{"vulnerability": "CVE-2025-2311", "sightings": [{"uuid": "d3dd1108-92d2-4b07-834c-8938f87c70ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "df686284-17ab-4866-a731-40516d9a4b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23118", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "02863b37-b5ea-4701-91d6-00c5305bf132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23117", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "461602cb-111f-4802-9fa8-6c9671f0ed35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "36630ee2-23a8-4236-8cd4-a5817af53e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23119", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "c9e54957-cf39-47df-86b4-77c53c4d947e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "5a8622cf-8b7e-437a-914d-2048b2a8f83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23111", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "87522d32-98aa-4669-95c6-2defe2be8b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23112", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "d6bd91dd-910d-4119-81ff-43bd242f3486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23110", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "00915c9c-3d46-4316-aa77-3e91d52439fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23118", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6035", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23118\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.\n\ud83d\udccf Published: 2025-03-01T01:52:36.138Z\n\ud83d\udccf Modified: 2025-03-01T01:52:36.138Z\n\ud83d\udd17 References:\n1. https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f", "creation_timestamp": "2025-03-01T02:27:21.000000Z"}, {"uuid": "c307bfcc-7864-426e-b909-326432b393bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8322", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2311\n\ud83d\udd25 CVSS Score: 9 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.This issue affects SecHard: before 3.3.0.20220411.\n\ud83d\udccf Published: 2025-03-20T11:55:51.628Z\n\ud83d\udccf Modified: 2025-03-21T06:38:05.955Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0074", "creation_timestamp": "2025-03-21T07:19:49.000000Z"}, {"uuid": "099edb47-5a03-4da4-9a1c-f339b8bde76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://t.me/cybersecplayground/106", "content": "\ud83d\udea8\ud83d\udea8 HACKER ALERT: UBIQUITI UNIFI CAMERAS UNDER ATTACK!\n\n\u26a0\ufe0f CVE-2025-23115: Remote Code Execution (RCE) = Total Camera Takeover!\n\u26a0\ufe0f CVE-2025-23116: Auth Bypass via Auto-Adopt Bridge.\n\n\ud83d\udd0d ZoomEye Dork:\napp=\"Ubiquiti UniFi Protect\"\n3.2K+ Vulnerable Hits!\n\n\ud83d\udd17 SHODAN Dork:\ntitle:\"UniFi Protect\"\n\n\ud83d\udd17 ZoomEye Search Link:\nZoomEye Link\n\n\ud83d\udcf0 Details:\nRead full details about these vulnerabilities and how hackers can hijack Ubiquiti UniFi Protect cameras:\n\ud83d\udd17 Read More\n\n\ud83d\udce2 Stay updated with more security alerts and insights:\n\ud83d\udc49 @cybersecplayground\n\n#CVE2025 #Ubiquiti #UniFiProtect #RCE #BugBounty #InfoSec #CyberSecurity #Vulnerability #RemoteCodeExecution", "creation_timestamp": "2025-02-22T10:36:33.000000Z"}, {"uuid": "f4bf844f-c429-4b6c-99e2-efe1f9de4013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://t.me/cvedetector/20730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2311 - Nebula Informatics SecHard Privileged API Abuse and Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-2311 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Nebula Informatics SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.This issue affects SecHard: before 3.3.0.20220411. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:39.000000Z"}, {"uuid": "dc072f57-4512-4bd0-ac38-499f607ae498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23112", "type": "seen", "source": "https://t.me/cvedetector/15011", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23112 - REDCap XSS Stored Injection\", \n  \"Content\": \"CVE ID : CVE-2025-23112 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : An issue was discovered in REDCap 14.9.6. A stored cross-site scripting (XSS) vulnerability allows authenticated users to inject malicious scripts into the Survey field name of Survey. When a user receive the survey, if he clicks on the field name, it triggers the XSS payload. