{"metadata": {"vulnerability": "CVE-2025-59528", "count": 104, "kinds": {"milestone": 5, "sighting": 80, "kev": 5, "other": 14}}, "data": [{"timestamp": "2025-09-15T19:59:57Z", "date_only": false, "value": "2025-09-15T19:59:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3GCM-F6QX-FF7P", "record": "GHSA-3GCM-F6QX-FF7P", "field": "published"}, {"timestamp": "2025-09-17T17:04:20.373Z", "date_only": false, "value": "2025-09-17T17:04:20.373Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-59528", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-09-22T19:54:58.196Z", "date_only": false, "value": "2025-09-22T19:54:58.196Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-59528", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-09-22T19:54:58.196Z", "date_only": false, "value": "2025-09-22T19:54:58.196Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-59528", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-22T20:15:39Z", "date_only": false, "value": "2025-09-22T20:15:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3GCM-F6QX-FF7P", "record": "GHSA-3GCM-F6QX-FF7P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-09-22T20:15:39.530Z", "date_only": false, "value": "2025-09-22T20:15:39.530", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59528", "record": "FKIE_CVE-2025-59528", "field": "published"}, {"timestamp": "2025-09-22T20:23:40.363Z", "date_only": false, "value": "2025-09-22T20:23:40.363660Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-59528", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-09-22T20:23:40.363Z", "date_only": false, "value": "2025-09-22T20:23:40.363660Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59528", "record": "FKIE_CVE-2025-59528", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-09-22T20:24:09.883Z", "date_only": false, "value": "2025-09-22T20:24:09.883Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-59528", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-09-22T20:24:09.883Z", "date_only": false, "value": "2025-09-22T20:24:09.883Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-59528", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-22T22:00:00Z", "date_only": false, "value": "2025-09-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2105", "record": "WID-SEC-W-2025-2105", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-09-22T22:00:00Z", "date_only": false, "value": "2025-09-22T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2105", "record": "WID-SEC-W-2025-2105", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-22T22:00:00Z", "date_only": false, "value": "2025-09-22T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2105", "record": "WID-SEC-W-2025-2105", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-22T22:00:00Z", "date_only": false, "value": "2025-09-22T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2105", "record": "WID-SEC-W-2025-2105", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-09-23T00:02:02.508Z", "date_only": false, "value": "2025-09-23T00:02:02.508069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lzhmmncqts2w", "record": "cve-2025-59528", "field": "creation_timestamp", "uuid": "9aab11a3-7a0c-4eaf-bd69-a560cf10af61", "url": "https://bsky.app/profile/offseq.bsky.social/post/3lzhmmncqts2w"}, {"timestamp": "2025-09-23T08:56:08.699Z", "date_only": false, "value": "2025-09-23T08:56:08.699+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2105", "record": "WID-SEC-W-2025-2105", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-25T00:00:00Z", "date_only": true, "value": "2025-09-25", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-23078", "record": "CNVD-2025-23078", "field": "submitTime"}, {"timestamp": "2025-09-28T00:00:00Z", "date_only": true, "value": "2025-09-28", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-23078", "record": "CNVD-2025-23078", "field": "openTime"}, {"timestamp": "2025-10-13T15:49:17Z", "date_only": false, "value": "2025-10-13T15:49:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3GCM-F6QX-FF7P", "record": "GHSA-3GCM-F6QX-FF7P", "field": "modified"}, {"timestamp": "2025-11-01T21:02:25.573Z", "date_only": false, "value": "2025-11-01T21:02:25.573494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4lvabofbd2l", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "8f3b8c7e-631c-41c7-afb2-5c75d63dd84b", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4lvabofbd2l"}, {"timestamp": "2025-11-22T21:02:33.984Z", "date_only": false, "value": "2025-11-22T21:02:33.984941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6aoztvucx2a", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "6f6e1d25-a3da-4fb3-88f5-74c8c62137fa", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6aoztvucx2a"}, {"timestamp": "2025-11-27T14:38:41Z", "date_only": false, "value": "2025-11-27T14:38:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/60955", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "efec20b1-10c1-46fa-97af-69ab02bb5c95", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-59528\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-59528\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/60955"}, {"timestamp": "2025-11-27T21:00:05Z", "date_only": false, "value": "2025-11-27T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/i4Th3-qfHPrRxEPubQsx_tgczYzW3xhGs7IIz0Vj8tpPp0c", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "64b57748-e439-4bda-9477-70201f8d1c7b"}, {"timestamp": "2026-04-02T20:32:37Z", "date_only": false, "value": "2026-04-02T20:32:37.