{"metadata": {"vulnerability": "cve-2025-10547", "count": 29, "kinds": {"milestone": 5, "sighting": 11, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-09-16T11:35:24.694Z", "date_only": false, "value": "2025-09-16T11:35:24.694Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-10547", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-10-02T17:55:53.485Z", "date_only": false, "value": "2025-10-02T17:55:53.485165Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115305857228831165", "record": "cve-2025-10547", "field": "creation_timestamp", "uuid": "e61ec97b-b0b5-4182-a8de-add9ce292d46", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115305857228831165"}, {"timestamp": "2025-10-03T10:43:02.288Z", "date_only": false, "value": "2025-10-03T10:43:02.288558Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m2bv3ztoom2m", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "f0d3d925-ac57-431b-af5d-9a941b32f552", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m2bv3ztoom2m"}, {"timestamp": "2025-10-03T11:35:43.752Z", "date_only": false, "value": "2025-10-03T11:35:43.752Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-10547", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-03T11:45:57.858Z", "date_only": false, "value": "2025-10-03T11:45:57.858616Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2byml6pmx26", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "b69b007c-3160-4e34-80d1-a0d51ee99592", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2byml6pmx26"}, {"timestamp": "2025-10-03T12:15:42Z", "date_only": false, "value": "2025-10-03T12:15:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CRJF-W852-343R", "record": "GHSA-CRJF-W852-343R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-03T12:15:42.993Z", "date_only": false, "value": "2025-10-03T12:15:42.993", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-10547", "record": "FKIE_CVE-2025-10547", "field": "published"}, {"timestamp": "2025-10-03T12:33:15Z", "date_only": false, "value": "2025-10-03T12:33:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CRJF-W852-343R", "record": "GHSA-CRJF-W852-343R", "field": "published"}, {"timestamp": "2025-10-03T13:15:28.935Z", "date_only": false, "value": "2025-10-03T13:15:28.935900Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/115310416886468384", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "75434369-928a-4284-8087-e093a7eba7fe", "url": "https://infosec.exchange/users/cR0w/statuses/115310416886468384"}, {"timestamp": "2025-10-03T14:33:21.692Z", "date_only": false, "value": "2025-10-03T14:33:21.692268Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-10547", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-10-03T14:33:21.692Z", "date_only": false, "value": "2025-10-03T14:33:21.692268Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-10547", "record": "FKIE_CVE-2025-10547", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-03T15:35:43Z", "date_only": false, "value": "2025-10-03T15:35:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/18256", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "eb738822-18d5-4933-9c28-594d2413552a", "content": "\u0412 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 DrayTek \u043f\u0430\u0442\u0447\u0430\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f DrayTek, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 Vigor. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\nhttps://xakep.ru/2025/10/03/cve-2025-10547/", "url": "https://t.me/xakep_ru/18256"}, {"timestamp": "2025-10-03T16:24:39.358Z", "date_only": false, "value": "2025-10-03T16:24:39.358000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m2ci6ivwqk2y", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "1851ac4e-7efc-4763-96be-230df96fee9f", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m2ci6ivwqk2y"}, {"timestamp": "2025-10-04T23:21:03.638Z", "date_only": false, "value": "2025-10-04T23:21:03.638373Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2fpwdfb6s2i", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "f4d5dd7b-5a69-411a-ac5d-4f71e86cc0ed", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2fpwdfb6s2i"}, {"timestamp": "2025-10-05T02:16:48.270Z", "date_only": false, "value": "2025-10-05T02:16:48.270738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m2fzqoheu52b", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "f1a6b42a-274