{"metadata": {"vulnerability": "CVE-2025-9074", "count": 161, "kinds": {"milestone": 5, "sighting": 137, "kev": 5, "other": 14}}, "data": [{"timestamp": "2025-08-15T15:08:07.774Z", "date_only": false, "value": "2025-08-15T15:08:07.774Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-9074", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-20T13:28:35.553Z", "date_only": false, "value": "2025-08-20T13:28:35.553Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-9074", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-08-20T13:31:13.886Z", "date_only": false, "value": "2025-08-20T13:31:13.886Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Docker", "record": "CVE-2025-9074", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-20T14:02:30.957Z", "date_only": false, "value": "2025-08-20T14:02:30.957510Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/115061460174957882", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "147d92d5-dca3-4fb7-9933-703463de0ee1", "url": "https://infosec.exchange/users/cR0w/statuses/115061460174957882"}, {"timestamp": "2025-08-20T14:15:49Z", "date_only": false, "value": "2025-08-20T14:15:49Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4XCQ-3FJF-XFQW", "record": "GHSA-4XCQ-3FJF-XFQW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-08-20T14:15:49.047Z", "date_only": false, "value": "2025-08-20T14:15:49.047", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-9074", "record": "FKIE_CVE-2025-9074", "field": "published"}, {"timestamp": "2025-08-20T15:31:42Z", "date_only": false, "value": "2025-08-20T15:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4XCQ-3FJF-XFQW", "record": "GHSA-4XCQ-3FJF-XFQW", "field": "published"}, {"timestamp": "2025-08-20T22:00:00Z", "date_only": false, "value": "2025-08-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1873", "record": "WID-SEC-W-2025-1873", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-20T22:00:00Z", "date_only": false, "value": "2025-08-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1873", "record": "WID-SEC-W-2025-1873", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-20T22:00:00Z", "date_only": false, "value": "2025-08-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1873", "record": "WID-SEC-W-2025-1873", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-08-20T22:10:54.912Z", "date_only": false, "value": "2025-08-20T22:10:54.912470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/poc-popoyama.misskey.systems.ap.brid.gy/post/3lwugvmczf4u2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "2cef8db2-d10d-401e-8046-609a34a6179c", "url": "https://bsky.app/profile/poc-popoyama.misskey.systems.ap.brid.gy/post/3lwugvmczf4u2"}, {"timestamp": "2025-08-21T09:06:33.847Z", "date_only": false, "value": "2025-08-21T09:06:33.847033Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lwvlnxbaqh2o", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a9007ae6-eb9e-4971-af55-7e37c4f9664a", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3lwvlnxbaqh2o"}, {"timestamp": "2025-08-21T09:08:52.746Z", "date_only": false, "value": "2025-08-21T09:08:52.746403Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/securestep9/statuses/115065958692194906", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a9364f55-3437-4276-ac38-af9f4d7b269b", "url": "https://infosec.exchange/users/securestep9/statuses/115065958692194906"}, {"timestamp": "2025-08-21T11:15:39.690Z", "date_only": false, "value": "2025-08-21T11:15:39.690391Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwvsumrmdti2", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "a5465a7f-a102-418a-8586-e01f6df057e5", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwvsumrmdti2"}, {"timestamp": "2025-08-21T11:31:09.549Z", "date_only": false, "value": "2025-08-21T11:31:09.549066Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lwvtqjlhb42p", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "529c8707-9cc0-4e59-bd78-6b7b0ddf35f2", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lwvtqjlhb42p"}, {"timestamp": "2025-08-21T12:04:06.457Z", "date_only": false, "value": "2025-08-21T12:04:06.457851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ubuntourist.mastodon.social.ap.brid.gy/post/3lwvvlftwmpo2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "57bea83b-620f-4490-805f-d576c860eaed", "url": "https://bsky.app/profile/ubuntourist.mastodon.social.ap.brid.gy/post/3lwvvlftwmpo2"}, {"timestamp": "2025-08-21T12:05:48.131Z", "date_only": false, "value": "2025-08-21T12:05:48.131996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwvvo67itbo2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "229058e7-e20b-4dc1-9603-6b7ebfaafc2b", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwvvo67itbo2"}, {"timestamp": "2025-08-21T13:04:57.679Z", "date_only": false, "value": "2025-08-21T13:04:57.679025Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lwvyyabdso2d", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "f1c34173-d65a-4178-9f85-b784c792f362", "url": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lwvyyabdso2d"}, {"timestamp": "2025-08-21T14:30:16.917Z", "date_only": false, "value": "2025-08-21T14:30:16.917947Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lww5qitfdeq2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "7ee15ae5-47f7-4ce8-9596-ddd0ec97cc4d", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lww5qitfdeq2"}, {"timestamp": "2025-08-21T15:59:55.274Z", "date_only": false, "value": "2025-08-21T15:59:55.274825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwwchyq3az32", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "3759e955-8ec9-48f9-9057-e4b922fdc18c", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwwchyq3az32"}, {"timestamp": "2025-08-21T17:43:15.172Z", "date_only": false, "value": "2025-08-21T17:43:15.172710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lwwiju7apd2w", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "30c54925-56df-40ea-8caf-59a830910336", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lwwiju7apd2w"}, {"timestamp": "2025-08-21T18:54:33.711Z", "date_only": false, "value": "2025-08-21T18:54:33.711575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lwwmjezpoi2y", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "6691999a-c731-45c4-bc75-88b85fd7cc79", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3lwwmjezpoi2y"}, {"timestamp": "2025-08-21T21:04:26.277Z", "date_only": false, "value": "2025-08-21T21:04:26.277250Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/security.land/post/3lwwtrkcxn22r", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "6d814ece-fe5d-4f63-a220-6e4550c779c5", "url": "https://bsky.app/profile/security.land/post/3lwwtrkcxn22r"}, {"timestamp": "2025-08-21T23:27:22.369Z", "date_only": false, "value": "2025-08-21T23:27:22.369586Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwx3ra5vos2z", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "173d8f49-993b-4caa-9066-2322dfcd5beb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwx3ra5vos2z"}, {"timestamp": "2025-08-22T06:39:31Z", "date_only": false, "value": "2025-08-22T06:39:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/10123", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "7607768c-1d2f-429c-ad8b-2edc620b578c", "content": "When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074)\n\nhttps://blog.qwertysecurity.com/Articles/blog3.html", "url": "https://t.me/thebugbountyhunter/10123"}, {"timestamp": "2025-08-22T08:20:08.103Z", "date_only": false, "value": "2025-08-22T08:20:08.103411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lwxzju25lo2z", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "67100611-1f52-4857-99f4-e282e1527b11", "url": "https://bsky.app/profile/cyberhub.blog/post/3lwxzju25lo2z"}, {"timestamp": "2025-08-22T09:09:32.290Z", "date_only": false, "value": "2025-08-22T09:09:32.290929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lwy4c7d3oa2i", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "f836d411-c2a8-4464-9600-e843277804ec", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lwy4c7d3oa2i"}, {"timestamp": "2025-08-22T09:30:14Z", "date_only": false, "value": "2025-08-22T09:30:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/583", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "56687a29-8c82-46bb-8c18-9ec094c2a7c8", "content": "Top