{"metadata": {"vulnerability": "GHSA-x574-m823-4x7w", "count": 21, "kinds": {"milestone": 4, "sighting": 10, "kev": 0, "other": 7}}, "data": [{"timestamp": "2025-03-18T18:15:13.849Z", "date_only": false, "value": "2025-03-18T18:15:13.849Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-30208", "record": "CVE-2025-30208", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2025-03-24T17:03:40.728Z", "date_only": false, "value": "2025-03-24T17:03:40.728Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-30208", "record": "CVE-2025-30208", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2025-03-24T17:03:40.728Z", "date_only": false, "value": "2025-03-24T17:03:40.728Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-30208 / GitHub_M", "record": "CVE-2025-30208", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-03-24T17:15:21Z", "date_only": false, "value": "2025-03-24T17:15:21Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-x574-m823-4x7w", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-24T17:40:42.736Z", "date_only": false, "value": "2025-03-24T17:40:42.736527Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-30208 / CISA-ADP", "record": "CVE-2025-30208", "field": "containers.adp.0.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2025-03-24T17:46:37.205Z", "date_only": false, "value": "2025-03-24T17:46:37.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-30208", "record": "CVE-2025-30208", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-03-24T17:46:37.205Z", "date_only": false, "value": "2025-03-24T17:46:37.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-30208 / CISA-ADP", "record": "CVE-2025-30208", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-03-25T14:00:02Z", "date_only": false, "value": "2025-03-25T14:00:02Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-x574-m823-4x7w", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-25T14:00:02Z", "date_only": false, "value": "2025-03-25T14:00:02Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-x574-m823-4x7w", "field": "modified"}, {"timestamp": "2025-03-27T10:36:37Z", "date_only": false, "value": "2025-03-27T10:36:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/badbclubua/49", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "208c6258-92fa-4a6e-9f93-5a42a8cf8272", "content": "\u041e\u0431\u0445\u043e\u0434 \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 vite.js https://github.com/vitejs/vite/security/advisories/GHSA-x574-m823-4x7w \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u0438\u043a\u0438 \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0447\u0442\u043e \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0438 \u0435\u0441\u0442\u044c \u0442\u0430\u043a\u043e\u0435 \ud83d\ude08", "url": "https://t.me/badbclubua/49"}, {"timestamp": "2025-03-27T11:11:50Z", "date_only": false, "value": "2025-03-27T11:11:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/C1-VU2gk3ZCgj49KfzdA3E3vdUpKoicmY6MT6hUVGsPZAac", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "f2ddc5ef-2571-4a60-82d9-eb06b35c0be9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-18T13:50:58Z", "date_only": false, "value": "2025-04-18T13:50:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSec/28332", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "81cb91cf-b660-4168-b437-ea5a37d5c504", "content": "Umbrella is a file dropper dedicated to pentest, its download files on target system are execute them without a double execution of exe, only of embed.\n\ngit clone https://github.com/4w4k3\n\nWifiphisher\u00a0is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. Wifiphisher can be further used to mount victim-customized web phishing attacks against the connected clients in order to capture credentials (e.g. from third party login pages or WPA/WPA2 Pre-Shared Keys) or infect the victim stations with malwares.\n\ngit clone https://github.com/wifiphisher/wifiphisher.git # Download the latest revision \n\nTermux repository for hacking tools and packages\n\nhttps://github.com/Hax4us/TermuxBlack\n\n#Termux\n\nThis channel is dedicated to educational purposes.