{"metadata": {"vulnerability": "CVE-2025-5954", "count": 19, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2025-06-09T19:15:04.212Z", "date_only": false, "value": "2025-06-09T19:15:04.212Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-5954", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-07-31T13:51:29Z", "date_only": false, "value": "2025-07-31T13:51:29.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-5954", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-08-01T02:24:17.625Z", "date_only": false, "value": "2025-08-01T02:24:17.625Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-5954", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-08-01T03:01:16.965Z", "date_only": false, "value": "2025-08-01T03:01:16.965017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvcnwe7kj22d", "record": "cve-2025-5954", "field": "creation_timestamp", "uuid": "a9efc1eb-60d9-4aeb-aaaf-57fac41b12c4", "url": "https://bsky.app/profile/offseq.bsky.social/post/3lvcnwe7kj22d"}, {"timestamp": "2025-08-01T03:15:24Z", "date_only": false, "value": "2025-08-01T03:15:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8QCM-792H-PRF3", "record": "GHSA-8QCM-792H-PRF3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-08-01T03:15:24.433Z", "date_only": false, "value": "2025-08-01T03:15:24.433", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5954", "record": "FKIE_CVE-2025-5954", "field": "published"}, {"timestamp": "2025-08-01T03:31:15Z", "date_only": false, "value": "2025-08-01T03:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8QCM-792H-PRF3", "record": "GHSA-8QCM-792H-PRF3", "field": "published"}, {"timestamp": "2025-08-01T03:31:15Z", "date_only": false, "value": "2025-08-01T03:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8QCM-792H-PRF3", "record": "GHSA-8QCM-792H-PRF3", "field": "modified"}, {"timestamp": "2025-08-01T19:07:55.251Z", "date_only": false, "value": "2025-08-01T19:07:55.251551Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-5954", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-01T19:07:55.251Z", "date_only": false, "value": "2025-08-01T19:07:55.251551Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5954", "record": "FKIE_CVE-2025-5954", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-08-01T19:08:15.236Z", "date_only": false, "value": "2025-08-01T19:08:15.236Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-5954", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": true, "value": "2025-08-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-18284", "record": "CNVD-2025-18284", "field": "submitTime"}, {"timestamp": "2025-08-10T17:27:27Z", "date_only": false, "value": "2025-08-10T17:27:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1127", "record": "CVE-2025-5954", "field": "creation_timestamp", "uuid": "6823561e-6c4f-4dc9-9267-f59020109561", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "url": "https://t.me/bhhub/1127"}, {"timestamp": "2025-08-10T17:27:27Z", "date_only": false, "value": "2025-08-10T17:27:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/866", "record": "CVE-2025-5954", "field": "creation_timestamp", "uuid": "3a925c5a-775f-4e0e-bd52-2ad953880e62", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "url": "https://t.me/bhhub/866"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": true, "value": "2025-08-12", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-18284", "record": "CNVD-2025-18284", "field": "openTime"}, {"timestamp": "2026-04-08T16:52:42.864Z", "date_only": false, "value": "2026-04-08T16:52:42.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-5954", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:52:42.864Z", "date_only": false, "value": "2026-04-08T16:52:42.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-5954", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-25T02:02:38.608Z", "date_only": false, "value": "2026-05-25T02:02:38.608195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmnf4xb5gh2k", "record": "CVE-2025-5954", "field": "creation_timestamp", "uuid": "7b4ee571-9766-471c-b46e-6df7f42ecb97", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmnf4xb5gh2k"}, {"timestamp": "2026-06-17T09:49:05.757Z", "date_only": false, "value": "2026-06-17T09:49:05.757", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5954", "record": "FKIE_CVE-2025-5954", "field": "lastModified"}]}