Security News for Today\n\nWe Put Agentic AI Browsers to the Test - They Clicked, They Paid, They Failed  \nhttps://www.reddit.com/r/netsec/comments/1mw4dn9/we_put_agentic_ai_browsers_to_the_test_they/\n\nJim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture  \nhttps://www.schneier.com/blog/archives/2025/08/jim-sanborn-is-auctioning-off-the-solution-to-part-four-of-the-kryptos-sculpture.html\n\nScattered Spider affiliate given 10 year sentence, ordered to pay $13 million in restitution  \nhttps://therecord.media/scattered-spider-affiliate-sentenced-10-years\n\nAzure's Weakest Link - Full Cross-Tenant Compromise  \nhttps://www.reddit.com/r/netsec/comments/1mwbimu/azures_weakest_link_full_crosstenant_compromise/\n\nAI can be used to create working exploits for published CVEs in a few minutes and for a few dollars  \nhttps://www.reddit.com/r/netsec/comments/1mwfks2/ai_can_be_used_to_create_working_exploits_for/\n\nWhen a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074)  \nhttps://www.reddit.com/r/netsec/comments/1mwhisp/when_a_ssrf_is_enough_full_docker_escape_on/\n\nThink before you Click(Fix): Analyzing the ClickFix social engineering technique  \nhttps://www.microsoft.com/en-us/security/blog/2025/08/21/think-before-you-clickfix-analyzing-the-clickfix-social-engineering-technique/\n\nQuantum-safe security: Progress towards next-generation cryptography  \nhttps://www.microsoft.com/en-us/security/blog/2025/08/20/quantum-safe-security-progress-towards-next-generation-cryptography/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/583"}, {"timestamp": "2025-08-22T09:39:32.521Z", "date_only": false, "value": "2025-08-22T09:39:32.521007Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwy5xksi2ej2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "8640a96d-d0c6-4b6a-99f0-b76122416ed8", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwy5xksi2ej2"}, {"timestamp": "2025-08-22T13:10:39.526Z", "date_only": false, "value": "2025-08-22T13:10:39.526693Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwyjkxy5v5t2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "f6d57ddd-1b54-4ad4-bf40-76cb4d9a3634", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwyjkxy5v5t2"}, {"timestamp": "2025-08-22T15:42:55.755Z", "date_only": false, "value": "2025-08-22T15:42:55.755984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lwysbiiw7k2l", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "81a622fb-12de-463f-89b9-8b35dfbf8182", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lwysbiiw7k2l"}, {"timestamp": "2025-08-22T21:05:08.706Z", "date_only": false, "value": "2025-08-22T21:05:08.706473Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwzebqjsvkh2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "5132cd83-c1cc-4212-b3ad-fe6495041d70", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwzebqjsvkh2"}, {"timestamp": "2025-08-22T23:39:12.290Z", "date_only": false, "value": "2025-08-22T23:39:12.290124Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/4sterisk.mi.tomadoi.com.ap.brid.gy/post/3lwzmv4ywcwu2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "342f8d1f-6ee2-4c30-bc27-12fd40b8e067", "url": "https://bsky.app/profile/4sterisk.mi.tomadoi.com.ap.brid.gy/post/3lwzmv4ywcwu2"}, {"timestamp": "2025-08-24T20:18:48.301Z", "date_only": false, "value": "2025-08-24T20:18:48.301641Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/Tinolle/statuses/115085589005313833", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a6b451d9-2377-423b-920a-1e4efdedd2ca", "url": "https://infosec.exchange/users/Tinolle/statuses/115085589005313833"}, {"timestamp": "2025-08-24T20:35:22.780Z", "date_only": false, "value": "2025-08-24T20:35:22.780559Z", "kind": "sighting", "label": "Seen", "source": "https://blog.qwertysecurity.com/Articles/blog3.html", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "e0ea536d-61a3-4d14-bac2-ecbd1d0ac82c", "url": "https://blog.qwertysecurity.com/Articles/blog3.html"}, {"timestamp": "2025-08-24T22:00:00Z", "date_only": false, "value": "2025-08-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1873", "record": "WID-SEC-W-2025-1873", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-08-24T22:00:00Z", "date_only": false, "value": "2025-08-24T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1873", "record": "WID-SEC-W-2025-1873", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-25T08:05:24.247Z", "date_only": false, "value": "2025-08-25T08:05:24.247+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1873", "record": "WID-SEC-W-2025-1873", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-25T12:06:04.248Z", "date_only": false, "value": "2025-08-25T12:06:04.248531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lx7xjk7wjnt2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "1cf57034-5e5b-46a3-9b6b-04a24bd3fd82", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lx7xjk7wjnt2"}, {"timestamp": "2025-08-25T13:36:23.932Z", "date_only": false, "value": "2025-08-25T13:36:23.932468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lxa4kwle77y2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "82a41b20-9f71-4b34-9d2b-1b876d93df55", "url": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lxa4kwle77y2"}, {"timestamp": "2025-08-25T15:23:12.811Z", "date_only": false, "value": "2025-08-25T15:23:12.811643Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lxacl5biu72d", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "069151f7-f7f9-4b99-9bfb-758ffc3aaddd", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lxacl5biu72d"}, {"timestamp": "2025-08-25T15:51:07.236Z", "date_only": false, "value": "2025-08-25T15:51:07.236403Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/defendopsdiaries.bsky.social/post/3lxae4yvbka2g", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "05dc0494-0713-40ef-8e7f-bfe217808a42", "url": "https://bsky.app/profile/defendopsdiaries.bsky.social/post/3lxae4yvbka2g"}, {"timestamp": "2025-08-25T15:51:07.315Z", "date_only": false, "value": "2025-08-25T15:51:07.315221Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115090198807275059", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "ce6c2e58-43ff-4cf5-a7b1-1824ebddf233", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115090198807275059"}, {"timestamp": "2025-08-25T15:53:00Z", "date_only": false, "value": "2025-08-25T15:53:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/08/docker-fixes-cve-2025-9074-critical.html", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "003bc00b-5830-4c95-b3d3-56e34edd87fd", "url": "https://thehackernews.com/2025/08/docker-fixes-cve-2025-9074-critical.html"}, {"timestamp": "2025-08-25T16:15:17.322Z", "date_only": false, "value": "2025-08-25T16:15:17.322207Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lxafi5o7ac2y", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "54fb0daf-45e0-4a85-bb68-8502fb648d1e", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lxafi5o7ac2y"}, {"timestamp": "2025-08-25T16:15:17.839Z", "date_only": false, "value": "2025-08-25T16:15:17.839834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lxafia7rlk2y", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "6106ffda-ce80-403b-91f4-3e67fc3e9739", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lxafia7rlk2y"}, {"timestamp": "2025-08-25T17:56:10Z", "date_only": false, "value": "2025-08-25T17:56:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7399", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "5bdb86bd-ab4d-45f5-9b2b-3ba722afaa0f", "content": "\ud83d\udea8 Critical flaw in Docker Desktop (CVE-2025-9074, 9.3/10) lets a malicious container escape and hijack the host.\n\nOn Windows, attackers can mount the full C:\\ drive, read sensitive files, even escalate to admin. macOS safer\u2014but not safe.