{"metadata": {"vulnerability": "cve-2025-6985", "count": 32, "kinds": {"milestone": 6, "sighting": 5, "kev": 0, "other": 21}}, "data": [{"timestamp": "2025-07-01T20:33:58.220Z", "date_only": false, "value": "2025-07-01T20:33:58.220Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-6985", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-09-27T16:34:36.938Z", "date_only": false, "value": "2025-09-27T16:34:36.938000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-09-27T17:00:51.752Z", "date_only": false, "value": "2025-09-27T17:00:51.752623+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-09-30T13:14:19.705Z", "date_only": false, "value": "2025-09-30T13:14:19.705000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2025-09-30T13:18:31.746Z", "date_only": false, "value": "2025-09-30T13:18:31.746000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2025-10-06T17:58:29.078Z", "date_only": false, "value": "2025-10-06T17:58:29.078Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-6985", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-06T17:58:29.078Z", "date_only": false, "value": "2025-10-06T17:58:29.078000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-10-06T17:58:29.078Z", "date_only": false, "value": "2025-10-06T17:58:29.078Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "cve-2025-6985", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-06T18:10:17.774Z", "date_only": false, "value": "2025-10-06T18:10:17.774029Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-6985", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-06T18:10:17.774Z", "date_only": false, "value": "2025-10-06T18:10:17.774029Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-6985", "record": "FKIE_CVE-2025-6985", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-06T18:10:28.811Z", "date_only": false, "value": "2025-10-06T18:10:28.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-6985", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-06T18:10:28.811Z", "date_only": false, "value": "2025-10-06T18:10:28.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-6985", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-06T18:15:52Z", "date_only": false, "value": "2025-10-06T18:15:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M42M-M8CR-8M58", "record": "GHSA-M42M-M8CR-8M58", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-06T18:15:52.857Z", "date_only": false, "value": "2025-10-06T18:15:52.857", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-6985", "record": "FKIE_CVE-2025-6985", "field": "published"}, {"timestamp": "2025-10-06T18:31:07Z", "date_only": false, "value": "2025-10-06T18:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M42M-M8CR-8M58", "record": "GHSA-M42M-M8CR-8M58", "field": "published"}, {"timestamp": "2025-10-06T19:00:59.808Z", "date_only": false, "value": "2025-10-06T19:00:59.808767+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-10-08T14:07:35Z", "date_only": false, "value": "2025-10-08T14:07:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M42M-M8CR-8M58", "record": "GHSA-M42M-M8CR-8M58", "field": "modified"}, {"timestamp": "2025-10-14T04:36:10Z", "date_only": false, "value": "2025-10-14T04:36:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1168", "record": "CVE-2025-6985", "field": "creation_timestamp", "uuid": "b60c5021-babf-4ea5-95d2-7333499c5c6b", "content": "Weekly brief \u2014 Notable vulns\n\nSSH parsing bugs in OpenSSH, a high-impact XXE in LangChain, and multiple exploitable web-app flaws dominated the week. The urgent items: a public SQLi PoC (Uniclare portal) that enables full DB takeover, an XXE in langchain-text-splitters that can leak local secrets from AI pipelines, and two OpenSSH username/NULL-byte injection issues that allow ProxyCommand command execution in affected clients. Patch or mitigate these first; many of the other findings are configuration-specific but still dangerous in education and POS ecosystems.\n\nTop highlights:\n\n\u2b50\ufe0f CVE-2025-57515 \u2014 Uniclare Student Portal (SQLi, CVSS 9.8)\nRemote, unauthenticated SQL injection with a public PoC. Threat: full DB compromise / credential theft. Action: take vulnerable endpoints offline or block inputs with WAF rules; apply vendor fix or remove the affected instance immediately.\n\n\u2b50\ufe0f CVE-2025-6985 \u2014 LangChain `langchain-text-splitters` (XXE, CVSS 7.5)\nUnsafe XSLT parsing in HTMLSectionSplitter \u2192 arbitrary file read / SSRF / secret leakage from AI pipelines that process untrusted HTML/XML. Action: disable custom XSLT, enforce safe parser flags (e.g., restrict external entity resolution / use `XSLTAccessControl`), audit ingestion pipelines for user-supplied XML.\n\n\u2b50\ufe0f CVE-2025-11344 / CVE-2025-11345 \u2014 ILIAS e-learning (RCE & insecure unserialize)\nAuthenticated upload/deserialization paths enable RCE / object injection. Action: patch to 10.2+ (or 8.24/9.14 where applicable); restrict cert upload features and sanitize serialized inputs.", "url": "https://t.me/bhhub/1168"}, {"timestamp": "2025-10-22T16:41:24Z", "date_only": false, "value": "2025-10-22T16:41:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-22T16:41:24Z", "date_only": false, "value": "2025-10-22T16:41:24+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-22T16:41:24Z", "date_only": false, "value": "2025-10-22T16:41:24+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-07T16:03:06.553Z", "date_only": false, "value": "2026-07-07T16:03:06.553792Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1520", "record": "PYSEC-2026-1520", "field": "published"}, {"timestamp": "2026-07-07T17:24:27.992Z", "date_only": false, "value": "2026-07-07T17:24:27.992602Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1520", "record": "PYSEC-2026-1520", "field": "modified"}, {"timestamp": "2026-07-26T07:01:47.279Z", "date_only": false, "value": "2026-07-26T07:01:47.279397Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/2283", "record": "CVE-2025-6985", "field": "creation_timestamp", "uuid": "4547422b-eb63-4b1e-a07c-4827f5c22860", "url": "https://t.me/zhatez/2283"}, {"timestamp": "2026-07-27T00:01:31.460Z", "date_only": false, "value": "2026-07-27T00:01:31.460848Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/2283", "record": "CVE-2025-6985", "field": "creation_timestamp", "uuid": "c61a1e52-2065-4175-a748-df5fcada3783", "url": "https://t.me/zhatez/2283"}, {"timestamp": "2026-07-28T23:00:04.530Z", "date_only": false, "value": "2026-07-28T23:00:04.530715Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/2283", "record": "CVE-2025-6985", "field": "creation_timestamp", "uuid": "f5a2a866-2678-4f8e-bd1b-41f951b23492", "url": "https://t.me/zhatez/2283"}, {"timestamp": "2026-07-29T00:00:10.454Z", "date_only": false, "value": "2026-07-29T00:00:10.454249Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/2283", "record": "CVE-2025-6985", "field": "creation_timestamp", "uuid": "f15ac947-5a1e-4b5e-a0d1-cc603fb86bb2", "url": "https://t.me/zhatez/2283"}, {"timestamp": "2026-10-19T16:10:00.260Z", "date_only": false, "value": "2026-10-19T16:10:00.260", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-6985", "record": "FKIE_CVE-2025-6985", "field": "lastModified"}, {"timestamp": "2026-10-27T05:56:26Z", "date_only": false, "value": "2026-10-27T05:56:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-27T05:56:26Z", "date_only": false, "value": "2026-10-27T05:56:26+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-27T05:56:26Z", "date_only": false, "value": "2026-10-27T05:56:26+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:18984", "record": "RHSA-2025:18984", "field": "document.tracking.current_release_date"}]}