{"metadata": {"vulnerability": "CVE-2025-5309", "count": 35, "kinds": {"milestone": 5, "sighting": 18, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-05-28T17:50:50.656Z", "date_only": false, "value": "2025-05-28T17:50:50.656Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-5309", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-16T16:06:14.413Z", "date_only": false, "value": "2025-06-16T16:06:14.413Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-5309", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-16T16:25:53.879Z", "date_only": false, "value": "2025-06-16T16:25:53.879872Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114693973746411987", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "85e46b60-c607-4b79-869c-96026e5b3bc8", "url": "https://infosec.exchange/users/cR0w/statuses/114693973746411987"}, {"timestamp": "2025-06-16T16:36:02Z", "date_only": false, "value": "2025-06-16T16:36:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18469", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "cebd7edd-d9fb-4592-bdd4-1d98c6fb12c7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-5309\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.\n\ud83d\udccf Published: 2025-06-16T16:06:14.413Z\n\ud83d\udccf Modified: 2025-06-16T16:06:14.413Z\n\ud83d\udd17 References:\n1. https://www.beyondtrust.com/trust-center/security-advisories/bt25-04", "url": "https://t.me/DarkWebInformer_CVEAlerts/18469"}, {"timestamp": "2025-06-16T17:15:29Z", "date_only": false, "value": "2025-06-16T17:15:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GQMV-WGQ3-W6P3", "record": "GHSA-GQMV-WGQ3-W6P3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-16T17:15:29.853Z", "date_only": false, "value": "2025-06-16T17:15:29.853", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5309", "record": "FKIE_CVE-2025-5309", "field": "published"}, {"timestamp": "2025-06-16T17:38:11.702Z", "date_only": false, "value": "2025-06-16T17:38:11.702314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thenerdy.one/post/3lrqjhzjqgs22", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "a116da43-1e0f-4026-9578-90d0d840aff2", "url": "https://bsky.app/profile/thenerdy.one/post/3lrqjhzjqgs22"}, {"timestamp": "2025-06-16T18:32:20Z", "date_only": false, "value": "2025-06-16T18:32:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GQMV-WGQ3-W6P3", "record": "GHSA-GQMV-WGQ3-W6P3", "field": "published"}, {"timestamp": "2025-06-16T19:26:44.196Z", "date_only": false, "value": "2025-06-16T19:26:44.196965Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrqpk5t5lk2r", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "b8aaf4fa-798b-4c31-b944-27b706b88555", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrqpk5t5lk2r"}, {"timestamp": "2025-06-16T22:00:00Z", "date_only": false, "value": "2025-06-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1331", "record": "WID-SEC-W-2025-1331", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-16T22:00:00Z", "date_only": false, "value": "2025-06-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1331", "record": "WID-SEC-W-2025-1331", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-16T22:00:00Z", "date_only": false, "value": "2025-06-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1331", "record": "WID-SEC-W-2025-1331", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-06-16T22:00:00Z", "date_only": false, "value": "2025-06-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1331", "record": "WID-SEC-W-2025-1331", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-16T23:11:53.479Z", "date_only": false, "value": "2025-06-16T23:11:53.479Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / BT", "record": "CVE-2025-5309", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-17T08:10:30.869Z", "date_only": false, "value": "2025-06-17T08:10:30.869+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1331", "record": "WID-SEC-W-2025-1331", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-18T10:20:16.299Z", "date_only": false, "value": "2025-06-18T10:20:16.299292Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/114703860746418555", "record": "cve-2025-5309", "field": "creation_timestamp", "uuid": "83d458ae-1bc7-425e-a1d8-3fb4a0bf2a95", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/114703860746418555"}, {"timestamp": "2025-06-18T10:24:01.860Z", "date_only": false, "value": "2025-06-18T10:24:01.860735Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lrus5klcye2z", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "71960aa4-2a21-43a5-a0c3-6d45db8063e9", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lrus5klcye2z"}, {"timestamp": "2025-06-18T10:26:08.713Z", "date_only": false, "value": "2025-06-18T10:26:08.713180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lrusbcxod327", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "b4c4df77-9af9-430b-b7ef-0026f0d8f4e2", "url": "https://bsky.app/profile/nimblenerd.social/post/3lrusbcxod327"}, {"timestamp": "2025-06-18T20:20:28.823Z", "date_only": false, "value": "2025-06-18T20:20:28.823848Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrvthuflrqw2", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "e070f7be-426e-497a-8dce-db2c0f7e58f5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrvthuflrqw2"}, {"timestamp": "2025-06-19T03:55:07.428Z", "date_only": false, "value": "2025-06-19T03:55:07.428165Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-5309", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-19T03:55:07.428Z", "date_only": false, "value": "2025-06-19T03:55:07.428165Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5309", "record": "FKIE_CVE-2025-5309", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-19T12:09:54Z", "date_only": false, "value": "2025-06-19T12:09:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/06/19/beyondtrust-warns-of-preauth-rce.html", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "a883d638-a027-406f-a81f-bd7caafb2d1f", "url": "https://threatintel.cc/2025/06/19/beyondtrust-warns-of-preauth-rce.html"}, {"timestamp": "2025-06-19T14:10:00.288Z", "date_only": false, "value": "2025-06-19T14:10:00.288400Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/114710426414523973", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "4b99ae43-c1e5-40fc-b36b-43bc68d91f4f", "url": "https://infosec.exchange/users/edwardk/statuses/114710426414523973"}, {"timestamp": "2025-06-20T18:30:05Z", "date_only": false, "value": "2025-06-20T18:30:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/7151", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "41aa5a21-94e0-4b2d-a2e1-dbe8514de17e", "content": "\u0412 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f:\n\n1. BeyondTrust \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430.\n\nCVE-2025-5309 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Resilion\u00a0\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust Remote Support \u0438 Privileged Remote Access. \n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440 BeyondTrust \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n2. Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u0440\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 (CVE-2025-5777) \u0432 NetScaler ADC \u0438 NetScaler Gateway.\n\nCitrix \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\u00a0\n\n3. \u0414\u0436\u043e\u043d\u0430\u0442\u0430\u043d \u041c\u044d\u043d\u043d\u0445\u0435\u043d \u043e\u0442\u044b\u0441\u043a\u0430\u043b \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Erlang/OTP ZIP-\u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043f\u0443\u0442\u044c \u043f\u043e \u0441\u0432\u043e\u0435\u043c\u0443 \u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u044e.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 CrowdStrike \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 AMSI \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0435\u0439, \u0435\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n5. Cisco \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n6. Atlassian \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Bamboo, Bitbucket, Confluence, Crowd \u0438 Jira.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2025-22228 (\u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0432 Spring), CVE-2025-24970 (DoS \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Netty), CVE-2024-38816 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 WebMvc.fn \u0438 WebFlux.fn), CVE-2024-57699 (DoS \u0432 Netplex Json-smart) \u0438 CVE-2025-31650 (DoS \u0432 Apache Tomcat).\n\n7. Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0426\u0435\u043d\u0442\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438.\n\n8. GreyNoise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0435 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-28771 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8) \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Zyxel, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Mirai.\n\n9. \u041d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2025-3248, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u043e\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442 Flodrix, \u043e \u0447\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Trend Micro.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445.", "url": "https://t.me/true_secator/7151"}, {"timestamp": "2025-06-21T10:00:37Z", "date_only": false, "value": "2025-06-21T10:00:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/5908", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "eb7114e9-a79c-46d4-9029-61f29c7e9740", "content": "\u0413\u0440\u043e\u043c\u043a\u0438\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0432 ITSEC: 16\u201320 \u0438\u044e\u043d\u044f 2025.