\n\nPatch now (v4.44.3). Details \u2192 https://thehackernews.com/2025/08/docker-fixes-cve-2025-9074-critical.html", "url": "https://t.me/thehackernews/7399"}, {"timestamp": "2025-08-25T18:53:37Z", "date_only": false, "value": "2025-08-25T18:53:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_News/7765", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "39ce9696-d72b-49b4-8bc1-c5c2262716af", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3\nLink: https://thehackernews.com/2025/08/docker-fixes-cve-2025-9074-critical.html", "url": "https://t.me/DarkWebInformer_News/7765"}, {"timestamp": "2025-08-25T18:55:46.618Z", "date_only": false, "value": "2025-08-25T18:55:46.618851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lxaohalfnc2w", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "4a3df06e-0110-4fe7-a04e-ba3a101fad27", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lxaohalfnc2w"}, {"timestamp": "2025-08-25T19:00:08.276Z", "date_only": false, "value": "2025-08-25T19:00:08.276132Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lxaooxd3cm2t", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "3f6312ac-92b1-4f19-8203-3db3d43bdf24", "url": "https://bsky.app/profile/techit.bsky.social/post/3lxaooxd3cm2t"}, {"timestamp": "2025-08-25T19:04:02.331Z", "date_only": false, "value": "2025-08-25T19:04:02.331841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxaopws7vcz2", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "a748d231-12a1-480e-b333-14cc7e604192", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxaopws7vcz2"}, {"timestamp": "2025-08-25T19:05:13Z", "date_only": false, "value": "2025-08-25T19:05:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/237010", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "2cd1a849-4d34-476e-9000-cd568baffc1c", "content": "Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3\nhttps://ift.tt/QkwXtDJ", "url": "https://t.me/ctinow/237010"}, {"timestamp": "2025-08-25T19:23:11.435Z", "date_only": false, "value": "2025-08-25T19:23:11.435814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lxapya2st22w", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "13dfc42a-32b5-4a30-a15f-e6233ea5589f", "url": "https://bsky.app/profile/nimblenerd.social/post/3lxapya2st22w"}, {"timestamp": "2025-08-25T19:23:59.242Z", "date_only": false, "value": "2025-08-25T19:23:59.242106Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lxapznwfoh2u", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "12ad04ea-7907-4a2b-b649-d8df1a882713", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lxapznwfoh2u"}, {"timestamp": "2025-08-25T19:50:27.730Z", "date_only": false, "value": "2025-08-25T19:50:27.730540Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxarikkziyj2", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "31a44527-d1b5-4e2b-8661-f4f5bc52a660", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxarikkziyj2"}, {"timestamp": "2025-08-25T19:50:30.675Z", "date_only": false, "value": "2025-08-25T19:50:30.675613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxariqvx44g2", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "39af36ac-3e1e-4597-9411-4e0ca0e25b43", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxariqvx44g2"}, {"timestamp": "2025-08-25T19:51:05Z", "date_only": false, "value": "2025-08-25T19:51:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YSB1GPWkHHNBWgnfN08Dg_HrobPC9YpDYWSZdS67UM4ImA", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "16143e03-553e-4f60-a69a-f072d6398cd9"}, {"timestamp": "2025-08-25T19:53:07.708Z", "date_only": false, "value": "2025-08-25T19:53:07.708521Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxarnhnsae62", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "0ebd7c28-8ecb-457d-ab4b-acf318f4454b", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxarnhnsae62"}, {"timestamp": "2025-08-25T20:03:43Z", "date_only": false, "value": "2025-08-25T20:03:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/15682", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "5de3340b-1c54-4dbe-a90e-ff2b79196367", "content": "Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3 \u2013 thehackernews.com\n\nTue, 26 Aug 2025 01:53:00", "url": "https://t.me/MalaysiaHacktivistz/15682"}, {"timestamp": "2025-08-25T20:03:43Z", "date_only": false, "value": "2025-08-25T20:03:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/34089", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "c457c219-7884-4a13-aa59-2c2ad66f8cec", "content": "Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3 \u2013 thehackernews.com\n\nTue, 26 Aug 2025 01:53:00", "url": "https://t.me/TengkorakCyberCrewzz/34089"}, {"timestamp": "2025-08-25T20:03:43Z", "date_only": false, "value": "2025-08-25T20:03:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/4799", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "b64a1e93-6b94-4aed-8107-e45010800063", "content": "Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3 \u2013 thehackernews.com\n\nTue, 26 Aug 2025 01:53:00", "url": "https://t.me/TengkorakCyberCrewzz/4799"}, {"timestamp": "2025-08-25T20:50:05Z", "date_only": false, "value": "2025-08-25T20:50:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/7363", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "e1edd0ac-a3a4-461a-9c3c-5814e6dbe025", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Docker Desktop \u0434\u043b\u044f Windows \u0438 macOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0445\u043e\u0441\u0442, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 Enhanced Container Isolation (ECI).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 SSRF \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f  \u043a\u0430\u043a CVE-2025-9074. \u041e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,3.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044e Docker, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 Docker Desktop, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a Docker Engine \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u043e\u043a\u0435\u0442\u0430 Docker.\n\n\u042d\u0442\u043e, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442  \u043d\u0435\u043f\u0440\u0430\u0432\u043e\u043c\u0435\u0440\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0432 \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u0438\u0447\u0435\u043c \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u0430\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 (ECI) \u043d\u0435 \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440 \u0424\u0435\u043b\u0438\u043a\u0441 \u0411\u0443\u043b\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e API Docker Engine \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 http://192.168.65.7:2375/ \u0438\u0437 \u043b\u044e\u0431\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\n\u0424\u0438\u043b\u0438\u043f\u043f \u0414\u044e\u0433\u0440\u0435, \u0438\u043d\u0436\u0435\u043d\u0435\u0440 DevSecOps \u0432 Pvotal Technologies, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Docker Desktop Windows \u0438 macOS, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u044f \u0434\u043b\u044f Linux \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u043d\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430 \u0432 macOS \u0432 \u0432\u0438\u0434\u0443 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043c\u043e\u0433 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0432 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 Windows, \u0447\u0435\u0433\u043e \u0432 macOS \u0431\u0435\u0437 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0432 Windows \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u044b Docker Engine \u0447\u0435\u0440\u0435\u0437 WSL2 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u0441\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e DLL.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 MacOS \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Docker Desktop \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0441\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043c\u043e\u0436\u043d\u043e \u043b\u0438\u0448\u044c \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Docker \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0445\u043e\u0441\u0442 \u043d\u0430\u043c\u043d\u043e\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0435\u0435, \u0447\u0435\u043c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Windows.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043d\u0430 macOS, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u043d\u0435\u043f\u0440\u0430\u0432\u043e\u043c\u0435\u0440\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0414\u044e\u0433\u0440\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u044d\u0442\u043e \u0447\u0435\u0442\u043a\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u0438\u0437 \u0442\u0440\u0435\u0445 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430 Python.