{"metadata": {"vulnerability": "cve-2025-11345", "count": 22, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 16}}, "data": [{"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2025-11345", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-10-06T02:00:00Z", "date_only": false, "value": "2025-10-06T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2025-11345", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-10-06T06:15:35.341Z", "date_only": false, "value": "2025-10-06T06:15:35.341Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-11345", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-10-06T19:02:05.514Z", "date_only": false, "value": "2025-10-06T19:02:05.514Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-11345", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-06T19:15:34Z", "date_only": false, "value": "2025-10-06T19:15:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RR62-QMPW-4RVQ", "record": "GHSA-RR62-QMPW-4RVQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-06T19:15:34.703Z", "date_only": false, "value": "2025-10-06T19:15:34.703", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11345", "record": "FKIE_CVE-2025-11345", "field": "published"}, {"timestamp": "2025-10-06T19:35:36.699Z", "date_only": false, "value": "2025-10-06T19:35:36.699440Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-11345", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-06T19:35:36.699Z", "date_only": false, "value": "2025-10-06T19:35:36.699440Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11345", "record": "FKIE_CVE-2025-11345", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-06T19:35:49.946Z", "date_only": false, "value": "2025-10-06T19:35:49.946Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-11345", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-06T21:30:45Z", "date_only": false, "value": "2025-10-06T21:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RR62-QMPW-4RVQ", "record": "GHSA-RR62-QMPW-4RVQ", "field": "published"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2221", "record": "WID-SEC-W-2025-2221", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2221", "record": "WID-SEC-W-2025-2221", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2221", "record": "WID-SEC-W-2025-2221", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2221", "record": "WID-SEC-W-2025-2221", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-07T11:23:11.049Z", "date_only": false, "value": "2025-10-07T11:23:11.049+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2221", "record": "WID-SEC-W-2025-2221", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-14T04:36:10Z", "date_only": false, "value": "2025-10-14T04:36:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1168", "record": "CVE-2025-11345", "field": "creation_timestamp", "uuid": "195b1ed4-6e35-44ee-a558-d7c3a2b9c99b", "content": "Weekly brief \u2014 Notable vulns\n\nSSH parsing bugs in OpenSSH, a high-impact XXE in LangChain, and multiple exploitable web-app flaws dominated the week. The urgent items: a public SQLi PoC (Uniclare portal) that enables full DB takeover, an XXE in langchain-text-splitters that can leak local secrets from AI pipelines, and two OpenSSH username/NULL-byte injection issues that allow ProxyCommand command execution in affected clients. Patch or mitigate these first; many of the other findings are configuration-specific but still dangerous in education and POS ecosystems.\n\nTop highlights:\n\n\u2b50\ufe0f CVE-2025-57515 \u2014 Uniclare Student Portal (SQLi, CVSS 9.8)\nRemote, unauthenticated SQL injection with a public PoC. Threat: full DB compromise / credential theft. Action: take vulnerable endpoints offline or block inputs with WAF rules; apply vendor fix or remove the affected instance immediately.\n\n\u2b50\ufe0f CVE-2025-6985 \u2014 LangChain `langchain-text-splitters` (XXE, CVSS 7.5)\nUnsafe XSLT parsing in HTMLSectionSplitter \u2192 arbitrary file read / SSRF / secret leakage from AI pipelines that process untrusted HTML/XML. Action: disable custom XSLT, enforce safe parser flags (e.g., restrict external entity resolution / use `XSLTAccessControl`), audit ingestion pipelines for user-supplied XML.\n\n\u2b50\ufe0f CVE-2025-11344 / CVE-2025-11345 \u2014 ILIAS e-learning (RCE & insecure unserialize)\nAuthenticated upload/deserialization paths enable RCE / object injection. Action: patch to 10.2+ (or 8.24/9.14 where applicable); restrict cert upload features and sanitize serialized inputs.", "url": "https://t.me/bhhub/1168"}, {"timestamp": "2025-10-15T09:15:18Z", "date_only": false, "value": "2025-10-15T09:15:18.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2025-11345", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-01-23T18:24:14.342Z", "date_only": false, "value": "2026-01-23T18:24:14.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2025-11345", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-23T21:30:37Z", "date_only": false, "value": "2026-01-23T21:30:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RR62-QMPW-4RVQ", "record": "GHSA-RR62-QMPW-4RVQ", "field": "modified"}, {"timestamp": "2026-02-24T06:46:15.365Z", "date_only": false, "value": "2026-02-24T06:46:15.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-11345", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-24T06:46:15.365Z", "date_only": false, "value": "2026-02-24T06:46:15.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2025-11345", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:30:16.290Z", "date_only": false, "value": "2026-06-17T08:30:16.290", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11345", "record": "FKIE_CVE-2025-11345", "field": "lastModified"}]}