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-59528.yaml", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "84be76d4-3f17-4dee-b141-0e14356ebb25", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-59528.yaml"}, {"timestamp": "2026-04-05T21:03:02.946Z", "date_only": false, "value": "2026-04-05T21:03:02.946135Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mirnk4evhu22", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "02deed1a-39ce-4871-8822-801843cc1897", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mirnk4evhu22"}, {"timestamp": "2026-04-06T04:00:00Z", "date_only": false, "value": "2026-04-06T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.linkedin.com/feed/update/urn:li:activity:7446686314562850817/", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "44240ffe-3800-49a2-9b15-35da74b74a32", "url": "https://www.linkedin.com/feed/update/urn:li:activity:7446686314562850817/"}, {"timestamp": "2026-04-06T04:00:00Z", "date_only": false, "value": "2026-04-06T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ninja-forms-uploads/ninja-forms-file-upload-3326-unauthenticated-arbitrary-file-upload", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "9190dacd-666a-4158-9357-ac1bec163015", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ninja-forms-uploads/ninja-forms-file-upload-3326-unauthenticated-arbitrary-file-upload"}, {"timestamp": "2026-04-06T21:03:15.459Z", "date_only": false, "value": "2026-04-06T21:03:15.459003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miu5yzvoqp2p", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "51d2ad13-6b9a-4319-bb89-017f27bf3100", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miu5yzvoqp2p"}, {"timestamp": "2026-04-07T03:56:00Z", "date_only": false, "value": "2026-04-07T03:56:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/04/flowise-ai-agent-builder-under-active.html", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "1fff9be9-0f2f-4ad9-8458-64cb5056df2a", "url": "https://thehackernews.com/2026/04/flowise-ai-agent-builder-under-active.html"}, {"timestamp": "2026-04-07T06:00:05Z", "date_only": false, "value": "2026-04-07T06:00:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/8751", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "73c2711b-af8d-490d-a6ce-53254e592eff", "content": "\ud83d\uded1 Flowise has a CVSS 10.0 RCE flaw (CVE-2025-59528) now under active attack.\n\nA bug in MCP config lets attackers run JavaScript with full system access using just an API token. Over 12,000 exposed instances raise risk.\n\n\ud83d\udd17 Exploitation details \u2192 https://thehackernews.com/2026/04/flowise-ai-agent-builder-under-active.html", "url": "https://t.me/thehackernews/8751"}, {"timestamp": "2026-04-07T06:21:45.778Z", "date_only": false, "value": "2026-04-07T06:21:45.778534Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3miv57xg5fw42", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "2d381452-fde7-436e-bb4d-66aec0568998", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3miv57xg5fw42"}, {"timestamp": "2026-04-07T06:25:43Z", "date_only": false, "value": "2026-04-07T06:25:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/i80ChqxtCwMTCecuezPWlkw9fIB_SXz6drz3fdFtvVclrg", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "752706b9-8b93-4364-b54a-6872b1e35f1b"}, {"timestamp": "2026-04-07T06:39:10.868Z", "date_only": false, "value": "2026-04-07T06:39:10.868067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3miv67akktm2u", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "df0e54d7-7405-4100-a36a-b73b0d49d27b", "url": "https://bsky.app/profile/undercode.bsky.social/post/3miv67akktm2u"}, {"timestamp": "2026-04-07T12:02:16.180Z", "date_only": false, "value": "2026-04-07T12:02:16.180148Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mivqaiwcuk27", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "bbc1cd47-ef24-4b8f-a430-813aa868fbf2", "url": "https://bsky.app/profile/solomonneas.dev/post/3mivqaiwcuk27"}, {"timestamp": "2026-04-07T14:30:04Z", "date_only": false, "value": "2026-04-07T14:30:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/04/07/flowise-ai-agent-builder-under.html", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "e22b5e98-cd21-4137-954d-d9c8e9bfe860", "url": "https://threatintel.cc/2026/04/07/flowise-ai-agent-builder-under.html"}, {"timestamp": "2026-04-07T17:46:36Z", "date_only": false, "value": "2026-04-07T17:46:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/24408", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "18bc3806-a764-42ef-a669-b2c7c1e7ffc9", "content": "\u200aMax severity Flowise RCE vulnerability now exploited in attacks\n\nHackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for building custom LLM apps and agentic systems to execute arbitrary code. [...]