\n\n\u0412 Docker \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Docker Desktop, 4.44.3, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.", "url": "https://t.me/true_secator/7363"}, {"timestamp": "2025-08-25T22:00:28.536Z", "date_only": false, "value": "2025-08-25T22:00:28.536672Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lxayrhuy5725", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "9c275295-abb4-4d04-b7e5-b932d4391b9b", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lxayrhuy5725"}, {"timestamp": "2025-08-25T22:44:17Z", "date_only": false, "value": "2025-08-25T22:44:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/26736", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "ff6a4476-7d4d-49b4-80ff-92b3e6404da6", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 Docker Desktop\n\n\u0412\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0432\u0441\u0435\u0445, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Docker Desktop \u043d\u0430 Windows \u0438 macOS. \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-9074, CVSS 9.3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0443 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0441\u0442\u043e\u043c \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0435. API Docker Engine \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437\u043d\u0443\u0442\u0440\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e TCP-\u0441\u043e\u043a\u0435\u0442\u0443 \u043d\u0430 192.168.65.7:2375. \u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u0440\u043e\u0433\u0443 \u043a \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 (SSRF). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u0440\u0443 HTTP POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0445\u043e\u0441\u0442.\n\n\u0412\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a:\n\ud83d\udfe2 \u041e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 JSON-\u043f\u0435\u0439\u043b\u043e\u0430\u0434\u043e\u043c \u043d\u0430 /containers/create. \u0412 \u043d\u0435\u043c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0441\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0438\u0441\u043a C: \u0445\u043e\u0441\u0442\u0430 \u0432 \u043f\u0430\u043f\u043a\u0443 /mnt/host \u0432\u043d\u0443\u0442\u0440\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\ud83d\udfe2  \u041e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 /containers/{id}/start, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0441\u0432\u0435\u0436\u0435\u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440.\n\ud83d\udfe2  \u0412\u0441\u0451. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0445\u043e\u0441\u0442\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 DLL \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e \u044d\u0442\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u0433\u0434\u0435 Docker Engine \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 WSL2 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041d\u0430 macOS \u0447\u0443\u0442\u044c \u043b\u0443\u0447\u0448\u0435, \u0442\u0443\u0442 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043b\u043e\u044e \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438. \u041d\u043e \u0434\u0430\u0436\u0435 \u0442\u0430\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0430\u043c\u0438\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c Docker \u0438 \u0432\u0441\u0435\u043c\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\u0412\u0435\u0440\u0441\u0438\u044e \u0434\u043b\u044f Linux \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442, \u0442\u0430\u043a \u043a\u0430\u043a \u0442\u0430\u043c \u0434\u043b\u044f API \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f named pipe \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 \u043d\u0435 TCP-\u0441\u043e\u043a\u0435\u0442. \u041d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c Linux \ud83e\udd23\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Docker Desktop \u0432\u0435\u0440\u0441\u0438\u0438 4.44.3.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/26736"}, {"timestamp": "2025-08-25T23:14:27.581Z", "date_only": false, "value": "2025-08-25T23:14:27.581208Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lxb4vs6re52v", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "cafcd8e4-9b55-4b4a-96e7-bc93394b49c1", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lxb4vs6re52v"}, {"timestamp": "2025-08-25T23:17:18.976Z", "date_only": false, "value": "2025-08-25T23:17:18.976033Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxb4zge36je2", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "c49c93c1-70e3-4d37-9ce1-d0bd26e050b0", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lxb4zge36je2"}, {"timestamp": "2025-08-25T23:57:12.003Z", "date_only": false, "value": "2025-08-25T23:57:12.003242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lxb7c7gla42l", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "d0089b27-381e-423a-91a6-468bcb8c54d1", "url": "https://bsky.app/profile/nimblenerd.social/post/3lxb7c7gla42l"}, {"timestamp": "2025-08-26T00:50:08.995Z", "date_only": false, "value": "2025-08-26T00:50:08.995779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxbcafkapx62", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "eb801653-2320-48e1-bbfa-25fe80dd2b7d", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxbcafkapx62"}, {"timestamp": "2025-08-26T01:20:08.200Z", "date_only": false, "value": "2025-08-26T01:20:08.200310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lxbdwjsiut2h", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "3f897969-a79c-4343-9601-0a3620bb80f8", "url": "https://bsky.app/profile/cyberhub.blog/post/3lxbdwjsiut2h"}, {"timestamp": "2025-08-26T02:16:19.780Z", "date_only": false, "value": "2025-08-26T02:16:19.780391Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxbh2ywfk223", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "5153a0b3-4ece-455d-9bb6-8f04b1302ed2", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxbh2ywfk223"}, {"timestamp": "2025-08-26T03:28:24.624Z", "date_only": false, "value": "2025-08-26T03:28:24.624263Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/Sempf/statuses/115092940652400436", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "dd7806de-85ff-4b97-8259-0b509f958d01", "url": "https://infosec.exchange/users/Sempf/statuses/115092940652400436"}, {"timestamp": "2025-08-26T03:30:49.801Z", "date_only": false, "value": "2025-08-26T03:30:49.801788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Sempf.infosec.exchange.ap.brid.gy/post/3lxbl45cfbki2", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "4ed18ba6-c78b-46be-b7a9-ebe6d53d8971", "url": "https://bsky.app/profile/Sempf.infosec.exchange.ap.brid.gy/post/3lxbl45cfbki2"}, {"timestamp": "2025-08-26T03:55:22.374Z", "date_only": false, "value": "2025-08-26T03:55:22.374847Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-9074", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-26T03:55:22.374Z", "date_only": false, "value": "2025-08-26T03:55:22.374847Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-9074", "record": "FKIE_CVE-2025-9074", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-08-26T04:27:43Z", "date_only": false, "value": "2025-08-26T04:27:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerNewscyber/2367", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "928160fc-c2cb-4819-ab11-b06a92939b4a", "content": "\ud83d\udea8 \u0631\u0641\u0639 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 Docker Desktop\n\n\u26aa\ufe0f\u0634\u0631\u06a9\u062a Docker \u06cc\u06a9 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-9074 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 9.3 \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0648 macOS \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Docker Desktop \u0631\u0641\u0639 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0627\u062f \u0627\u0632 \u0645\u062d\u06cc\u0637 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 \u062e\u0627\u0631\u062c \u0634\u062f\u0647 \u0648 \u0628\u0647 Docker Engine API \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u06cc\u0627\u0628\u0646\u062f.