\n\u041d\u0435\u0434\u0435\u043b\u044f \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430: \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u043b\u0435\u043c \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0430 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u044b \u2014 \u0436\u0435\u0441\u0442\u0447\u0435. \u0412\u043e\u0442 \u0433\u043b\u0430\u0432\u043d\u043e\u0435:\n\nNobitex: $90M \u0432 \u043f\u0435\u043f\u0435\u043b.\n\u0418\u0440\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0431\u0438\u0440\u0436\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 Gonjeshke Darande. \u0427\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0433\u043e\u0440\u044f\u0447\u0438\u0445 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430\u0445 \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043e $90M \u0432 BTC, ETH, USDT. \u0421\u0435\u0442\u044c Tron \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0441 \u043f\u0440\u043e\u0432\u043e\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044f\u043c\u0438:\u00abFuckIRGCTerrorists\u00bb.\n\u0410\u0442\u0430\u043a\u0430 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u0443\u0434\u0430\u0440\u0430\u043c\u0438 \u043f\u043e \u044f\u0434\u0435\u0440\u043d\u044b\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c \u0418\u0440\u0430\u043d\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u0441\u043e\u0436\u0433\u043b\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0432 \u043a\u0440\u0430\u0436\u0443 \u0432 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043a\u0442. \u0411\u0438\u0440\u0436\u0430 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0430\u0446\u0438\u0438.\n\n\u0414\u0432\u043e\u0439\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430: Aflac \u0438 WaPo.\n\u25fe\ufe0fAflac: \u0421\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 SSN, \u043c\u0435\u0434\u0434\u0430\u043d\u043d\u044b\u0445 \u0438 PII \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u0442\u043e 12 \u0438\u044e\u043d\u044f.\n\u25fe\ufe0fWashington Post: \u0412\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u043f\u043e\u0447\u0442\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u043e \u043d\u0430\u0446\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u041a\u0438\u0442\u0430\u044e. \u041f\u043e\u0434 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0435\u043c \u2014 \u0433\u043e\u0441\u0448\u043f\u0438\u043e\u043d\u0430\u0436 (\u041a\u041d\u0420/\u0420\u0424).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\nLangflow (CVE-2025-3248):\n\u25fe\ufe0fRCE \u0447\u0435\u0440\u0435\u0437 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /api/v1/validate/code. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c Flodrix \u0434\u043b\u044f DDoS-\u0430\u0442\u0430\u043a \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u25fe\ufe0f\u041f\u0430\u0442\u0447: \u0432\u0435\u0440\u0441\u0438\u044f 1.3.0+ \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\nBeyondTrust (CVE-2025-5309):\n\u25fe\ufe0fSSTI \u0432 \u0447\u0430\u0442-\u043c\u043e\u0434\u0443\u043b\u0435 \u2192 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b Remote Support/PRA \u0432\u0435\u0440\u0441\u0438\u0439 24.2.2\u201325.1.1.\n\u25fe\ufe0f\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f: \u0421\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 + SAML-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u0416\u0451\u0441\u0442\u0447\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\u0420\u043e\u0441\u0444\u0438\u043d\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433: \u0421 1 \u0438\u044e\u043d\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u044b \u0431\u0435\u0437 \u0441\u0443\u0434\u0430 \u043d\u0430 10 \u0434\u043d\u0435\u0439 \u043f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u0432 \u043e\u0442\u043c\u044b\u0432\u0430\u043d\u0438\u0438. \u041f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c: \u0447\u0430\u0441\u0442\u044b\u0435 \u043c\u0435\u043b\u043a\u0438\u0435 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u0438, \"\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435\" \u0442\u0440\u0430\u0442\u044b.\n\n\u041c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440 Max: \u041e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u0441 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f. \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0430\u043c\u0438, \u042d\u0426\u041f, \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 ID.\n\n\u0421\u043a\u0430\u043d\u0434\u0430\u043b: 1\u0421-\u0411\u0438\u0442\u0440\u0438\u043a\u0441 \u0438 \u0418\u0440\u043b\u0430\u043d\u0434\u0438\u044f.\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 DPA Analytics: 11 \u043b\u0435\u0442 CMS \u0442\u0430\u0439\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432 \u0418\u0440\u043b\u0430\u043d\u0434\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u0440\u0438\u043f\u0442 bitrix.info/ba.js.