\n\nhttps://www.bleepingcomputer.com/news/security/max-severity-flowise-rce-vulnerability-now-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/24408"}, {"timestamp": "2026-04-07T18:20:05Z", "date_only": false, "value": "2026-04-07T18:20:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8076", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "1ffb0b21-11e4-467b-958d-cf7521050467", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 VulnCheck \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432\u00a0Flowise, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0418\u0418 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0440\u044f\u0434\u043e\u043c \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0439.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59528 (CVSS: 10.0), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0423\u0437\u0435\u043b CustomMCP \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 MCP, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0443 mcpServerConfig \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u044d\u0442\u043e\u0433\u043e \u043e\u043d \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 JavaScript \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nFlowise \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0430\u0441\u043d\u044b\u043c \u043c\u043e\u0434\u0443\u043b\u044f\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a child_process (\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434) \u0438 fs (\u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430), \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Node.js.\n\n\u0418\u043d\u044b\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 JavaScript \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Flowise, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 Flowise, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u043a\u0435\u043d API, \u044d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0441\u0442\u0438 \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u043d\u043e\u0441\u0442\u044c \u041a\u0438\u043c \u0421\u0443 \u0425\u0451\u043d \u0437\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.0.6 \u043f\u0430\u043a\u0435\u0442\u0430 npm.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c VulnCheck, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430 Starlink.\n\nCVE-2025-59528 - \u044d\u0442\u043e \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Flowise, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043f\u043e\u0441\u043b\u0435 CVE-2025-8943 (CVSS: 9,8), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421, \u0438 CVE-2025-26319 (CVSS: 8,9), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432, \u0430 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u043b\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0435.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u043b\u043e\u0449\u0430\u0434\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 12 000 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, \u0447\u0442\u043e Flowise \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/8076"}, {"timestamp": "2026-04-07T20:59:51Z", "date_only": false, "value": "2026-04-07T20:59:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/248433", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "8468bd8f-ba4d-457e-98ae-069edbfa6662", "content": "Attackers exploit critical Flowise flaw CVE-2025-59528 for remote code execution\nhttps://ift.tt/3FsBOlt", "url": "https://t.me/ctinow/248433"}, {"timestamp": "2026-04-07T21:00:37.143Z", "date_only": false, "value": "2026-04-07T21:00:37.143441Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miwodht35h2z", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "e5a41c7f-5c1d-40fe-869a-01f6bd556670", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miwodht35h2z"}, {"timestamp": "2026-04-07T21:01:23.737Z", "date_only": false, "value": "2026-04-07T21:01:23.737834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3miwoe3kjqaa2", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "82b13a96-07e4-4b6e-82fc-fb18e8c7bf1e", "url": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3miwoe3kjqaa2"}, {"timestamp": "2026-04-07T21:05:05Z", "date_only": false, "value": "2026-04-07T21:05:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ODWflLMLbVvGfdid2lwnx3810JM3zyf3Y-tOOmeM1HYXGKaF", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "f4f1f1c