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:23.000000Z"}, {"uuid": "41189245-e453-45b3-a565-9b53e9dc8d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23111", "type": "seen", "source": "https://t.me/cvedetector/15010", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23111 - REDCap HTML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23111 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing users to a redirection to a phishing website. An attacker can exploit this to trick the user that receives the survey into clicking on the field name, which redirects them to a phishing website. Thus, this allows malicious actions to be executed without user consent. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:20.000000Z"}, {"uuid": "2481cc7e-bed6-4113-833e-0bb2fe0b8926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23110", "type": "seen", "source": "https://t.me/cvedetector/15009", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23110 - REDCap Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-23110 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : An issue was discovered in REDCap 14.9.6. A Reflected cross-site scripting (XSS) vulnerability in the email-subject field exists while performing an upload of a CSV file containing a list of alert configurations. An attacker can send the victim a CSV file containing the XSS payload in the email-subject. Once the victim uploads the file, he automatically lands on a page to view the uploaded data. If the victim clicks on the email-subject value, it triggers the XSS payload. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:19.000000Z"}, {"uuid": "345c0646-a9d5-49ff-b164-6dac7c05989b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23113", "type": "seen", "source": "https://t.me/cvedetector/15006", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23113 - REDCap CSRF Logout Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23113 \nPublished : Jan. 10, 2025, 10:15 p.m. | 32\u00a0minutes ago \nDescription : An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a CSV file containing a list of alert configuration. An attacker can send the victim a CSV file containing an HTML injection payload in the alert-title. Once the victim uploads the file, he automatically lands on a page to view the uploaded data. If the victim click on the alert-title value, it can trigger a logout request and terminates their session, or redirect to a phishing website. This vulnerability stems from the absence of CSRF protections on the logout functionality. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T23:52:16.000000Z"}, {"uuid": "b6dcc5d3-b333-4d4b-a935-5ee668f30ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://t.me/cibsecurity/82590", "content": "\ud83e\udd85 Man-in-the-Middle Attack Risk: Veeam Urges Urgent Patching for CVE-2025-23114 \ud83e\udd85\n\nCyble ManintheMiddle Attack Risk Veeam Urges Urgent Patching for CVE202523114 \" dataimagecaption\"Cyble ManintheMiddle Attack Risk Veeam Urges Urgent Patching for CVE202523114 \" datamediumfile\"httpscyble.comwpcontentuploads202502CybleBlogsVeeam300x150.jpg\" datalargefile\"httpscyble.comwpcontentuploads202502CybleBlogsVeeam1024x512.jpg\" title\"ManintheMiddle Attack Risk Veeam Urges Urgent Patching for CVE202523114 1\"  Overview     Veeam has issued a security update to address a critical vulnerability CVE202523114 affecting its Veeam Updater component. This flaw allows attackers to execute arbitrary code remotely by leveraging a ManintheMiddle MitM attack. The vulnerability has a CVSS v3.1 score of 9.0, indicating a severe security risk. Users and administrators of affected products should up...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-02-10T12:45:53.000000Z"}, {"uuid": "fcac9b9b-a058-4f52-94e6-b5b4409aede8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "Telegram/gfc6vYO9yOVfSBt97p37noyMdmRcFemtGMtL2VbeRZ6woMQT", "content": "", "creation_timestamp": "2025-02-10T06:45:52.000000Z"}, {"uuid": "b336a12d-61bf-4b39-a9c1-d4a9e10bc1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "Telegram/6PXDWPi47-4TV43iKfRakuWwEDsJSMmlrkVIz3AqdldOG-MS", "content": "", "creation_timestamp": "2025-02-06T02:43:27.000000Z"}, {"uuid": "1a58947c-913c-43b4-a76c-75407b9d2a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "Telegram/l__iBkIlb1ZshJzCIkTPOOEpqNeAje9USScMp8-t0FuD3w", "content": "", "creation_timestamp": "2025-02-05T14:52:55.000000Z"}, {"uuid": "11eb5d63-2460-40de-9e16-9925eec4d448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "Telegram/QSz1yTOzb82bVMuPnbkspKqsLKsiaeO81Rox7_KUFFLvrk4", "content": "", "creation_timestamp": "2025-02-22T13:01:59.000000Z"}, {"uuid": "a8b540e9-81fd-401f-a41b-614a2ba5a91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "Telegram/QSz1yTOzb82bVMuPnbkspKqsLKsiaeO81Rox7_KUFFLvrk4", "content": "", "creation_timestamp": "2025-02-22T13:01:59.000000Z"}, {"uuid": "f2613793-8d7e-4b0b-98b7-d2f639b83e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23110", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7sxrkod2f", "content": "", "creation_timestamp": "2025-01-10T22:16:22.966597Z"}, {"uuid": "87deb2b5-b9f1-4591-a01d-b36f6be0bbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23111", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7szubux2x", "content": "", "creation_timestamp": "2025-01-10T22:16:25.140741Z"}, {"uuid": "f87f9087-2e7d-4d04-839a-d9fcd4884ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23112", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7t44wf52i", "content": "", "creation_timestamp": "2025-01-10T22:16:27.527922Z"}, {"uuid": "15d1b531-5ab2-4afc-8efb-513c2657a261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23112", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806369648337005", "content": "", "creation_timestamp": "2025-01-10T22:16:28.807252Z"}, {"uuid": "60f64fb8-fd74-4322-9b41-e0bedd242750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/techtales.bsky.social/post/3lhl23tsuxw2d", "content": "", "creation_timestamp": "2025-02-07T07:07:41.396328Z"}, {"uuid": "c0fe960f-ff35-459b-b5b7-6a74432bf8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/technijian.bsky.social/post/3lhgc4kqzh22p", "content": "", "creation_timestamp": "2025-02-05T09:47:58.092243Z"}, {"uuid": "991d832a-2579-4dbf-82b5-842cdb942b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhgnqjib2c2h", "content": "", "creation_timestamp": "2025-02-05T13:15:58.761167Z"}, {"uuid": "1530154b-e4ce-4d04-992a-305dae56d04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113951662369356599", "content": "", "creation_timestamp": "2025-02-05T14:06:21.521158Z"}, {"uuid": "cae7adec-d04c-4849-8fa1-ff2b00ea67a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhjatt7wyc2t", "content": "", "creation_timestamp": "2025-02-06T14:03:16.130300Z"}, {"uuid": "c73977a6-8021-4524-a2ce-baac1dc11e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113948811901159163", "content": "", "creation_timestamp": "2025-02-05T02:01:25.399484Z"}, {"uuid": "2ed48510-1d43-4dbe-a2ac-d27ddf364779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113948819496896713", "content": "", "creation_timestamp": "2025-02-05T02:03:21.289595Z"}, {"uuid": "edf1194b-f61d-48c5-bc46-d28353017220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfiu6u5lm2e", "content": "", "creation_timestamp": "2025-02-05T02:15:51.510803Z"}, {"uuid": "1b5ed106-0b30-4fe7-908c-8d955a7a3404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lhnricfcu62p", "content": "", "creation_timestamp": "2025-02-08T09:11:34.072904Z"}, {"uuid": "f12a0586-ec81-4f37-8557-dddc4f98bd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkspsiq2ef2v", "content": "", "creation_timestamp": "2025-03-20T12:40:22.197322Z"}, {"uuid": "855fb8dd-1d78-483d-bf66-def1473b4604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lhswuakht3a2", "content": "", "creation_timestamp": "2025-02-10T10:31:20.575071Z"}, {"uuid": "ca410a1c-38b1-488f-93a5-a76dfdda4a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lht7kw26pk2b", "content": "", "creation_timestamp": "2025-02-10T13:06:57.808071Z"}, {"uuid": "df762876-a965-478f-9e99-50d3d4ba61f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lko3pkyhkv26", "content": "", "creation_timestamp": "2025-03-18T16:30:10.598640Z"}, {"uuid": "286a8827-5dc8-43f9-a204-326c5398ac95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lko3pkyhkv26", "content": "", "creation_timestamp": "2025-03-18T16:30:10.678445Z"}, {"uuid": "8dabba4c-ffed-49d1-ae5b-1124f5a6ab6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114194893182150078", "content": "", "creation_timestamp": "2025-03-20T13:03:07.619369Z"}, {"uuid": "c14cbf2f-f4f9-4017-93c7-7d5a4f19627d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3li53kimxzua2", "content": "", "creation_timestamp": "2025-02-14T11:23:37.259945Z"}, {"uuid": "97e8ec61-4e43-4ff8-bf81-f597aff22c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3li5b5aghvja2", "content": "", "creation_timestamp": "2025-02-14T13:02:10.814963Z"}, {"uuid": "eea82217-03b6-4938-98a8-97b2096a363c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://t.me/cvedetector/17270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23114 - Veeam Man-in-the-Middle TLS Certificate Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-23114 \nPublished : Feb. 5, 2025, 2:15 a.