestamp": "2025-03-24T20:46:08.443Z", "date_only": false, "value": "2025-03-24T20:46:08.443569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll5mf56zozx2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4919b458-34c8-44ac-8639-c4987c7a13f0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll5mf56zozx2"}, {"timestamp": "2025-03-25T06:20:09.759Z", "date_only": false, "value": "2025-03-25T06:20:09.759264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll6muu3g2ro2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "aef7226f-a2a6-43ca-b245-4f55d2c4aebd", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ll6muu3g2ro2"}, {"timestamp": "2025-03-25T08:06:32Z", "date_only": false, "value": "2025-03-25T08:06:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "e0f65fae-0885-413a-8b75-354965c05996"}, {"timestamp": "2025-03-26T02:17:15Z", "date_only": false, "value": "2025-03-26T02:17:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11969", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "12607723-dee6-41c5-ab75-da3615642563", "content": "#tools\n#Blue_Team_Techniques\n1. Static Analysis of GUID Encoded Shellcode\nhttps://isc.sans.edu/diary/Static+Analysis+of+GUID+Encoded+Shellcode/31774\n2. Sigma Rule for CVE-2025-29927 (Next.js) Detection\nhttps://github.com/elshaheedy/CVE-2025-29927-Sigma-Rule\n]-> Nuclei template\n3. CVE-2025-30066 Detection Tool\nhttps://github.com/Checkmarx/Checkmarx-CVE-2025-30066-Detection-Tool", "url": "https://t.me/CyberSecurityTechnologies/11969"}, {"timestamp": "2025-03-26T18:39:14.201Z", "date_only": false, "value": "2025-03-26T18:39:14.201681Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3llcgnq4rwa26", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "1e740eff-98b6-4c76-8102-c61ecaa1fbf8", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3llcgnq4rwa26"}, {"timestamp": "2025-03-27T01:43:07.199Z", "date_only": false, "value": "2025-03-27T01:43:07.199297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lld6doohl62i", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "347d7636-349a-4cc8-a449-29e8c56a9bda", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lld6doohl62i"}, {"timestamp": "2025-03-27T18:05:31Z", "date_only": false, "value": "2025-03-27T18:05:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/19646", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "c1988eea-3ea8-4283-8a75-449693e4a79e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTest CVE-2025-30066\nURL\uff1ahttps://github.com/OS-pedrogustavobilro/test-changed-files\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/19646"}, {"timestamp": "2025-03-28T12:34:12Z", "date_only": false, "value": "2025-03-28T12:34:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haj3imad/1422", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "ca53256f-b840-465e-a472-ca436f4eae8a", "content": "https://github.com/Checkmarx/Checkmarx-CVE-2025-30066-Detection-Tool\n\nCheckmarx-CVE-2025-30066-Detection-Tool\n#github #exploit", "url": "https://t.me/haj3imad/1422"}, {"timestamp": "2025-03-30T22:39:03.801Z", "date_only": false, "value": "2025-03-30T22:39:03.801994Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llmvtgrsa3o2", "record": "cve-2025-30066", "field": "creation_timestamp", "uuid": "da425300-78af-46be-adca-3cb2adf2ef82", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llmvtgrsa3o2"}, {"timestamp": "2025-03-30T23:13:42.515Z", "date_only": false, "value": "2025-03-30T23:13:42.515998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llmxtudicur2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4212e34c-69a4-4ae3-bd24-31ede19fbeaa", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3llmxtudicur2"}, {"timestamp": "2025-04-07T23:43:58.378Z", "date_only": false, "value": "2025-04-07T23:43:58.378714Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/inmobi-info.bsky.social/post/3lmb5bnzsrw2l", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "3c382d49-d267-46d6-83f2-bc3e5cb40f5e", "url": "https://bsky.app/profile/inmobi-info.bsky.social/post/3lmb5bnzsrw2l"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-30066", "field": "evidence.0.details.due_date", "uuid": "d008f86f-14e9