6-14de-4865-bfb6-d3e9994f1515"}, {"timestamp": "2026-04-07T21:08:40.851Z", "date_only": false, "value": "2026-04-07T21:08:40.851269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3miworvt36p2r", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "2785afb9-29c0-463a-912c-92431dd84c75", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3miworvt36p2r"}, {"timestamp": "2026-04-08T01:16:05.037Z", "date_only": false, "value": "2026-04-08T01:16:05.037186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mix4mg5lud22", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "9d9a0623-359b-4ee8-a53a-23ee9452d4e6", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mix4mg5lud22"}, {"timestamp": "2026-04-08T02:30:30.104Z", "date_only": false, "value": "2026-04-08T02:30:30.104026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mixaoxbf5327", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "801138cd-c62c-46a6-b357-4a9b396cbc10", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mixaoxbf5327"}, {"timestamp": "2026-04-08T08:25:20.476Z", "date_only": false, "value": "2026-04-08T08:25:20.476152Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mixulyuzbk2u", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "047085d6-35f1-4932-b3be-61e7fef4353a", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mixulyuzbk2u"}, {"timestamp": "2026-04-08T09:51:19Z", "date_only": false, "value": "2026-04-08T09:51:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/flowise-rilevato-sfruttamento-in-rete-della-cve-2025-59528", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "ea991e00-a556-47ea-b020-f1f02610b58e", "url": "https://www.acn.gov.it/portale/w/flowise-rilevato-sfruttamento-in-rete-della-cve-2025-59528"}, {"timestamp": "2026-04-08T12:34:48.142Z", "date_only": false, "value": "2026-04-08T12:34:48.142528Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3miyck2jsg72j", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "a6442414-f831-478a-a6f9-7efb8aaae295", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3miyck2jsg72j"}, {"timestamp": "2026-04-08T12:50:02Z", "date_only": false, "value": "2026-04-08T12:50:02.000095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3miydfbwlg22q", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "07c4adf0-cea5-4b3e-85b6-52c149d6ffd0", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3miydfbwlg22q"}, {"timestamp": "2026-04-08T14:45:26.177Z", "date_only": false, "value": "2026-04-08T14:45:26.177720Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miyjtn7dod2b", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "c721b184-9705-4edd-80ab-82c0c21fd6df", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miyjtn7dod2b"}, {"timestamp": "2026-04-08T17:04:28.101Z", "date_only": false, "value": "2026-04-08T17:04:28.101617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3miyrma3vde2x", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "d0c8cb2c-efa1-440f-98c8-ba2f286a3621", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3miyrma3vde2x"}, {"timestamp": "2026-04-08T18:30:22.600Z", "date_only": false, "value": "2026-04-08T18:30:22.600343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3miywfuopu22q", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "4aa6f16d-60cc-4366-a099-1646724b4989", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3miywfuopu22q"}, {"timestamp": "2026-04-10T00:00:27.702Z", "date_only": false, "value": "2026-04-10T00:00:27.702623Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3zd2biqt27", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "b8c700b0-0974-4467-87a4-8580587ff3f9", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3zd2biqt27"}, {"timestamp": "2026-04-10T15:41:14Z", "date_only": false, "value": "2026-04-10T15:41:14+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-59528", "field": "timestamps.asserted_at", "uuid": "255ed130-4911-4660-b758-0f4de86b28c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-10T15:41:14Z", "date_only": false, "value": "2026-04-10T15:41:14.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-59528", "field": "evidence.0.details.added_date", "uuid": "255ed130-4911-4660-b758-0f4de86b28c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-10T15:41:14Z", "date_only": false, "value": "2026-04-10T15:41:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/19230", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "d42b7b29-1041-4d59-975b-7b1cb20cf292", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Flowise \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0418\u0418-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Flowise \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59528, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e JavaScript-\u043a\u043e\u0434\u0430. \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0438 \u043e \u043d\u0435\u043c \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 \u0441\u0435\u0442\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043e\u0442 12 000 \u0434\u043e 15 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Flowise.