\n\n\u26aa\ufe0f\u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u062e\u0637\u0631 \u062c\u062f\u06cc\u200c\u062a\u0631 \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644 \u0645\u0647\u0627\u062c\u0645 \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0645\u0646\u062c\u0631 \u0634\u0648\u062f\u060c \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0631 macOS \u0633\u0637\u062d \u062a\u0647\u062f\u06cc\u062f \u0645\u062d\u062f\u0648\u062f\u062a\u0631 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u0646\u0633\u062e\u0647 4.44.3 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0641\u0648\u0631\u0627\u064b \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udc9c@HackerNewsCyber", "url": "https://t.me/HackerNewscyber/2367"}, {"timestamp": "2025-08-26T06:00:52.030Z", "date_only": false, "value": "2025-08-26T06:00:52.030065Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3lxbtmhwbrt2j", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "3f907a7a-a6f3-4866-8b73-6d2029860c82", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3lxbtmhwbrt2j"}, {"timestamp": "2025-08-26T07:41:25Z", "date_only": false, "value": "2025-08-26T07:41:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/5474", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "581ea954-739b-4770-8468-ca33c8f2ced7", "content": "\u27a1\ufe0fCVE-2025-9074: Escape from Tarkov Docker Desktop\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u0432\u0435\u0436\u0438\u0439 \u043a\u0440\u0438\u0442 \u0432 Docker Desktop \u0434\u043b\u044f Windows \u0438 macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0445\u0435\u043a\u0430\u0442\u044c \u0445\u043e\u0441\u0442\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u27a1\ufe0f\u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\n\nCVE-2025-9074 (CVSS 9.3) - \u044d\u0442\u043e container escape \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Docker Desktop, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.44.3. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043b\u044e\u0431\u043e\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a Docker Engine API \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 192.168.65.7:2375 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u27a1\ufe0f\u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0430\u043a\u0438\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Felix Boulet \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430:\n\u0428\u0430\u0433 1: POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a /containers/create \u0441 JSON payload, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0434\u0438\u0441\u043a C:\\ \u0445\u043e\u0441\u0442\u0430 \u0432 \u043f\u0430\u043f\u043a\u0443 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 /mnt/host/c:/host_root\n\u0428\u0430\u0433 2: POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a /containers/{id}/start \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0445\u043e\u0441\u0442\u0430\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: \u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0445\u043e\u0441\u0442\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\n\n\u27a1\ufe0f\u0420\u0430\u0437\u043b\u0438\u0447\u0438\u044f \u043f\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c\n\nWindows: \u041a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043c\u043e\u0436\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 DLL \u0438 \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\nmacOS: Docker Desktop \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f. \u041d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Docker \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\nLinux: \u0411\u0443\u043a\u0432\u0430 \u044e - .... \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 named pipe \u0432\u043c\u0435\u0441\u0442\u043e TCP-\u0441\u043e\u043a\u0435\u0442\u0430 \u0434\u043b\u044f API. \u041b\u0438\u043d\u044c \u0441\u043d\u043e\u0432\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0441\u0430\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u041e\u0421\u044c\u044e))\n\n\u27a1\ufe0f\u0410\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 SSRF:\n- \u0415\u0441\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b\n- \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e, \u0435\u0441\u043b\u0438 SSRF \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 POST/PATCH/DELETE \u043c\u0435\u0442\u043e\u0434\u044b\n- \u041c\u043e\u0436\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u0447\u0430\u0442\u044c\u0441\u044f \u0434\u043e Docker socket \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\n\n\u27a1\ufe0f\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u0443\u0442\u044c\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f Philippe Dugre (zer0x64), \u044d\u0442\u043e \u0431\u044b\u043b\u0430 \"\u043f\u0440\u043e\u0441\u0442\u0430\u044f \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0430\" - \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 HTTP API Docker \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043b\u044e\u0431\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\nEnhanced Container Isolation (ECI) \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u0442 \u043e\u0442 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0451 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439.\n\n\u27a1\ufe0f\u041c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e: \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Docker Desktop 4.44.3+\n\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0435\u0440\u0441\u0438\u0438: docker --version\n\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433: \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a 192.168.65.7:2375\n\u0410\u0443\u0434\u0438\u0442: \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0438\u0441\u043a\u043e\u0432\n\n\ud83d\udd17\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438:\n- HackerNews\n- NIST\n\n\ud83c\udf1a @poxek | \ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "url": "https://t.me/poxek/5474"}, {"timestamp": "2025-08-26T11:44:19Z", "date_only": false, "value": "2025-08-26T11:44:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/08/26/docker-desktop-vulnerability-leads-to.html", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "b24500f3-a3d1-46b0-97ad-69e72af9ed5a", "url": "https://threatintel.cc/2025/08/26/docker-desktop-vulnerability-leads-to.html"}, {"timestamp": "2025-08-26T12:48:07.648Z", "date_only": false, "value": "2025-08-26T12:48:07.648260Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115095141562049200", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "0581a7cb-6dd8-47ea-9ead-af4c0d380240", "url": "https://infosec.exchange/users/jbhall56/statuses/115095141562049200"}, {"timestamp": "2025-08-26T13:44:13.546Z", "date_only": false, "value": "2025-08-26T13:44:13.546174Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115095362078306466", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "36f3c22b-5862-4660-ab54-72fea49cc849", "url": "https://infosec.exchange/users/edwardk/statuses/115095362078306466"}, {"timestamp": "2025-08-27T01:42:13.845Z", "date_only": false, "value": "2025-08-27T01:42:13.845250Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115098185250900893", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "01d4cebd-8f02-4b87-a319-db8d5b7dcef6", "url": "https://mstdn.ca/users/rfwaveio/statuses/115098185250900893"}, {"timestamp": "2025-08-27T08:30:46Z", "date_only": false, "value": "2025-08-27T08:30:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1878", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a17770cc-1f88-40b5-a6ef-6447a9038b26", "content": "\ud83d\ude31 \u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 CVE \u0432 Git \u0438 NetScaler, PoC \u0434\u043b\u044f Docker\n\n\u0421 \u0432\u0430\u043c\u0438 \u043d\u0430\u0448\u0430 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u00ab\u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u0435\u043d\u044c \u0432 \u0436\u0438\u0437\u043d\u0438 \u0418\u0411\u00bb.