-4438-9637-80033988877f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-10T14:18:59.382Z", "date_only": false, "value": "2025-04-10T14:18:59.382303Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lmhp3xkch7x2", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7e52e8e2-55f2-45d7-9185-e91d453c0156", "url": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lmhp3xkch7x2"}, {"timestamp": "2025-05-02T15:25:03Z", "date_only": false, "value": "2025-05-02T15:25:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/thomaspoignant/829f7538ef985d051d95cadadbc53700", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "e4a8d5b9-c980-4881-8f25-867cea672883", "url": "https://gist.github.com/thomaspoignant/829f7538ef985d051d95cadadbc53700"}, {"timestamp": "2025-05-05T18:30:20.262Z", "date_only": false, "value": "2025-05-05T18:30:20.262842Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3logysdwspt2r", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "44744ded-1803-4000-8b23-7671b922dd4f", "url": "https://bsky.app/profile/bolhasec.com/post/3logysdwspt2r"}, {"timestamp": "2025-05-20T01:45:04.925Z", "date_only": false, "value": "2025-05-20T01:45:04.925310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lpkxmu5wlr2q", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4c28351d-6358-49a7-95f9-bc0bd2c8055c", "url": "https://bsky.app/profile/opsmatters.com/post/3lpkxmu5wlr2q"}, {"timestamp": "2025-08-10T18:27:45Z", "date_only": false, "value": "2025-08-10T18:27:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "08f1ebc0-a055-4cdb-922a-dc4aaadb0ef1"}, {"timestamp": "2025-09-08T04:26:26Z", "date_only": false, "value": "2025-09-08T04:26:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/websecurityinsights/49", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "2adf7385-2372-47de-93aa-30b3ddd0e514", "content": "#tools\n#Blue_Team_Techniques\n1. Static Analysis of GUID Encoded Shellcode\nhttps://isc.sans.edu/diary/Static+Analysis+of+GUID+Encoded+Shellcode/31774\n2. Sigma Rule for CVE-2025-29927 (Next.js) Detection\nhttps://github.com/elshaheedy/CVE-2025-29927-Sigma-Rule\n]-> Nuclei template\n3. CVE-2025-30066 Detection Tool\nhttps://github.com/Checkmarx/Checkmarx-CVE-2025-30066-Detection-Tool", "url": "https://t.me/websecurityinsights/49"}, {"timestamp": "2025-09-10T07:48:00Z", "date_only": false, "value": "2025-09-10T07:48:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "cd7a438f-4bbf-4622-8bca-5bd82097af73"}, {"timestamp": "2025-10-22T19:29:00Z", "date_only": false, "value": "2025-10-22T19:29:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MRRH-FWG8-R2C3", "record": "GHSA-MRRH-FWG8-R2C3", "field": "modified"}, {"timestamp": "2025-12-21T17:31:13.048Z", "date_only": false, "value": "2025-12-21T17:31:13.048403Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3majaqnsg5h2u", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7b840458-d47a-4d79-99b4-ce44ad6ec289", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3majaqnsg5h2u"}, {"timestamp": "2025-12-21T17:41:36.310Z", "date_only": false, "value": "2025-12-21T17:41:36.310554Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3majbdarlh22i", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "ab58acad-adba-4bd8-88ab-19825f7a500e", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3majbdarlh22i"}, {"timestamp": "2026-02-02T12:26:05.408Z", "date_only": false, "value": "2026-02-02T12:26:05.408027Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85eec58e-1219-4ae4-9bab-332b2647ea38", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "96ca87a2-b145-45b6-a3e4-634d80c8b89a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85eec58e-1219-4ae4-9bab-332b2647ea38"}, {"timestamp": "2026-02-02T12:26:05.408Z", "date_only": false, "value": "2026-02-02T12:26:05.408027Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85eec58e-1219-4ae4-9bab-332b2647ea38", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "fa03fc2e-9486-4995-a6a6-1bce3aab346d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85eec58e-1219-4ae4-9bab-332b2647ea38"}, {"timestamp": "2026-02-22T01:10:43Z", "date_only": false, "value": "2026-02-22T01:10:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