\n\nhttps://xakep.ru/2026/04/10/flowise-attacks/", "url": "https://t.me/xakep_ru/19230"}, {"timestamp": "2026-04-10T15:41:14Z", "date_only": false, "value": "2026-04-10T15:41:14+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-59528", "field": "timestamps.first_seen_at", "uuid": "255ed130-4911-4660-b758-0f4de86b28c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-10T15:41:14Z", "date_only": false, "value": "2026-04-10T15:41:14+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-59528", "field": "status.status_updated_at", "uuid": "255ed130-4911-4660-b758-0f4de86b28c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-10T16:24:40.069Z", "date_only": false, "value": "2026-04-10T16:24:40.069412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mj5qcwrtij2s", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "c17274c2-4db3-4353-aadc-9c17744db437", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mj5qcwrtij2s"}, {"timestamp": "2026-04-12T03:00:07Z", "date_only": false, "value": "2026-04-12T03:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/S964UnaAzc4FW7CZCUbAm7wNqkztcWapRmtGqRf9U9sXCaA", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "a9761ed1-40ca-4e0a-b823-405484ecbd88"}, {"timestamp": "2026-04-12T14:00:04Z", "date_only": false, "value": "2026-04-12T14:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/79998", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "d9deba29-c8d5-41a1-afdb-d92e8935ff13", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a secopssite\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 9  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-12 13:45:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHackTheBox (HTB) writeups and exploit kits: Silentium, VariaType, Fries, Garfield, Hercules, Kobold, Pirate, CCTV, DevArea, HiddenPath, LockedAway, Interpreter \u2014 CVE-2025-59528, CVE-2025-8110, CVE-2025-2945, CVE-2026-23520, CVE-2025-66034, CVE-2024-25082\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/79998"}, {"timestamp": "2026-04-14T15:00:07Z", "date_only": false, "value": "2026-04-14T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jqsHB6FIdeMNMlYJLaE-SWbBIQ7X4SKPFQvaPULFC7d8_bM", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "f83dddd0-f26d-4913-bb28-645b00d36050"}, {"timestamp": "2026-04-15T09:00:05Z", "date_only": false, "value": "2026-04-15T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pCo_ULdqtYm5JNcUwpHa2UncR4FyWF1uQHW0ymYDC6k2-2Y", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "fcdffa47-8964-45d0-8d85-b48cba140cc6"}, {"timestamp": "2026-04-16T18:44:50.082Z", "date_only": false, "value": "2026-04-16T18:44:50.082124Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ai-nerd.bsky.social/post/3mjn2wvwvuy2w", "record": "cve-2025-59528", "field": "creation_timestamp", "uuid": "e1727eca-fcd9-4427-bca9-be900d57b42a", "url": "https://bsky.app/profile/ai-nerd.bsky.social/post/3mjn2wvwvuy2w"}, {"timestamp": "2026-04-17T15:49:26Z", "date_only": false, "value": "2026-04-17T15:49:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mrbrownstone07/2caf598e6f4230d711c7fbf7954c24bf", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "4ec3efb9-6878-479a-a24d-a06be54331e0", "url": "https://gist.github.com/mrbrownstone07/2caf598e6f4230d711c7fbf7954c24bf"}, {"timestamp": "2026-05-04T21:19:28.502Z", "date_only": false, "value": "2026-05-04T21:19:28.502731Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3ml2ly6ysgp25", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "d44b0521-d3bc-4d0d-afe5-400eb2fc8902", "url": "https://bsky.app/profile/hakksaww.bsky.social/post/3ml2ly6ysgp25"}, {"timestamp": "2026-05-16T21:00:04Z", "date_only": false, "value": "2026-05-16T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/M2s3PphtTCD9brru-X6QMyPesFMqQlhfbVnnLWpusEfiV5g", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "ff9246ea-1ae9-4f95-bd5f-d9e3eaaec9fd"}, {"timestamp": "2026-05-17T21:00:04Z", "date_only": false, "value": "2026-05-17T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FMuj_IRa9WJxg8stLSMyK9s8hezzOoxBzO2QROQaixpXJv8", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "65cd396b-18a1-40c1-b615-2f2aae8e4cdd"}, {"timestamp": "2026-06-01T12:08:23Z", "date_only": false, "value": "2026-06-01T12:08:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/86822", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "5dce8822-efb7-4819-aea8-ac32aefef0b9", "url": "https://t.me/GithubRedTeam/86822"}, {"timestamp": "2026-06-09T03:00:05Z", "date_only": false, "value": "2026-06-09T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pEOUYF8cGjnWnRNsVcTP1hWT8v0mLe1mBAfuN7qHOw-Q7YU", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "e1687baf-1c01-453c-838c-802c3427000f"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