\n\nCitrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f NetScaler ADC \u0438 NetScaler Gateway, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0442\u0440\u0438 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0441 CVSS4 8.7-9.2.\n\u0422\u043e\u043f\u043e\u0432\u0430\u044f, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f CVE-2025-7775 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u0438\u043b\u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 IoC, \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0435\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u0432\u0435\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043b\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f. \u0421\u043e\u0432\u0435\u0442\u043e\u0432 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0442\u043e\u0436\u0435 \u043d\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043e \u2014  \u043d\u0443\u0436\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u0430, -7776 \u0438 -8424, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a DoS \u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u043e\u043c\u0435\u0440\u043d\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u043e\u043d\u0438 (\u043f\u043e\u043a\u0430) \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c.   \n\n\u0410 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Git CVE-2025-48384, (CVSS 8.1) \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u0430\u044f 8 \u0438\u044e\u043b\u044f, \u0434\u043e\u0448\u043b\u0430 \u0434\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438. \u0421\u0443\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u043e\u0434\u043c\u043e\u0434\u0443\u043b\u044f\u043c\u0438 (submodule) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 (post-checkout hook) \u0432 \u0441\u0440\u0435\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0430 \u0441\u0442\u0440\u043e\u043a\u0438 (CR) \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\u041a\u0440\u043e\u043c\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Git, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0432 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445.\n\n\u041d\u0430 \u0437\u0430\u043a\u0443\u0441\u043a\u0443 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Docker Desktop \u0434\u043b\u044f Windows \u0438 macOS, \u043d\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0432 Windows. CVE-2025-9074 (CVSS 9.3) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443 \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a Docker engine \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0445\u043e\u0441\u0442\u0435. \u041a \u043f\u0440\u043e\u0441\u0442\u043e\u043c\u0443 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0435\u0444\u0435\u043a\u0442\u0443 \u0435\u0441\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Docker \u0441\u0442\u043e\u0438\u0442 \u043f\u043e\u0442\u043e\u0440\u043e\u043f\u0438\u0442\u044c\u0441\u044f \u0441 \u043f\u0430\u0442\u0447\u0430\u043c\u0438.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1878"}, {"timestamp": "2025-08-27T13:58:15.605Z", "date_only": false, "value": "2025-08-27T13:58:15.605584Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-dc9e54ec-62ab211e646bb576", "record": "cve-2025-9074", "field": "creation_timestamp", "uuid": "6c951fc0-e6fb-4076-8837-93a7de152686", "url": "https://poliverso.org/objects/0477a01e-dc9e54ec-62ab211e646bb576"}, {"timestamp": "2025-08-27T15:00:12Z", "date_only": false, "value": "2025-08-27T15:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EUT1ULRxURmX3bfkqeiyQObu2fr874Hx3SDIC7fzNi4PZoU", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "2866e071-e8a8-436e-a548-fac67d92921d"}, {"timestamp": "2025-08-30T16:17:41.755Z", "date_only": false, "value": "2025-08-30T16:17:41.755909Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/j0hnnyxm4s.johnnyxmas.net/post/3lxmxx5cika22", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a2c33f84-70b8-464c-a3dc-8da3b896e3f5", "url": "https://bsky.app/profile/j0hnnyxm4s.johnnyxmas.net/post/3lxmxx5cika22"}, {"timestamp": "2025-08-31T02:16:35.029Z", "date_only": false, "value": "2025-08-31T02:16:35.029609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxnzg2edmr2m", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "751f2ff8-ca62-4ab8-ae45-9fd3c92f0288", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxnzg2edmr2m"}, {"timestamp": "2025-08-31T07:47:17.494Z", "date_only": false, "value": "2025-08-31T07:47:17.494489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aodaivn.bsky.social/post/3lxolvfqzzq2t", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "4156f8ba-83cb-4941-8dbc-feb0314ed0b3", "url": "https://bsky.app/profile/aodaivn.bsky.social/post/3lxolvfqzzq2t"}, {"timestamp": "2025-08-31T19:58:58.305Z", "date_only": false, "value": "2025-08-31T19:58:58.305588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpurr5ejl2c", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "bf595ea1-4a3f-4125-8c13-c0cdcc388612", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpurr5ejl2c"}, {"timestamp": "2025-08-31T20:03:22.385Z", "date_only": false, "value": "2025-08-31T20:03:22.385522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpuzmwbt22o", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "4d2eb1da-4583-43cb-a786-7ee6ffa059b7", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpuzmwbt22o"}, {"timestamp": "2025-08-31T20:08:07Z", "date_only": false, "value": "2025-08-31T20:08:07.000485Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpvbzvv6k2o", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "621b3f12-2a75-48b6-b4fa-7c0250dcdc8c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpvbzvv6k2o"}, {"timestamp": "2025-08-31T20:15:17.794Z", "date_only": false, "value": "2025-08-31T20:15:17.794184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpvowtpvb2l", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "4708f686-10db-4137-bde7-eaf19883dbcd", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpvowtpvb2l"}, {"timestamp": "2025-08-31T20:20:38.353Z", "date_only": false, "value": "2025-08-31T20:20:38.353488Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpvyitvv32f", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "12c628df-999a-420e-8549-9eeefc79aa67", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpvyitvv32f"}, {"timestamp": "2025-08-31T20:22:45.937Z", "date_only": false, "value": "2025-08-31T20:22:45.937384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpw4ckn7f2g", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "d3799922-426b-41f9-80fc-a2435c9b0a54", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpw4ckn7f2g"}, {"timestamp": "2025-08-31T20:23:45.567Z", "date_only": false, "value": "2025-08-31T20:23:45.567948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpw62yl5q2e", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "9dea6842-9112-40e7-8a1c-8879a880e020", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lxpw62yl5q2e"}, {"timestamp": "2025-09-01T11:30:44.496Z", "date_only": false, "value": "2025-09-01T11:30:44.496405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3lxritvcrpp2n", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "6dcf7336-4afa-4dbc-90ac-8355fc37e139", "url": "https://bsky.app/profile/appsecfeed.bsky.social/post/3lxritvcrpp2n"}, {"timestamp": "2025-09-02T07:29:07.277Z", "date_only": false, "value": "2025-09-02T07:29:07.277548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/remote-brain42.bsky.social/post/3lxtlsr2rf22d", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "3522e6db-d182-4dcf-b469-b8dc5f29bbaf", "url": "https://bsky.app/profile/remote-brain42.bsky.social/post/3lxtlsr2rf22d"}, {"timestamp": "2025-09-03T09:00:05.491Z", "date_only": false, "value": "2025-09-03T09:00:05.491521Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3lxwbeebxu327", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "c410dcf4-245d-421c-8bab-6f68f65dcc47", "url": "https://bsky.app/profile/guardian360.bsky.social/post/3lxwbeebxu327"}, {"timestamp": "2025-09-03T13:05:06.983Z", "date_only": false, "value": "2025-09-03T13:05:06.983696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/johnhammond.bsky.social/post/3lxwp2eaozb2x", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "f10ee7bb-8925-41d4-ac55-faa257feb27b", "url": "https://bsky.app/profile/johnhammond.bsky.social/post/3lxwp2eaozb2x"}, {"timestamp": "2025-09-03T14:45:44.284Z", "date_only": false, "value": "2025-09-03T14:45:44.284491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lxwtnya2oq2m", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "70cc3af3-a2ad-4802-9194-7739a6f7e02e", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lxwtnya2oq2m"}, {"timestamp": "2025-09-04T09:00:05Z", "date_only": false, "value": "2025-09-04T09:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/xlAko34B3Uyjvd9dQ9fN0_9CnHhdqlACkbJw7g5Gnjlnl2Y", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "f76d4170-e5f8-4ca3-99ac-36eb3f99d2ec"}, {"timestamp": "2025-09-05T11:00:10Z", "date_only": false, "value": "2025-09-05T11:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3chWPBCkqylfW-rYUEfgx3bHrREkz_zmB1XwnfUCoQjBkS0", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a2208cb4-9937-4e19-b159-a75115d7cce2"}, {"timestamp": "2025-09-19T03:28:55Z", "date_only": false, "value": "2025-09-19T03:28:55.