ktrysmt/c05bc7119370f4f297fd8d90757c6091", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7cfcc868-9341-4463-aa7a-8dede0a6d0df", "url": "https://gist.github.com/ktrysmt/c05bc7119370f4f297fd8d90757c6091"}, {"timestamp": "2026-02-26T19:09:29.628Z", "date_only": false, "value": "2026-02-26T19:09:29.628Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-30066", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:29.628Z", "date_only": false, "value": "2026-02-26T19:09:29.628Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30066", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-05T05:57:14Z", "date_only": false, "value": "2026-03-05T05:57:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/hdknr/5bbdc7bd98ff0dbdfde257d909d48d8c", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "12277b0d-5f8c-4518-91a9-4c2c0fe1c3da", "url": "https://gist.github.com/hdknr/5bbdc7bd98ff0dbdfde257d909d48d8c"}, {"timestamp": "2026-04-01T05:00:10Z", "date_only": false, "value": "2026-04-01T05:00:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/hiboma/8ac6a8d6a5b013096f344ca21ca08aca", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "cf287525-41f0-4256-aee5-609e3db1fadb", "url": "https://gist.github.com/hiboma/8ac6a8d6a5b013096f344ca21ca08aca"}, {"timestamp": "2026-04-28T20:08:01.681Z", "date_only": false, "value": "2026-04-28T20:08:01.681422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mklf6vqvpq2r", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "13e16f3e-a01f-44d3-bc65-adabd978bd97", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mklf6vqvpq2r"}, {"timestamp": "2026-05-15T03:00:06Z", "date_only": false, "value": "2026-05-15T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4tIKexrP1B7eYtOW91-QaKQ8EIqNMri3pu2C_JIQ1mA899I", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "80d136b5-fdfb-4531-8268-1cef894e3851"}, {"timestamp": "2026-06-19T12:46:24.473Z", "date_only": false, "value": "2026-06-19T12:46:24.473672Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2895f460-88bd-4cf1-bddd-5d595e40f191", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "f80565ca-7283-4682-873a-e1c48c36bca2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2895f460-88bd-4cf1-bddd-5d595e40f191"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-30066", "field": "timestamps.recorded_at", "uuid": "19cfd110-7666-45e6-aa59-eccb7b49ff12", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:35.131Z", "date_only": false, "value": "2026-06-23T11:14:35.131725Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/19cfd110-7666-45e6-aa59-eccb7b49ff12", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "03ac089a-6f41-4206-bd92-33e94186bbf2", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/19cfd110-7666-45e6-aa59-eccb7b49ff12"}, {"timestamp": "2026-06-23T14:06:07.330Z", "date_only": false, "value": "2026-06-23T14:06:07.330149Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d7f94627-e758-4fbc-b5a3-7e93a048fd27", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4089e4c1-7dce-454d-a7ed-be35a0ded9b6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d7f94627-e758-4fbc-b5a3-7e93a048fd27"}, {"timestamp": "2026-07-20T22:00:04.657Z", "date_only": false, "value": "2026-07-20T22:00:04.657496Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/191", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "2574b23e-d89e-4381-995b-d31223cc6174", "url": "https://t.me/pphm_HackerNews/191"}, {"timestamp": "2026-07-20T22:00:05.554Z", "date_only": false, "value": "2026-07-20T22:00:05.554297Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/claytechsolution/248", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "b04b43d8-71b9-4f26-af87-92dbdf4112e1", "url": "https://t.me/claytechsolution/248"}, {"timestamp": "2026-07-21T00:00:08.898Z", "date_only": false, "value": "2026-07-21T00:00:08.898628Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/claytechsolution/248", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "faa718e0-fb0e-4542-87ff-664093e3d80b", "url": "https://t.me/claytechsolution/248"}, {"timestamp": "2026-07-21T00:00:09.696Z", "date_only": false, "value": "2026-07-21T00:00:09.696885Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/191", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "1cd3243b-3e92-4d1e-a2f4-7444467e9978", "url": "https://t.me/pphm_HackerNews/191"}, {"timestamp": "2026-07-26T02:00:31.785Z", "date_only": false, "value": "2026-07-26T02:00:31.785540Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3752", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "a46c0375-17fb-4a0f-89d8-20493884b8e9", "url": "https://t.me/EchelonEyes/3752"}, {"timestamp": "2026-07-27T00:00:37.496Z", "date_only": false, "value": "2026-07-27T00:00:37.496282Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3752", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "15595ad7-856d-475c-93db-14abf3ee3592", "url": "https://t.me/EchelonEyes/3752"}, {"timestamp": "2026-07-28T00:00:52.339Z", "date_only": false, "value": "2026-07-28T00:00:52.339427Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/3752", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "65ea7ef8-6e21-4a91-8bdb-ca4d8964e332", "url": "https://t.me/EchelonEyes/3752"}, {"timestamp": "2026-08-04T13:00:06.095Z", "date_only": false, "value": "2026-08-04T13:00:06.095816Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/380", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "d8c9fe5f-f97d-4d6d-b5de-9f9b365527cd", "url": "https://t.me/purp_sec/380"}, {"timestamp": "2026-08-04T13:00:21.609Z", "date_only": false, "value": "2026-08-04T13:00:21.609767Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/171", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "b0b14f56-d1f8-4180-95dc-3040cba4c243", "url": "https://t.me/cyberok_news/171"}, {"timestamp": "2026-08-05T00:00:31.598Z", "date_only": false, "value": "2026-08-05T00:00:31.598239Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/380", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "5040e85c-09c6-4b05-8494-873b14c11f32", "url": "https://t.me/purp_sec/380"}, {"timestamp": "2026-08-05T00:00:36.686Z", "date_only": false, "value": "2026-08-05T00:00:36.686623Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/171", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "5e48f7d8-76e5-4a96-9ab5-ccffc51203f8", "url": "https://t.me/cyberok_news/171"}, {"timestamp": "2026-08-06T00:00:56.784Z", "date_only": false, "value": "2026-08-06T00:00:56.784652Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/171", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "315bfdda-eae5-4e10-9d4e-761b2f10c09f", "url": "https://t.me/cyberok_news/171"}, {"timestamp": "2026-08-17T16:19:44.125Z", "date_only": false, "value": "2026-08-17T16:19:44.125920Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtc46vbmo72t", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "6fad88e3-7eda-4fd9-a5ca-160087aca693", "url": "https://bsky.app/profile/cyfar.ca/post/3mtc46vbmo72t"}, {"timestamp": "2026-08-28T09:35:43.281Z", "date_only": false, "value": "2026-08-28T09:35:43.281336Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/4ba388beb31caacd09fbc15019f8e274", "record": "cve-2025-30066", "field": "creation_timestamp", "uuid": "6bd3d479-7e62-43ab-b28d-93f6e4eae7b5", "url": "https://gist.github.com/konard/4ba388beb31caacd09fbc15019f8e274"}, {"timestamp": "2026-09-01T17:00:05.595Z", "date_only": false, "value": "2026-09-01T17:00:05.595806Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/1028", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7b9f3128-9da0-42a0-a89a-d3e9cd004856", "url": "https://t.me/Hackme_news/1028"}, {"timestamp": "2026-09-02T01:03:34.249Z", "date_only": false, "value": "2026-09-02T01:03:34.249939Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/1028", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "d73d9df1-da16-4cc6-b46a-c468d22d757f", "url": "https://t.me/Hackme_news/1028"}, {"timestamp": "2026-09-05T13:03:21.477Z", "date_only": false, "value": "2026-09-05T13:03:21.477604Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/512a90a3806a1c7a5364f6d1e4474f78", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "a95647bb-9f73-44c1-a410-94eeb4e016ae", "url": "https://gist.github.com/konard/512a90a3806a1c7a5364f6d1e4474f78"}, {"timestamp": "2026-09-12T18:46:31.190Z", "date_only