-59528", "field": "timestamps.recorded_at", "uuid": "255ed130-4911-4660-b758-0f4de86b28c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:30.952Z", "date_only": false, "value": "2026-06-19T12:42:30.952294Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/255ed130-4911-4660-b758-0f4de86b28c8", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "923316ec-69d6-43e7-b2dd-23b1db338eb4", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/255ed130-4911-4660-b758-0f4de86b28c8"}, {"timestamp": "2026-06-19T12:45:35.684Z", "date_only": false, "value": "2026-06-19T12:45:35.684105Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6fec5af1-bdae-4e72-b62f-ad6bd4e72f1c", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "99d672d9-056a-4996-8946-3c5a8a59f496", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6fec5af1-bdae-4e72-b62f-ad6bd4e72f1c"}, {"timestamp": "2026-07-12T11:00:03.657Z", "date_only": false, "value": "2026-07-12T11:00:03.657175Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/87953", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "d6f46b1f-0ec3-4a3b-9b48-e2cb07416d1b", "url": "https://t.me/GithubRedTeam/87953"}, {"timestamp": "2026-07-13T00:00:45.376Z", "date_only": false, "value": "2026-07-13T00:00:45.376671Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/87953", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "19f8e852-fa18-4732-94fa-db6e12157895", "url": "https://t.me/GithubRedTeam/87953"}, {"timestamp": "2026-07-19T16:00:10.506Z", "date_only": false, "value": "2026-07-19T16:00:10.506441Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1705", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "35a83c76-5d93-4618-8bcb-a4333babdfb0", "url": "https://t.me/critical_bug/1705"}, {"timestamp": "2026-07-19T16:00:11.040Z", "date_only": false, "value": "2026-07-19T16:00:11.040749Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1704", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "d2ed3030-5560-4b1f-856f-c5000fba7bcb", "url": "https://t.me/critical_bug/1704"}, {"timestamp": "2026-07-20T00:00:07.015Z", "date_only": false, "value": "2026-07-20T00:00:07.015380Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1705", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "f62ed09d-a06e-4281-a0ce-d178890b790c", "url": "https://t.me/critical_bug/1705"}, {"timestamp": "2026-07-20T00:00:25.090Z", "date_only": false, "value": "2026-07-20T00:00:25.090518Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1704", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "36a745cf-0aa9-4c49-b4c1-09f6d36e64b7", "url": "https://t.me/critical_bug/1704"}, {"timestamp": "2026-07-21T00:00:41.199Z", "date_only": false, "value": "2026-07-21T00:00:41.199510Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/critical_bug/1704", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "289475f0-a8da-4647-9bcd-1bf7cd8cac6c", "url": "https://t.me/critical_bug/1704"}, {"timestamp": "2026-07-25T15:00:08.316Z", "date_only": false, "value": "2026-07-25T15:00:08.316521Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/652", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "a10cf5cf-e0b9-48e9-bf65-2808ee499796", "url": "https://t.me/ZerodayAlert/652"}, {"timestamp": "2026-07-26T00:00:36.214Z", "date_only": false, "value": "2026-07-26T00:00:36.214909Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/652", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "f8c53e69-2c42-4c94-a87a-499d6b5be7d4", "url": "https://t.me/ZerodayAlert/652"}, {"timestamp": "2026-07-26T02:00:06.284Z", "date_only": false, "value": "2026-07-26T02:00:06.284289Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/1106", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "9830f76b-e6f4-467e-8fe4-30327b34be1e", "url": "https://t.me/cyberwarehouse/1106"}, {"timestamp": "2026-07-27T00:00:34.482Z", "date_only": false, "value": "2026-07-27T00:00:34.482158Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/1106", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "9cf33a6b-8bf7-4bee-9579-a3b7480e58ea", "url": "https://t.me/cyberwarehouse/1106"}, {"timestamp": "2026-08-12T08:00:05.878Z", "date_only": false, "value": "2026-08-12T08:00:05.878008Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "af03c5b2-5c39-4a62-aeeb-ddb39453d531"}, {"timestamp": "2026-08-12T08:00:07.231Z", "date_only": false, "value": "2026-08-12T08:00:07.231946Z", "kind": "sighting", "label": "Seen", "source": "Telegram/vfcBtHfYWKeSWcSBr8gn075FsnSSHY37K2BPjCM8QUj3z5c", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "cc6a34b1-c65b-4ee0-9235-597b6c2cc88a"}, {"timestamp": "2026-08-13T00:00:10.270Z", "date_only": false, "value": "2026-08-13T00:00:10.270494Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vfcBtHfYWKeSWcSBr8gn075FsnSSHY37K2BPjCM8QUj3z5c", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "fab6e94f-bf01-4fe0-b24b-81a7a7137f91"}, {"timestamp": "2026-08-13T00:00