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T04:56:41.000000Z"}, {"uuid": "0fecfcda-e70a-48ba-803f-c1a2ec1a9cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23118", "type": "seen", "source": "https://t.me/cvedetector/19205", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23118 - Ubiquiti UniFi Protect Camera Certificate Validation Weakness\", \n  \"Content\": \"CVE ID : CVE-2025-23118 \nPublished : March 1, 2025, 3:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T06:24:44.000000Z"}, {"uuid": "b6067441-70e9-43d7-8c1c-dedb9b6177a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23119", "type": "seen", "source": "https://t.me/cvedetector/19206", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23119 - Ubiquiti UniFi Protect Camera Improper Neutralization of Escape Sequences Authentication Bypass RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23119 \nPublished : March 1, 2025, 3:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent network. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T06:24:44.000000Z"}, {"uuid": "48785cc2-294a-43ae-867a-8e39e4bbbc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23117", "type": "seen", "source": "https://t.me/cvedetector/19204", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23117 - Ubiquiti UniFi Protect Camera Firmware Update Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-23117 \nPublished : March 1, 2025, 3:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T06:24:40.000000Z"}, {"uuid": "b71aa345-0092-49c7-96c4-cf58f79b103b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://t.me/cvedetector/19203", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23116 - Ubiquiti UniFi Protect Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-23116 \nPublished : March 1, 2025, 3:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras. \nSeverity: 9.6 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T06:24:39.000000Z"}, {"uuid": "44d883aa-020f-4333-8c94-37ccb2d22712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://t.me/cvedetector/19202", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23115 - \"UniFi Protect Cameras Use After Free RCE\"\", \n  \"Content\": \"CVE ID : CVE-2025-23115 \nPublished : March 1, 2025, 3:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T06:24:38.000000Z"}, {"uuid": "10156159-d6ab-4d8c-9932-07607fd57029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23117", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6033", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23117\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.\n\ud83d\udccf Published: 2025-03-01T01:52:36.149Z\n\ud83d\udccf Modified: 2025-03-01T01:52:36.149Z\n\ud83d\udd17 References:\n1. https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f", "creation_timestamp": "2025-03-01T02:27:20.000000Z"}, {"uuid": "ac5c4ece-b15c-4b9b-b8b8-ad4a34405fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23116\n\ud83d\udd25 CVSS Score: 9.6 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras.\n\ud83d\udccf Published: 2025-03-01T01:52:36.160Z\n\ud83d\udccf Modified: 2025-03-01T01:52:36.160Z\n\ud83d\udd17 References:\n1. https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f", "creation_timestamp": "2025-03-01T02:27:16.000000Z"}, {"uuid": "f69ef307-fc54-491b-8ec8-ce72f14d0764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23119", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23119\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent network.\n\ud83d\udccf Published: 2025-03-01T01:52:36.226Z\n\ud83d\udccf Modified: 2025-03-01T01:52:36.226Z\n\ud83d\udd17 References:\n1. https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f", "creation_timestamp": "2025-03-01T02:27:15.000000Z"}, {"uuid": "30b35875-e66e-4926-8326-5e1911db65c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23115\n\ud83d\udd25 CVSS Score: 9 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network.