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tekSf9DesmcKO4l7eOnKzE6eB5F-0xU9pnOpI7ixeynUA5uJ", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "ae49d632-cc71-40d2-9e68-e3685620c868"}, {"timestamp": "2025-09-25T16:43:01.881Z", "date_only": false, "value": "2025-09-25T16:43:01.881Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-9074", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-25T18:30:30Z", "date_only": false, "value": "2025-09-25T18:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4XCQ-3FJF-XFQW", "record": "GHSA-4XCQ-3FJF-XFQW", "field": "modified"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "ce323970-e172-46fa-bd2a-1c00bccb811b", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "5da738e0-501f-44fe-a93b-67923c68dbdb", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "2372c25f-a1c6-40a0-90b9-cf03d48cfbac", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "e4564764-4f8c-4508-9c23-e1a23e449421", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "472e0946-51d4-46ed-b650-543234737103", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a24ad33b-dfbe-4e25-890c-a5902abdd432", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "95e4c7db-7ada-413f-b220-8c23cff2c8cd", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T09:42:12Z", "date_only": false, "value": "2025-10-06T09:42:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "ef72f98d-6fcc-4b49-8c45-04202541b18c", "url": "https://sploitus.com/exploit?id=5B3C3ACB-78E0-56ED-B4E2-5EF8E515663D&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-06T11:45:17Z", "date_only": false, "value": "2025-10-06T11:45:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/54385", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "6737c701-d26b-48f2-9317-da6ab275cd2e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.\nURL\uff1ahttps://github.com/OilSeller2001/PoC-for-CVE-2025-9074\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/54385"}, {"timestamp": "2025-10-06T15:00:07Z", "date_only": false, "value": "2025-10-06T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/U4h4MLphEulcAS-AINntcnu7Acxbm4qp5YSSZTd69sC_9BI", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "e1c41917-0104-4b4f-9131-e71b7d1c892b"}, {"timestamp": "2025-10-06T23:00:12Z", "date_only": false, "value": "2025-10-06T23:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lpKI25AgWpeQHXT3njZe7xgmKxaEADiDLwJuhv697hDyDSA", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "faf9b2bc-e33d-4102-81c3-c6604d097ea5"}, {"timestamp": "2025-10-07T21:48:31Z", "date_only": false, "value": "2025-10-07T21:48:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/skhoriyamsft/3537c4f63ce452e202df2b274b753a01", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "d782f52a-8168-44f5-a57d-559a25311ad0", "url": "https://gist.github.com/skhoriyamsft/3537c4f63ce452e202df2b274b753a01"}, {"timestamp": "2025-12-07T03:00:05Z", "date_only": false, "value": "2025-12-07T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6ozsUPZBjsDLdZG63vMadgqko_WpCCgDVLV4ovLlz1dO__U", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "8ee820fd-ec43-4cd5-bc18-f0a1e1214ab9"}, {"timestamp": "2025-12-07T12:08:53Z", "date_only": false, "value": "2025-12-07T12:08:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/62046", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "82c7180a-f92f-4213-9df5-b7997539f168", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API endpoints with an integrated interactive command shell.\nURL\uff1ahttps://github.com/xwpdx0/poc-2025-9074\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/62046"}, {"timestamp": "2025-12-07T15:00:06Z", "date_only": false, "value": "2025-12-07T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SMKYXiw5wY8oNgtGYQViKcUduDM9Fp0iSW-axRtzlO4bR5E", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "13bc9782-057c-42fb-8407-a36edf822fe3"}, {"timestamp": "2025-12-09T11:52:17Z", "date_only": false, "value": "2025-12-09T11:52:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/62278", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "d85de480-2e52-428a-a85f-48f1d9624843", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a Proof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and macOS (CVSS 9.3)\nURL\uff1ahttps://github.com/PtechAmanja/CVE-2025-9074-Docker-Desktop-Container-Escape\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/62278"}, {"timestamp": "2025-12-09T15:00:07Z", "date_only": false, "value": "2025-12-09T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xbXCUJJIXIudZLkQezFFvZDk-YoTt15X3xYywmSJdeUKTNs", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "f9f71939-2bd4-45bc-9819-20d5c64e54e6"}, {"timestamp": "2025-12-10T21:00:05Z", "date_only": false, "value": "2025-12-10T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HZ3ZJRsPXN2xbtsA1DCWruuU-3EwXxx0KgUeziJX8Cuevwg", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "505748a2-09f2-4b18-aa25-839478824293"}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-9074", "field": "timestamps.asserted_at", "uuid": "4979c1cd-1a68-449c-b919-969a0ebf767a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-9074", "field": "evidence.0.details.added_date", "uuid": "4979c1cd-1a68-449c-b919-969a0ebf767a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/MXX7s40szsHIOahCmZYUo1oPbzx8GV2ib_l3MQ9GkEPvzG8", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "c370432e-f43a-4126-a513-7d95d8238a4e"}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-9074", "field": "timestamps.first_seen_at", "uuid": "4979c1cd-1a68-449c-b919-969a0ebf767a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-15T03:00:07Z", "date_only": false, "value": "2025-12-15T03:00:07+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-9074", "field": "status.status_updated_at", "uuid": "4979c1cd-1a68-449c-b919-969a0ebf767a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-26T11:00:09Z", "date_only": false, "value": "2025-12-26T11:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/k7n-CARhVCD5J85I9hMnWG5lL1YLdxIjJ_L36fSGjs5K6F4", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "7a5b6233-d0ae-41a1-8948-acf65aaa71db"}, {"timestamp": "2025-12-26T15:00:08Z", "date_only": false, "value": "2025-12-26T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aPT9j1AZS6eosoyzHBZpEIK9Gicq8EphhU_PVxePi8jTVHM", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a4ecac08-4561-4a01-9f28-9a847fbe26c6"}, {"timestamp": "2026-01-03T07:00:13Z", "date_only": false, "value": "2026-01-03T07:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-ZsuTsGB0aZKRzAsaWI6fQR05Bt_I4uvjZ5hSA-90KckRM4", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "42bcaf04-c17b-47c8-8949-ee7dcae2f22b"}, {"timestamp": "2026-01-03T09:00:04Z", "date_only": false, "value": "2026-01-03T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/C73DtUbuEj3mwBPwjM8pQcH7-9v5wI_IIsL_Wg_s86LJ-6U", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "d0812995-92f1-4b50-8e41-167f0704b8df"}, {"timestamp": "2026-01-04T15:00:07Z", "date_only": false, "value": "2026-01-04T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/P-MMRzhkWfYVd_dumlZOPnB40IKywh2dEVqz_apUhr1-c7M", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "c5c04c84-705a-4791-8739