\n\nEasY_HaCk is a tool for network scanning and information gathering\n\n\u2022 git clone https://github.com/sabri-zaki/EasY_HaCk\n\nWishphish is a Termux tool which using for hack someone's front camera using a permission link..we wanna port forwarding tools for generate link..and we can grab someone picture when he opened this link and give allow permission.\n\n\u2022 git clone https://github.com/kinghacker0/WishFish\n\nBLACKPHISH\n\nNOTE:This is still in BETA so you may see problems, please open an issue on GitHub and report them!\n\n$ git clone https://github.com/iinc0gnit0/BlackPhish\n\n#Termux\n\nserver.fs.deny bypassed when using ?raw?? \u00b7 Advisory \u00b7 vitejs/vite \u00b7 \n\nhttps://github.com/vitejs/vite/security/advisories/GHSA-x574-m823-4x7w\n\nInstantly share code, notes, and snippets.\n\nhttps://gist.github.com/grugq/03167bed45e774551155\n\n0day Today is the ultimate database of exploits and vulnerabilities\n\nhttps://0day.today\n\n./Phone: a mobile phone forensic framework for security researchers and forensic experts.\n\nIt's now available on github, follow the instructions and you will get it up and running successfully.\n\nhttps://github.com/cyb3rfortr3ss/Phone\n\nKali Linux 2024.4! \n\nhttps://kali.org/blog/kali-linux-2024-4-release/\n\nContaining new default python, updates to gnome 47, raspberry pi imager improvements, nethunter updates and more! Check it out!\n\n#CyberBulletin\n\nURLFINDER\n\n- different sources (alienvault,commoncrawl etc)\n- filter by extensions/regex\n- very fast (122000+ URLs in 30 sec):\n\nhttps://github.com/projectdiscovery/urlfinder\n\nOSINT Tool For Research Social Media Accounts By Username\n\nhttps://github.com/AnkhCorp/Snoop\n\nA tool to identify technologies and services used by domains through their DNS footprints\n\nhttps://github.com/Elite-Security-Systems/radar\n\nTop 20 Bug Bounty Platforms \n \n- HackerOne\n- Bugcrowd\n- Synack\n- YesWeHack\n- Intigriti\n- Open Bug Bounty\n- Hacken Proof\n- Cobalt\n- ZeroCopter\n- Bugbounter\n- Detectify\n- SafeHats\n-Secuna\n- Vulnerability Lab\n- Yogosha\n- BugBounty.jp\n- CyberArmy\n- Hackrate\n- Bounty Factory\n- Immunefi\n\n\ud83e\udd77\n\nA collection of several hundred online tools for OSINT.\n\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\nPEN-300 (OSEP) resource.\n \nhttps://github.com/In3x0rabl3/OSEP\n\nIf you know about hacking you know that, one of the\u00a0most fatal hacker attacks\u00a0is the Dos (denial of service) attack. XLR8_BOMBER\u00a0is\u00a0a Dos attack tool for SMS,\u00a0it\u00a0sends 100s of SMS as well as calls on someone's phone so that they cannot use their phone properly.\n\n\u2022 git clone https://github.com/khansaad1275/XLR8_BOMBER\n\nThe unique thing about this tool is that it also helps you to\u00a0bypass 2-factor authentication. This tool uses NGrok tunneling so you can use this tool on public networks.\u2076\n\n\u2022 git clone https://github.com/The-Boss-Hacker/BossAdv.git\n\nLazyMux is a tool that helps you to install and use multiple penetration testing and hacking tools on the Android system with ease.", "url": "https://t.me/NinjaSec/28332", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-19T16:26:39Z", "date_only": false, "value": "2025-04-19T16:26:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/217", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "22d95b33-5b44-4979-8ea8-2bcdba3ccea5", "content": "1. File Droppers / Remote Execution Tools\n\nUmbrella \u2013 File dropper for pentests, executes files silently\nhttps://github.com/4w4k3\n\nDocEx \u2013 Document-based data exfiltration\nhttps://github.com/DarkSpaceSecurity/DocEx\n---\n\n2. Wireless Attacks / Wi-Fi Pentesting\n\nWifiphisher \u2013 Rogue access point framework\nhttps://github.com/wifiphisher/wifiphisher.git\n---\n\n3. Termux Tool Collections\n\nTermuxBlack \u2013 BlackArch-like repo for Termux\nhttps://github.com/Hax4us/TermuxBlack\n\nDevilX \u2013 110+ tools installer\nhttps://github.com/MrHacker-X/DevilX.git\n\nLazyMux \u2013 Easy installer for pentesting tools\nhttps://github.com/Gameye98/Lazymux\n\nT-Remix \u2013 Termux customizer with password and prompt themes\nhttps://github.com/Bhaviktutorials/T-Remix\n\nDh-All \u2013 300+ hacking tools in one