\n\ud83d\udccf Published: 2025-03-01T01:52:36.149Z\n\ud83d\udccf Modified: 2025-03-01T01:52:36.149Z\n\ud83d\udd17 References:\n1. https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f", "creation_timestamp": "2025-03-01T02:27:20.000000Z"}, {"uuid": "7b2e337e-a51c-4c95-b0f4-7f729c1994ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://t.me/cybersecplayground/106", "content": "\ud83d\udea8\ud83d\udea8 HACKER ALERT: UBIQUITI UNIFI CAMERAS UNDER ATTACK!\n\n\u26a0\ufe0f CVE-2025-23115: Remote Code Execution (RCE) = Total Camera Takeover!\n\u26a0\ufe0f CVE-2025-23116: Auth Bypass via Auto-Adopt Bridge.\n\n\ud83d\udd0d ZoomEye Dork:\napp=\"Ubiquiti UniFi Protect\"\n3.2K+ Vulnerable Hits!\n\n\ud83d\udd17 SHODAN Dork:\ntitle:\"UniFi Protect\"\n\n\ud83d\udd17 ZoomEye Search Link:\nZoomEye Link\n\n\ud83d\udcf0 Details:\nRead full details about these vulnerabilities and how hackers can hijack Ubiquiti UniFi Protect cameras:\n\ud83d\udd17 Read More\n\n\ud83d\udce2 Stay updated with more security alerts and insights:\n\ud83d\udc49 @cybersecplayground\n\n#CVE2025 #Ubiquiti #UniFiProtect #RCE #BugBounty #InfoSec #CyberSecurity #Vulnerability #RemoteCodeExecution", "creation_timestamp": "2025-02-22T10:36:33.000000Z"}, {"uuid": "f7a75864-b9e7-4bf0-ad79-428f325c0287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://t.me/CyberBulletin/2871", "content": "\u26a1CVE-2025-23115 & CVE-2025-23116: Hackers Can Hijack Ubiquiti UniFi Protect Cameras.\n\n#CyberBulletin", "creation_timestamp": "2025-04-01T04:04:04.000000Z"}, {"uuid": "04abe625-7809-42da-9e39-d276c58df5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://t.me/CyberBulletin/2871", "content": "\u26a1CVE-2025-23115 & CVE-2025-23116: Hackers Can Hijack Ubiquiti UniFi Protect Cameras.\n\n#CyberBulletin", "creation_timestamp": "2025-04-01T04:04:04.000000Z"}, {"uuid": "2e8db3a5-4ce0-4d4f-be63-444a051956b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "Telegram/mTfiU0dlY3KEIDK2A8kuRqEPDR9EIT-ikjWv_HUn2oYJG88", "content": "", "creation_timestamp": "2025-03-20T14:00:26.000000Z"}, {"uuid": "eb720509-d5b7-446b-a50c-0b59a26eff5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23111", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806310650290768", "content": "", "creation_timestamp": "2025-01-10T22:01:28.620796Z"}, {"uuid": "30380d39-744f-4879-bcd7-148d7741dc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23113", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806369662260579", "content": "", "creation_timestamp": "2025-01-10T22:16:29.167262Z"}, {"uuid": "4252bf7e-908e-4042-bcd3-bd5272e7fe4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23113", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfg7t6ou7p2k", "content": "", "creation_timestamp": "2025-01-10T22:16:30.353337Z"}, {"uuid": "a423fc39-9615-4617-83c6-5e46b900c395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23110", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbddixfx2r", "content": "", "creation_timestamp": "2025-01-10T22:43:29.825107Z"}, {"uuid": "342b1c71-4453-478d-a660-8a18c160daf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23111", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbddmhub25", "content": "", "creation_timestamp": "2025-01-10T22:43:30.408457Z"}, {"uuid": "eb833556-bf62-49fa-a786-1bda6414260b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23112", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbddrylm2k", "content": "", "creation_timestamp": "2025-01-10T22:43:31.078910Z"}, {"uuid": "d72fde6e-af06-4892-8801-37c9a8f158e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23113", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgbddvsid2g", "content": "", "creation_timestamp": "2025-01-10T22:43:31.685351Z"}, {"uuid": "c85dcb50-3776-4496-b94e-08542c36ea27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113948996660718135", "content": "", "creation_timestamp": "2025-02-05T02:48:24.842140Z"}, {"uuid": "1259587e-d5dc-4eac-a6d7-583e7480a742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhfvm5mzsw2z", "content": "", "creation_timestamp": "2025-02-05T06:04:00.207786Z"}, {"uuid": "d18edefb-d2db-4681-b279-41855e5b6c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3lhkbxej5n22v", "content": "", "creation_timestamp": "2025-02-06T23:55:41.929533Z"}, {"uuid": "bc9e9c9f-ec3d-4d90-bbaf-70aaa254ffc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhhay3kn2g2w", "content": "", "creation_timestamp": "2025-02-05T19:00:12.149367Z"}, {"uuid": "65c03265-b234-40c6-ab1d-b35740532bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114088884159028871", "content": "", "creation