-bd507a822a73"}, {"timestamp": "2026-02-04T13:15:08.182Z", "date_only": false, "value": "2026-02-04T13:15:08.182379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mdzxg6wume2p", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "9dd1eeb5-e74d-4ad9-8c02-eebaca8695c0", "url": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mdzxg6wume2p"}, {"timestamp": "2026-02-05T21:02:59.008Z", "date_only": false, "value": "2026-02-05T21:02:59.008032Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me5bzgbraw2i", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "c558eff1-83f3-4047-8b6e-4c0b7322b2c6", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me5bzgbraw2i"}, {"timestamp": "2026-02-26T17:48:24.266Z", "date_only": false, "value": "2026-02-26T17:48:24.266Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-9074", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:48:24.266Z", "date_only": false, "value": "2026-02-26T17:48:24.266Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-9074", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-07T15:00:07Z", "date_only": false, "value": "2026-04-07T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XH19znCpYYgo8U4Hfo5vrZyRbbrCs-tApQ3SmI_fVyYsQZY", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "b9219ca6-9f99-457d-a672-8666e9f7eba9"}, {"timestamp": "2026-05-15T19:00:08Z", "date_only": false, "value": "2026-05-15T19:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VY6s1O0szb8bixlblGSnmARvGjS9Td-M7-1-fFsiX-W1GG4", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "4a38d5b5-bc55-4216-b5eb-c02a391cffe1"}, {"timestamp": "2026-05-30T11:00:11Z", "date_only": false, "value": "2026-05-30T11:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/yYHRBxvUjQ02015bx83J8tkOO2fwWdsxD6Ne1eYIS9oW1lo", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "c8aa3edd-bd14-4acc-a84c-dccdd4aa0582"}, {"timestamp": "2026-05-30T15:00:07Z", "date_only": false, "value": "2026-05-30T15:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/J8DlVyKG2Ha8_8-DPAHAkyXqdyfexf_y2s10iFJfB3MNT4g", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "ecf2cf53-87b6-4189-b285-bccfeda95dcf"}, {"timestamp": "2026-06-17T10:08:16.080Z", "date_only": false, "value": "2026-06-17T10:08:16.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-9074", "record": "FKIE_CVE-2025-9074", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-9074", "field": "timestamps.recorded_at", "uuid": "4979c1cd-1a68-449c-b919-969a0ebf767a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:39.067Z", "date_only": false, "value": "2026-06-19T12:42:39.067598Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4979c1cd-1a68-449c-b919-969a0ebf767a", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "8b4f66fe-a763-4fc2-98b0-4c397a1cef95", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4979c1cd-1a68-449c-b919-969a0ebf767a"}, {"timestamp": "2026-06-19T12:45:44.632Z", "date_only": false, "value": "2026-06-19T12:45:44.632003Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/000f8ea3-fbab-4903-8800-3e3cd89ca7b2", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "41569265-4be3-42c1-86ba-be7d5f25f6fe", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/000f8ea3-fbab-4903-8800-3e3cd89ca7b2"}, {"timestamp": "2026-07-15T10:00:04.685Z", "date_only": false, "value": "2026-07-15T10:00:04.685108Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/850742", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "e805af3f-fcd2-4c19-8fc1-541b3f597147", "url": "https://t.me/breachdetector/850742"}, {"timestamp": "2026-07-16T00:00:20.092Z", "date_only": false, "value": "2026-07-16T00:00:20.092413Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/850742", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "2d750722-de6d-4a2d-90a4-e26f932fcc81", "url": "https://t.me/breachdetector/850742"}, {"timestamp": "2026-07-20T19:00:03.964Z", "date_only": false, "value": "2026-07-20T19:00:03.964884Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ldL7rfkPqd7nzZpcOYWSyZ0Z_1XxUWoYxeXoMuZEBU9-sPs", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "a353e5d9-9462-4022-8e54-43a973a85788"}, {"timestamp": "2026-07-20T19:00:06.429Z", "date_only": false, "value": "2026-07-20T19:00:06.429531Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/6628", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "71c1717d-0ae6-48d2-a43e-e23eb68d3bd5", "url": "https://t.me/MalaysiaHacktivistz/6628"}, {"timestamp": "2026-07-21T00:00:20.189Z", "date_only": false, "value": "2026-07-21T00:00:20.189195Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ldL7rfkPqd7nzZpcOYWSyZ0Z_1XxUWoYxeXoMuZEBU9-sPs", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "0c7e1f7f-d44d-451f-94b4-9ab3bd9148be"}, {"timestamp": "2026-07-21T00:00:24.264Z", "date_only": false, "value": "2026-07-21T00:00:24.264109Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/6628", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "d7b0bcc7-4e36-4c39-a2ab-c6e6ed2588a5", "url": "https://t.me/MalaysiaHacktivistz/6628"}, {"timestamp": "2026-07-22T01:00:13.133Z", "date_only": false, "value": "2026-07-22T01:00:13.133117Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/6628", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "8409231c-16d4-4aaa-9fa5-44678df85340", "url": "https://t.me/MalaysiaHacktivistz/6628"}, {"timestamp": "2026-07-29T12:01:57.293Z", "date_only": false, "value": "2026-07-29T12:01:57.293697Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sdnv_funkhole/1591", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "8ad89472-d44f-47e7-9d89-daaba79dc2c4", "url": "https://t.me/sdnv_funkhole/1591"}, {"timestamp": "2026-07-29T12:02:02.158Z", "date_only": false, "value": "2026-07-29T12:02:02.158583Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5358", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "2c1a625f-8953-43af-9a18-a9ed589a60ea", "url": "https://t.me/reverseame/5358"}, {"timestamp": "2026-07-30T00:02:09.240Z", "date_only": false, "value": "2026-07-30T00:02:09.240466Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sdnv_funkhole/1591", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "43659461-9c0f-4726-9bda-acbb86c1d776", "url": "https://t.me/sdnv_funkhole/1591"}, {"timestamp": "2026-07-30T00:02:13.425Z", "date_only": false, "value": "2026-07-30T00:02:13.425432Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5358", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "97fa2aaf-6667-4633-8754-80ee2cf9b539", "url": "https://t.me/reverseame/5358"}, {"timestamp": "2026-08-01T19:00:03.312Z", "date_only": false, "value": "2026-08-01T19:00:03.312720Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sdnv_funkhole/1591", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "355cbade-47e9-438e-956f-2c8839aca9b6", "url": "https://t.me/sdnv_funkhole/1591"}, {"timestamp": "2026-08-02T00:00:08.399Z", "date_only": false, "value": "2026-08-02T00:00:08.399513Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5358", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "16fdd312-5db8-4ead-b72a-561f4b5a0997", "url": "https://t.me/reverseame/5358"}, {"timestamp": "2026-08-02T00:00:22.499Z", "date_only": false, "value": "2026-08-02T00:00:22.499319Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sdnv_funkhole/1591", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "1f5aa871-33a9-45e7-93ba-91e5ada72c3c", "url": "https://t.me/sdnv_funkhole/1591"}, {"timestamp": "2026-08-04T13:00:25.368Z", "date_only": false, "value": "2026-08-04T13:00:25.368686Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/267", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "c2998c6c-e897-463d-ba99-aea61d411a3c", "url": "https://t.me/bagl3y_notes/267"}, {"timestamp": "2026-08-05T00:00:40.977Z", "date_only": false, "value": "2026-08-05T00:00:40.977405Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/267", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "8d9aeb1a-2a9e-4768-b7db-6941b2b79f57", "url": "https://t.me/bagl3y_notes/267"}, {"timestamp": "2026-08-06T00:00:40.662Z", "date_only": false, "value": "2026-08-06T00:00:40.662481Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bagl3y_notes/267", "record": "CVE-2025-9074", "field": "creation_timestamp", "uuid": "fb96c73b-8f1d-4f01-8944-a319914e833b", "url": "https://t.me/bagl3y_notes/267"}]}