:11.568Z", "date_only": false, "value": "2026-08-13T00:00:11.568502Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "f037eb1e-593c-455c-8f06-d28128629d42"}, {"timestamp": "2026-08-18T19:00:06.314Z", "date_only": false, "value": "2026-08-18T19:00:06.314336Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/41735", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "26574459-eec6-49f1-b261-a93289f7bc66", "url": "https://t.me/VulnerabilityNews/41735"}, {"timestamp": "2026-08-19T00:00:07.681Z", "date_only": false, "value": "2026-08-19T00:00:07.681126Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/41735", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "3caabd7f-76d5-4955-9061-e214b9153163", "url": "https://t.me/VulnerabilityNews/41735"}, {"timestamp": "2026-08-28T16:00:06.832Z", "date_only": false, "value": "2026-08-28T16:00:06.832347Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/100101", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "31975171-a3dd-44c2-9ff1-ecad2bc70a13", "url": "https://t.me/GithubRedTeam/100101"}, {"timestamp": "2026-08-29T00:00:08.526Z", "date_only": false, "value": "2026-08-29T00:00:08.526066Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100101", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "b154c40d-d1f6-45ae-9f25-eb3352ef96b9", "url": "https://t.me/GithubRedTeam/100101"}, {"timestamp": "2026-08-29T20:00:18.105Z", "date_only": false, "value": "2026-08-29T20:00:18.105244Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1224", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "441ba44c-7312-42a9-9359-d97c980d53ad", "url": "https://t.me/CyberDispatch/1224"}, {"timestamp": "2026-08-29T23:00:04.308Z", "date_only": false, "value": "2026-08-29T23:00:04.308023Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "6c814b76-a247-455a-8e57-9d2314f3b003"}, {"timestamp": "2026-08-29T23:00:12.893Z", "date_only": false, "value": "2026-08-29T23:00:12.893931Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak_8ZYRyADH7od6Bkg", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "2879bac4-5c63-42b2-9c2f-8adf4f73e87f"}, {"timestamp": "2026-08-30T00:00:09.748Z", "date_only": false, "value": "2026-08-30T00:00:09.748204Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "4f2e32a3-b3d0-4f4f-8bd9-928110116c20"}, {"timestamp": "2026-08-31T00:00:26.405Z", "date_only": false, "value": "2026-08-31T00:00:26.405529Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/1224", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "0c214552-13eb-4a5a-bd62-5b51f0c9e9af", "url": "https://t.me/CyberDispatch/1224"}, {"timestamp": "2026-08-31T00:00:45.538Z", "date_only": false, "value": "2026-08-31T00:00:45.538668Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak_8ZYRyADH7od6Bkg", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "68df04fb-2efb-4aef-8b7e-45eed5a5e00c"}, {"timestamp": "2026-09-08T06:49:46.901Z", "date_only": false, "value": "2026-09-08T06:49:46.901877Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/flowise_js_rce.rb", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "11e40931-e851-4fa1-8525-798a011ede26", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/flowise_js_rce.rb"}, {"timestamp": "2026-09-19T22:00:04.712Z", "date_only": false, "value": "2026-09-19T22:00:04.712940Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102799", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "87bcef68-e3d4-47db-a2c4-4603a6bbee5a", "url": "https://t.me/GithubRedTeam/102799"}, {"timestamp": "2026-09-20T00:00:06.740Z", "date_only": false, "value": "2026-09-20T00:00:06.740716Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Y8oaEwOM76G3WMRt3xRBjYc4NY3q7Pzf3TFytYOOr2BNMYE", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "25c0deb4-5ae7-4f3a-93b9-212608b115c4"}, {"timestamp": "2026-09-25T09:18:03Z", "date_only": false, "value": "2026-09-25T09:18:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3VMPoGezX0__VYfLOkEwkBbWcqI9BlMWeYwG7xmpOTdUw3M", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "fba8c6ce-d6a7-46f2-8299-64e1e77eb44d"}, {"timestamp": "2026-09-25T09:18:03Z", "date_only": false, "value": "2026-09-25T09:18:03.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3VMPoGezX0__VYfLOkEwkBbWcqI9BlMWeYwG7xmpOTdUw3M", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "c56e4486-5246-46cd-abd6-3ed6833dc6c4"}, {"timestamp": "2026-10-02T19:16:05Z", "date_only": false, "value": "2026-10-02T19:16:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/OurTeamSpace/5a5c7de87558041e64ed8bc43fb2c20f", "record": "CVE-2025-59528", "field": "creation_timestamp", "uuid": "957e4287-2b66-4d01-a97a-9c9478f0bd26", "url": "https://gist.github.com/OurTeamSpace/5a5c7de87558041e64ed8bc43fb2c20f"}, {"timestamp": "2026-10-18T21:10:00.120Z", "date_only": false, "value": "2026-10-18T21:10:00.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59528", "record": "FKIE_CVE-2025-59528", "field": "lastModified"}]}