_timestamp": "2025-03-01T19:43:38.320361Z"}, {"uuid": "4a13c044-5f1d-432e-9675-8b3707d34d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114088884159028871", "content": "", "creation_timestamp": "2025-03-01T19:43:38.391582Z"}, {"uuid": "cf10f649-29a6-484a-b350-c184bea8de10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3li2vtkoddoi2", "content": "", "creation_timestamp": "2025-02-13T14:34:41.891977Z"}, {"uuid": "7c31129f-ed12-4e43-a235-c60ee8db0ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkv2o5goaj2t", "content": "", "creation_timestamp": "2025-03-21T11:00:08.078171Z"}, {"uuid": "ab561694-695e-47fa-a731-c7a520971457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23117", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-379/", "content": "", "creation_timestamp": "2025-06-11T03:00:00.000000Z"}, {"uuid": "befc8515-6d52-42f5-b17b-011e053da1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-378/", "content": "", "creation_timestamp": "2025-06-11T03:00:00.000000Z"}, {"uuid": "42fe1554-adb0-447e-a624-993fdfbfd3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23119", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-377/", "content": "", "creation_timestamp": "2025-06-11T03:00:00.000000Z"}, {"uuid": "602473fc-1c8f-444b-a6b8-08b461233a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23118", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-376/", "content": "", "creation_timestamp": "2025-06-11T03:00:00.000000Z"}, {"uuid": "44951d78-4c18-42ba-a782-0f394e20ef49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23113", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1249", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23113\n\ud83d\udd39 Description: An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a CSV file containing a list of alert configuration. An attacker can send the victim a CSV file containing an HTML injection payload in the alert-title. Once the victim uploads the file, he automatically lands on a page to view the uploaded data. If the victim click on the alert-title value, it can trigger a logout request and terminates their session, or redirect to a phishing website. This vulnerability stems from the absence of CSRF protections on the logout functionality.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T21:57:46.646723\n\ud83d\udd17 References:\n1. https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE_XXX/README.md", "creation_timestamp": "2025-01-10T22:04:48.000000Z"}, {"uuid": "da3d557e-e0c3-430a-b371-bf736cf92a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23111", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1247", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23111\n\ud83d\udd39 Description: An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing users to a redirection to a phishing website. An attacker can exploit this to trick the user that receives the survey into clicking on the field name, which redirects them to a phishing website. Thus, this allows malicious actions to be executed without user consent.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T21:58:11.247834\n\ud83d\udd17 References:\n1. https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE_YYYY/README.md", "creation_timestamp": "2025-01-10T22:04:37.000000Z"}, {"uuid": "9e35fe8d-5686-415c-ae68-dd78598b4f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23110", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1246", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23110\n\ud83d\udd39 Description: An issue was discovered in REDCap 14.9.6. A Reflected cross-site scripting (XSS) vulnerability in the email-subject field exists while performing an upload of a CSV file containing a list of alert configurations. An attacker can send the victim a CSV file containing the XSS payload in the email-subject. Once the victim uploads the file, he automatically lands on a page to view the uploaded data. If the victim clicks on the email-subject value, it triggers the XSS payload.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T21:58:21.149537\n\ud83d\udd17 References:\n1. https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE_VVVVVV/README.md", "creation_timestamp": "2025-01-10T22:04:29.000000Z"}, {"uuid": "e3c94fad-f34e-478a-8483-50429d9ae020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23112", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23112\n\ud83d\udd39 Description: An issue was discovered in REDCap 14.9.6. A stored cross-site scripting (XSS) vulnerability allows authenticated users to inject malicious scripts into the Survey field name of Survey. When a user receive the survey, if he clicks on the field name, it triggers the XSS payload.