installer\nhttps://github.com/DH-AL/Dh-All\n---\n\n4. OSINT / Recon / Information Gathering\n\nSMWYG \u2013 Massive credentials database for OSINT\nhttps://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got.git\n\nTrape \u2013 Real-time OSINT and social engineering framework\nhttps://github.com/jofpin/trape.git\n\nSnoop \u2013 Social media OSINT by username\nhttps://github.com/AnkhCornp/Snoop\n\nRadar \u2013 Tech & service detection via DNS footprints\nhttps://github.com/Elite-Security-Systems/radar\n\nOSINT Tool Collection \u2013 100s of OSINT utilities\nhttps://github.com/cipher387/osint_stuff_tool_collection\n\nCustom OSINT Search Engines\nhttps://github.com/paulpogoda/OSINT-CSE\n\nONIOFF \u2013 Inspect Deep Web (onion) URLs\nhttps://github.com/k4m4/onioff.git\n---\n\n5. Phishing / Social Engineering Tools\n\nWishFish \u2013 Front camera phishing via link\nhttps://github.com/kinghacker0/WishFish\n\nBlackPhish \u2013 Phishing tool (BETA)\nhttps://github.com/iinc0gnit0/BlackPhish\n\nBlack Mafia (PUBG Phishing)\nhttps://github.com/lovehacker404/Phishing\n\nSocialFish \u2013 Phishing & information collector\nhttps://github.com/UndeadSec/SocialFish\n---\n\n6. Exploits & Vulnerability Research\n\nCommix \u2013 Command injection automation\nhttps://github.com/commixproject/commix.git\n\nUFONet \u2013 DDoS via botnets\nhttps://github.com/epsylon/ufonet.git\n\nURLFinder \u2013 Extract URLs from multiple sources\nhttps://github.com/projectdiscovery/urlfinder\n\nOSEP Resource (PEN-300)\nhttps://github.com/In3x0rabl3/OSEP\n\nFaraday \u2013 Vulnerability management platform\n\nCore: https://github.com/infobyte/faraday.git\n\nFrontend: https://github.com/infobyte/faraday_angular_frontend.git\n---\n\n7. SMS / Call Bombers\n\nXLR8_BOMBER \u2013 SMS/Call spam tool\nhttps://github.com/khansaad1275/XLR8_BOMBER\n\nMaster Bomber 2.0 \u2013 Online SMS/Call bomber\nhttps://github.com/jatinkalwar/m-bomber2.O\n---\n\n8. Remote Access / RATs\n\nAsyncRAT Dark Mode\nhttps://github.com/MonsterCadd/AsyncRAT-Dark-Mode\n---\n\n9. Bash / Virus Tools\n\nInfect \u2013 Bash-based Android virus spreader (warning: destructive)\nhttps://github.com/noob-hackers/infect\n---\n\n10. Brute Force & Automation\n\nBrutegram \u2013 Instagram brute forcer\nhttps://github.com/Err0r-ICA/Brutegram\n---\n\n11. Mobile Forensics / Analysis\n\n./Phone \u2013 Mobile forensic toolkit\nhttps://github.com/cyb3rfortr3ss/Phone\n---\n\n12. Video / Media Tools\n\nbash2mp4 \u2013 YouTube video downloader for Termux\nhttps://github.com/htr-tech/bash2mp4\n\nInsta_report_eyes \u2013 Instagram report sender\nhttps://github.com/z6il/Insta_report_eyes\n---\n\n13. Operating Systems / Environment Tools\n\nInstall Ubuntu on Termux (No Root)\nhttps://github.com/tahmidrayat/ubuntu\n---\n\n14. Hacking Toolkits & Generators\n\nKitHack \u2013 Toolkit and backdoor generator\nhttps://github.com/AdrMXR/KitHack\n\nBossAdv \u2013 2FA Bypass + Tunneling tool\nhttps://github.com/The-Boss-Hacker/BossAdv.git\n---\n\n15. Compilation / Exploit Injectors\n\nElfDoor-gcc \u2013 Inject payload into binaries via gcc\nhttps://github.com/MatheuZSecurity/ElfDoor-gcc\n---\n\n16. Vulnerability / Exploit Databases\n\n0day.today \u2013 Database of public and private exploits\nhttps://0day.today\n---\n\n17. Notable Links / References\n\nViteJS Advisory\nhttps://github.com/vitejs/vite/security/advisories/GHSA-x574-m823-4x7w\n\ngrugq Snippet (Operational Security)\nhttps://gist.github.com/grugq/03167bed45e774551155\n\nKali Linux 2024.4 Release Notes\nhttps://kali.org/blog/kali-linux-2024-4-release/\n\n#GrayHats", "url": "https://t.me/NinjaSec/217"}, {"timestamp": "2026-08-10T10:24:21.779Z", "date_only": false, "value": "2026-08-10T10:24:21.779397Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/reewardius/63454afa052bb112ef7f9bcd5f9fa7af", "record": "GHSA-x574-m823-4x7w", "field": "creation_timestamp", "uuid": "0f792269-314b-47c0-84f5-fa535f0b3e53", "url": "https://gist.github.com/reewardius/63454afa052bb112ef7f9bcd5f9fa7af"}, {"timestamp": "2026-08-13T17:48:54Z", "date_only": false, "value": "2026-08-13T17:48:54Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-VITE-CVE-2025-30208", "record": "BREW-VITE-CVE-2025-30208", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-19T21:00:04.017Z", "date_only": false, "value": "2026-08-19T21:00:04.017040Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/118", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "2969ccbb-abf1-467e-b499-864b6e9e6449", "url": "https://t.me/NinjaSecurity/118"}, {"timestamp": "2026-08-19T21:00:04.165Z", "date_only": false, "value": "2026-08-19T21:00:04.165341Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/102", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "61fa4714-aad4-4432-96e0-d5ba93d9ffb7", "url": "https://t.me/NinjaSecurity/102"}, {"timestamp": "2026-08-19T21:00:04.812Z", "date_only": false, "value": "2026-08-19T21:00:04.812518Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/45", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "1a281d81-0260-4742-84a0-f27639bb2543", "url": "https://t.me/NinjaSecurity/45"}, {"timestamp": "2026-08-19T21:00:05.191Z", "date_only": false, "value": "2026-08-19T21:00:05.191229Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/12", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "a8f23792-a81e-4e8c-86f9-cdc090568e45", "url": "https://t.me/NinjaSecurity/12"}, {"timestamp": "2026-08-20T00:00:05.762Z", "date_only": false, "value": "2026-08-20T00:00:05.762149Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSecurity/12", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "0785f652-463f-4da2-8743-29b573d04400", "url": "https://t.me/NinjaSecurity/12", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-13T11:40:17Z", "date_only": false, "value": "2026-11-13T11:40:17Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-VITE-CVE-2025-30208", "record": "BREW-VITE-CVE-2025-30208", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-14T04:26:05.321Z", "anchors": {"origin": {"timestamp": "2025-03-25T14:00:02Z", "date_only": false, "value": "2025-03-25T14:00:02Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-x574-m823-4x7w", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-25T14:00:02Z", "date_only": false, "value": "2025-03-25T14:00:02Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-x574-m823-4x7w", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-03-27T11:11:50Z", "date_only": false, "value": "2025-03-27T11:11:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/C1-VU2gk3ZCgj49KfzdA3E3vdUpKoicmY6MT6hUVGsPZAac", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "f2ddc5ef-2571-4a60-82d9-eb06b35c0be9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 162708.0, "hours": 45.196666666666665, "days": 1.8831944444444444, "min_seconds": 162708.0, "max_seconds": 162708.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-25T14:00:02Z", "date_only": false, "value": "2025-03-25T14:00:02Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-x574-m823-4x7w", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-27T11:11:50Z", "date_only": false, "value": "2025-03-27T11:11:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/C1-VU2gk3ZCgj49KfzdA3E3vdUpKoicmY6MT6hUVGsPZAac", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "f2ddc5ef-2571-4a60-82d9-eb06b35c0be9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 51719163.321004, "hours": 14366.434255834445, "days": 598.6014273264352, "min_seconds": 51719163.321004, "max_seconds": 51719163.321004, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-25T14:00:02Z", "date_only": false, "value": "2025-03-25T14:00:02Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-x574-m823-4x7w", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T04:26:05.321Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 51556455.321004, "hours": 14321.237589167778, "days": 596.7182328819907, "min_seconds": 51556455.321004, "max_seconds": 51556455.321004, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-27T11:11:50Z", "date_only": false, "value": "2025-03-27T11:11:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/C1-VU2gk3ZCgj49KfzdA3E3vdUpKoicmY6MT6hUVGsPZAac", "record": "GHSA-X574-M823-4X7W", "field": "creation_timestamp", "uuid": "f2ddc5ef-2571-4a60-82d9-eb06b35c0be9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T04:26:05.321Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}