": false, "value": "2026-09-12T18:46:31.190364Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/bf5f9cc2196d205c9f9e20faaa9bfd31", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "f6291028-f587-454a-a204-c3cf1cd10fd9", "url": "https://gist.github.com/konard/bf5f9cc2196d205c9f9e20faaa9bfd31"}, {"timestamp": "2026-09-16T05:32:46.082Z", "date_only": false, "value": "2026-09-16T05:32:46.082418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/levelbrook.bsky.social/post/3mvmfznhknj2w", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4bdbe288-13fe-4c8c-9cf9-b14fb4284b7c", "url": "https://bsky.app/profile/levelbrook.bsky.social/post/3mvmfznhknj2w"}, {"timestamp": "2026-09-21T20:42:53.893Z", "date_only": false, "value": "2026-09-21T20:42:53.893138Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/03389929c9559a974a7da96beca85911", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "7bbd1b20-8efe-4529-a966-7cf26d43f22f", "url": "https://gist.github.com/konard/03389929c9559a974a7da96beca85911"}, {"timestamp": "2026-09-24T13:10:00.320Z", "date_only": false, "value": "2026-09-24T13:10:00.320", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30066", "record": "FKIE_CVE-2025-30066", "field": "lastModified"}, {"timestamp": "2026-10-06T10:20:43Z", "date_only": false, "value": "2026-10-06T10:20:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/3938edf803b3666dc21def4a3c6a7ec7", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "936cc2d0-187f-4d1e-9a13-35f7f91369dc", "url": "https://gist.github.com/konard/3938edf803b3666dc21def4a3c6a7ec7"}, {"timestamp": "2026-10-06T20:09:10Z", "date_only": false, "value": "2026-10-06T20:09:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/f555d4bfaac94feb08b1f3a616ae7041", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "af844118-e1d3-4920-b04a-4912feaabab6", "url": "https://gist.github.com/konard/f555d4bfaac94feb08b1f3a616ae7041"}, {"timestamp": "2026-10-06T21:31:01Z", "date_only": false, "value": "2026-10-06T21:31:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/f62e3dfa60f7eaf10fe1bc2c953abfbe", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "2c482ad5-fe70-4989-b964-55015a66ab2d", "url": "https://gist.github.com/konard/f62e3dfa60f7eaf10fe1bc2c953abfbe"}, {"timestamp": "2026-10-07T07:08:52Z", "date_only": false, "value": "2026-10-07T07:08:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/66ebc745bdc52e6811674f2a91c0c868", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "c5c6b42e-5af8-4551-9965-4aea8af184fc", "url": "https://gist.github.com/konard/66ebc745bdc52e6811674f2a91c0c868"}, {"timestamp": "2026-10-07T07:13:24Z", "date_only": false, "value": "2026-10-07T07:13:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/dca692386d4ee5ec487926a3e9367a82", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "4e9d95a0-0e7b-4514-bbc7-3fb8e0b913c4", "url": "https://gist.github.com/konard/dca692386d4ee5ec487926a3e9367a82"}, {"timestamp": "2026-10-07T07:41:00Z", "date_only": false, "value": "2026-10-07T07:41:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/ae40af78daa6749764aa00335989087e", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "9401a8bb-2ac0-4870-8e71-245386fdd739", "url": "https://gist.github.com/konard/ae40af78daa6749764aa00335989087e"}, {"timestamp": "2026-10-11T16:59:21Z", "date_only": false, "value": "2026-10-11T16:59:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/721236e129af5740641f7b88949df8ef", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "9cc88a63-0b52-470a-be6c-6b10b8cd6cf2", "url": "https://gist.github.com/konard/721236e129af5740641f7b88949df8ef"}, {"timestamp": "2026-11-01T23:04:59Z", "date_only": false, "value": "2026-11-01T23:04:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/konard/8a63488e70c9838a48c34e235f651d27", "record": "CVE-2025-30066", "field": "creation_timestamp", "uuid": "fd283f7d-8a80-49cd-9fb7-e04998ffd04f", "url": "https://gist.github.com/konard/8a63488e70c9838a48c34e235f651d27"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-30066", "field": "timestamps.recorded_at", "uuid": "d008f86f-14e9-4438-9637-80033988877f", "status": {"status_reason": "confirmed", "exploited": true}}]}