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T21:57:55.946248\n\ud83d\udd17 References:\n1. https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE_ZZZZ/README.md", "creation_timestamp": "2025-01-10T22:04:44.000000Z"}, {"uuid": "f5090320-6f76-4187-a3d3-88c532fdfb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://t.me/Lviathan404/6553", "content": "New Veeam Flaw Allows Arbitrary Code Execution via Man-in-the-Middle Attack\n\nVeeam patches CVE-2025-23114, a critical flaw (CVSS 9.0) allowing root-level code execution via MITM attacks.\n\nThe Hacker News | thehackernews.com \u2022 Feb 5, 2025", "creation_timestamp": "2025-02-09T14:36:22.000000Z"}, {"uuid": "0963c00e-a705-47b3-99e8-1305ba4ec59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://t.me/true_secator/6703", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u0440\u0430\u0442\u0446\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD Zen.\n\nCVE-2024-56161 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430.\n\n\u0410\u0442\u0430\u043a\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 AMD Secure Encrypted Virtualization \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 - Zen 1 \u2014 Zen 4.\n\nAMD \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a.\n\n2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u043a\u043e\u043b\u043e 150 AWS S3 buckets, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b\u0438 \u043d\u044b\u043d\u0435 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c \u0438 open-source \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441 \u043d\u0438\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b \u0438\u0434\u0442\u0438 \u0442\u0440\u0430\u0444\u0438\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 (\u0438 \u0434\u0430\u0436\u0435 \u0432\u043e\u0435\u043d\u043d\u044b\u0445) \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500. \n\n\u0421\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n3. \u0418\u043d\u0436\u0435\u043d\u0435\u0440 \u0420\u0430\u0439\u043a \u0428\u043d\u0430\u0439\u0434\u0435\u0440 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u043e\u043c DLL \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Sysinternal \u043e\u0442 Microsoft.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 90-\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u0441\u0440\u043e\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n4. Netgear \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u00a0RCE\u00a0\u0432 WiFi-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Aqua \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u00a0\u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 OPA Gatekeeper, \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438 Kubernetes.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041f\u0430\u043b\u0430\u043d\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u043e\u0432\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 10 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043f\u0435\u0440\u0432\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 35.\n\n7. Veeam \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Veeam Backup \u0434\u043b\u044f Salesforce, Nutanix AHV, AWS, Microsoft Azure, Google Cloud, Oracle Linux Virtualization Manager \u0438 Red Hat Virtualization.\n\nCVE-2025-23114 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,0 \u0438\u0437 10,0 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c MiTM-\u0430\u0442\u0430\u043a\u0443  \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.", "creation_timestamp": "2025-02-05T18:30:05.000000Z"}, {"uuid": "e55832c3-6815-4900-92a4-6e6a4d76ac32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://t.me/thehackernews/6291", "content": "\ud83d\uded1 Security Alert for Veeam Users! CVE-2025-23114 has a CVSS score of 9.0.\n\nThis new critical Man-in-the-Middle attack could allow hackers to execute arbitrary code on your servers.