e-4d07-af94-c5a686b8bac3", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m2fzqoheu52b"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2206", "record": "WID-SEC-W-2025-2206", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2206", "record": "WID-SEC-W-2025-2206", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2206", "record": "WID-SEC-W-2025-2206", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2206", "record": "WID-SEC-W-2025-2206", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-06T06:23:55.369Z", "date_only": false, "value": "2025-10-06T06:23:55.369585Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2ixzih4ud23", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "35fa13bf-bcf5-42c7-bedf-25bfbbe6d052", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2ixzih4ud23"}, {"timestamp": "2025-10-06T11:38:12.601Z", "date_only": false, "value": "2025-10-06T11:38:12.601+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2206", "record": "WID-SEC-W-2025-2206", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-07T08:14:58Z", "date_only": false, "value": "2025-10-07T08:14:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1167", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "5c6f874a-788c-4fbf-bd4d-d73a1650cef8", "content": "Top exploited vulns of the Week\n\nThis week\u2019s Vulnerability Trend shows a mix of big-platform remote RCEs (Oracle EBS, DrayTek), high-impact web plugin and local network exploits (WordPress Spirit, SillyTavern), plus client/runtime abuse in widely distributed software (Unity, Zabbix agent). Notable: an enterprise-scale, pre-auth Oracle RCE is already weaponized by ransomware groups (Cl0p / GRACEFUL SPIDER) and added to CISA KEV \u2014 treat it as highest priority.\n\nQuick hit list:\n\n\u2b50\ufe0f CVE-2025-61882 \u2014 Oracle E-Business Suite (BI Publisher integration) \u2014 CVSS 9.8, pre-auth RCE, actively used by Cl0p & GRACEFUL SPIDER; on CISA KEV. Patch immediately or isolate EBS HTTP endpoints.\n\u2b50\ufe0f CVE-2025-6388 \u2014 Spirit Framework (WordPress) \u2014 CVSS 9.8, unauthenticated admin takeover. Update to 1.2.15 or remove the plugin.\n\u2b50\ufe0f CVE-2025-59159 \u2014 SillyTavern (DNS rebinding) \u2014 CVSS ~9.6, local network\u2192API key theft. Upgrade to 1.13.4 + enable host whitelist.\n\u2b50\ufe0f CVE-2025-10547 \u2014 DrayTek Vigor routers \u2014 CVSS 8.8, unauth RCE in HTTP CGI; remote root possible. Apply vendor fixes and audit external-facing routers.\n\u2b50\ufe0f CVE-2025-59489 \u2014 Unity Runtime \u2014 Arg injection / DLL hijack in apps; PoCs available; exploited via trojanized games. Treat as supply-chain / app-store risk for distributed clients.\n\u2b50\ufe0f CVE-2025-27237 \u2014 Zabbix Agent (Windows LPE) \u2014 DLL injection via writable OpenSSL path; observed in targeted ops. Harden file perms and monitor for local privilege escalations.", "url": "https://t.me/bhhub/1167"}, {"timestamp": "2025-10-16T18:32:38.126Z", "date_only": false, "value": "2025-10-16T18:32:38.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-10547", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-20T15:58:45.010Z", "date_only": false, "value": "2025-10-20T15:58:45.010Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "cve-2025-10547", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T22:06:30.559Z", "date_only": false, "value": "2025-11-04T22:06:30.559Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-10547", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T22:06:30.559Z", "date_only": false, "value": "2025-11-04T22:06:30.559Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2025-10547", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-05T00:31:29Z", "date_only": false, "value": "2025-11-05T00:31:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CRJF-W852-343R", "record": "GHSA-CRJF-W852-343R", "field": "modified"}, {"timestamp": "2026-06-17T08:28:30Z", "date_only": false, "value": "2026-06-17T08:28:30.000", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-10547", "record": "FKIE_CVE-2025-10547", "field": "lastModified"}, {"timestamp": "2026-08-14T16:00:06.553Z", "date_only": false, "value": "2026-08-14T16:00:06.553887Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1181", "record": "CVE-2025-10547", "field": "creation_timestamp", "uuid": "b4bca684-86f8-4f05-a383-ecefaaf8ccbd", "url": "https://t.me/purp_sec/1181"}]}