\n\u25fe\ufe0f\u0412\u0435\u043d\u0434\u043e\u0440: \"\u042d\u0442\u043e \u043c\u0435\u0442\u0440\u0438\u043a\u0438 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u0438\u0437 \u043c\u043e\u0434\u0443\u043b\u044f \u00ab\u0421\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0441\u0430\u0439\u0442\u0430\u00bb\".\n\u25fe\ufe0f\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b: \u0421\u0431\u043e\u0440 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f.\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0441 7 \u0438\u044e\u043d\u044f, \u043d\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043a \u0424\u0417-152 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f.\n\nRansomware + \u044e\u0440\u0438\u0441\u0442\u044b = \u0430\u0434.\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Qilin \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043e\u043f\u0446\u0438\u044e \u00abCall a Lawyer\u00bb:\n\u25fe\ufe0f\"\u0410\u0434\u0432\u043e\u043a\u0430\u0442\u044b\" \u0434\u0430\u0432\u044f\u0442 \u043d\u0430 \u0436\u0435\u0440\u0442\u0432: \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442 \u0443\u0449\u0435\u0440\u0431, \u0433\u0440\u043e\u0437\u044f\u0442 \u0438\u0441\u043a\u0430\u043c\u0438.\n\u25fe\ufe0f\u0426\u0435\u043b\u044c: \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0442\u044c \u0432\u044b\u043a\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u0418\u0418 \u2014 \u043e\u0440\u0443\u0434\u0438\u0435 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\u041e\u0442\u0447\u0451\u0442 OpenAI: \u0413\u0440\u0443\u043f\u043f\u044b \u0438\u0437 \u0420\u0424, \u041a\u041d\u0420, \u0418\u0440\u0430\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0418\u0418 \u0434\u043b\u044f:\n\u25fe\ufe0f\u0413\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u0432 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f Windows-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b).\n\u25fe\ufe0f\u0424\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 ChatGPT.\n\u25fe\ufe0f\u041f\u0440\u043e\u043f\u0430\u0433\u0430\u043d\u0434\u044b (\u0431\u043e\u0442\u0441\u0435\u0442\u0438 \u0432 TikTok/X).\n\n#\u0438\u0442\u043e\u0433\u0438\n\nITsec NEWS", "url": "https://t.me/itsec_news/5908"}, {"timestamp": "2025-06-21T11:24:38.567Z", "date_only": false, "value": "2025-06-21T11:24:38.567092Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114721100568479309", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "a375554b-a256-4187-8c0b-9591281f9980", "url": "https://mstdn.ca/users/rfwaveio/statuses/114721100568479309"}, {"timestamp": "2025-06-24T16:41:23Z", "date_only": false, "value": "2025-06-24T16:41:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/41739", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "a9a1f030-52db-4663-8533-124e04b74dba", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 CVE-2025-5309 Multi-Method SSTI Scanner | BeyondTrust Detection Tool by Issam\nURL\uff1ahttps://github.com/issamjr/CVE-2025-5309-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/41739"}, {"timestamp": "2025-06-24T21:00:04Z", "date_only": false, "value": "2025-06-24T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Od3SFIwTXU85oXzkcR6Q-PR-rjVZLt3U6sXYvEmQ4ovgOa8", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "de655c60-6970-45c2-b89b-773fed9255d7"}, {"timestamp": "2025-06-25T07:00:06Z", "date_only": false, "value": "2025-06-25T07:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sIKwSeNUpe7JNZeJNh_vlAgf4HoS_EvEcDsmJEUgRhpauHM", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "4c9fa8c0-5b2e-45ac-9288-6e4ea61271f2"}, {"timestamp": "2025-06-25T09:00:03Z", "date_only": false, "value": "2025-06-25T09:00:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Xd5Dp2K-pK8eim0GR99MlfqC5INsxluEke7iGLM_07w0WZI", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "7ddacf25-1c71-4f97-a5d1-aabc22ed651d"}, {"timestamp": "2025-08-21T21:32:01Z", "date_only": false, "value": "2025-08-21T21:32:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GQMV-WGQ3-W6P3", "record": "GHSA-GQMV-WGQ3-W6P3", "field": "modified"}, {"timestamp": "2026-02-26T17:50:35.531Z", "date_only": false, "value": "2026-02-26T17:50:35.531Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-5309", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:50:35.531Z", "date_only": false, "value": "2026-02-26T17:50:35.531Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-5309", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:47:39.370Z", "date_only": false, "value": "2026-06-17T09:47:39.370", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5309", "record": "FKIE_CVE-2025-5309", "field": "lastModified"}, {"timestamp": "2026-08-14T16:00:11.158Z", "date_only": false, "value": "2026-08-14T16:00:11.158248Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/785", "record": "CVE-2025-5309", "field": "creation_timestamp", "uuid": "c99d2432-35fe-476d-84cc-bf0816dc934f", "url": "https://t.me/purp_sec/785"}]}