\n\n\u2705 Fix is Available! Check out the details here: https://thehackernews.com/2025/02/new-veeam-flaw-allows-arbitrary-code.html", "creation_timestamp": "2025-02-05T13:19:49.000000Z"}, {"uuid": "172c06a5-4b9a-42a9-9047-0e8b9b637f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23110", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113806310636835012", "content": "", "creation_timestamp": "2025-01-10T22:01:30.723249Z"}, {"uuid": "f88d2c74-8349-4a7e-b515-ed14ab9783d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/shoebhakim.bsky.social/post/3lhgl2es6bm23", "content": "", "creation_timestamp": "2025-02-05T12:27:46.213758Z"}, {"uuid": "d84f483f-2cbc-4796-908f-8b8a85b93ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhglbenzpp2r", "content": "", "creation_timestamp": "2025-02-05T12:31:40.918562Z"}, {"uuid": "9239f774-a34d-4d65-a8a3-640e8e3ce490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhgzswg4ln23", "content": "", "creation_timestamp": "2025-02-05T16:52:03.120067Z"}, {"uuid": "748c9ac9-42c2-401b-967e-9b46427456ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://thehackernews.com/2025/02/new-veeam-flaw-allows-arbitrary-code.html", "content": "", "creation_timestamp": "2025-02-05T11:16:00.000000Z"}, {"uuid": "84cf2b76-f598-427a-82cc-d55a167d8dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhflydyni22c", "content": "", "creation_timestamp": "2025-02-05T03:11:53.356196Z"}, {"uuid": "fb0f1277-d2bd-44d6-bd8e-aa273bf1d3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lhjjep4j262o", "content": "", "creation_timestamp": "2025-02-06T16:35:44.793213Z"}, {"uuid": "a5dd72b4-af8e-46fc-be1c-51cbaf13bde8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23114", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3lhkbsznzx22v", "content": "", "creation_timestamp": "2025-02-06T23:53:17.249881Z"}, {"uuid": "ae3cf6f1-4178-4424-9b03-a1b21ff5dae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lktsgo6gkr2d", "content": "", "creation_timestamp": "2025-03-20T23:00:07.297324Z"}, {"uuid": "ce179e5b-599e-4172-b2cc-f6835b674921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksu6ilpy22w", "content": "", "creation_timestamp": "2025-03-20T13:58:39.596789Z"}, {"uuid": "2d4fc61c-4104-4d1b-9c6a-a6dd18e7c02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2311", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114195307124548249", "content": "", "creation_timestamp": "2025-03-20T14:48:24.115764Z"}, {"uuid": "977646a8-e4b9-412e-ae6a-1c6a6145a4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114089102309160033", "content": "", "creation_timestamp": "2025-03-01T20:39:07.642708Z"}, {"uuid": "0dabe8c3-110f-4ee5-b242-06e8384c3166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114085601805636513", "content": "", "creation_timestamp": "2025-03-01T05:48:53.626729Z"}, {"uuid": "75e7ad50-96e0-4cb9-ba78-088ec60b2afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114085601841202630", "content": "", "creation_timestamp": "2025-03-01T05:48:54.295187Z"}, {"uuid": "d06bcb2e-b3f6-41a7-816a-862276b3b9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lio52ao6nk2s", "content": "", "creation_timestamp": "2025-02-21T06:03:43.947216Z"}, {"uuid": "56812ed8-0a97-41c2-81a8-d89fd13fbf0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lio52ao6nk2s", "content": "", "creation_timestamp": "2025-02-21T06:03:44.010127Z"}, {"uuid": "5e62b5c4-07cb-4e64-a389-1c5748260d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lio52kijak2k", "content": "", "creation_timestamp": "2025-02-21T06:03:50.823339Z"}, {"uuid": "b02f1c2d-ac2f-411b-b8b0-667ff72ff59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lio52kijak2k", "content": "", "creation_timestamp": "2025-02-21T06:03:50.904769Z"}, {"uuid": "cf3b1a4e-ee55-4399-8587-af9dd6d60d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-23115", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lio5i33jsk2g", "content": "", "creation_timestamp": "2025-02-21T06:11:23.015063Z"}, {"uuid": "b8c9ee41-9196-48eb-aba5-c66099045d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-23116", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lio5i33jsk2g", "content": "", "creation_timestamp": "2025-02-21T06:11:23.075966Z"}, {"uuid": "a8324bdc-4269-4ff1-b9c5-f352ee833e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23115", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3liofytij2e25", "content": "", "creation_timestamp": "2025-02-21T08:43:55.216921Z"}, {"uuid": "c894dbe4-5a8d-4d4a-bab5-fbb3274a50c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23116", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3liofytij2e25", "content": "", "creation_timestamp": "2025-02-21T08:43:55.274223Z"}]}