{"metadata": {"vulnerability": "cve-2025-20236", "count": 48, "kinds": {"milestone": 8, "sighting": 20, "kev": 0, "other": 20}}, "data": [{"timestamp": "2024-10-10T19:15:13.237Z", "date_only": false, "value": "2024-10-10T19:15:13.237Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-20236", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0134", "record": "NCSC-2025-0134", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": true, "value": "2025-04-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0326", "record": "CERTFR-2025-AVI-0326", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-16T15:56:56Z", "date_only": false, "value": "2025-04-16T15:56:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "record": "CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-16T15:57:08Z", "date_only": false, "value": "2025-04-16T15:57:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "record": "CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-16T16:00:00Z", "date_only": false, "value": "2025-04-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "record": "CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-16T16:00:00Z", "date_only": false, "value": "2025-04-16T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "record": "CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-16T16:00:00Z", "date_only": false, "value": "2025-04-16T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "record": "CISCO-SA-WEBEX-APP-CLIENT-RCE-UFYMMYLC", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-16T16:16:23.291Z", "date_only": false, "value": "2025-04-16T16:16:23.291Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-20236", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-16T17:15:49Z", "date_only": false, "value": "2025-04-16T17:15:49Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RV87-H47C-M27V", "record": "GHSA-RV87-H47C-M27V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-16T17:15:49.573Z", "date_only": false, "value": "2025-04-16T17:15:49.573", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20236", "record": "FKIE_CVE-2025-20236", "field": "published"}, {"timestamp": "2025-04-16T17:45:31.016Z", "date_only": false, "value": "2025-04-16T17:45:31.016Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "cve-2025-20236", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-16T18:31:53Z", "date_only": false, "value": "2025-04-16T18:31:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RV87-H47C-M27V", "record": "GHSA-RV87-H47C-M27V", "field": "published"}, {"timestamp": "2025-04-16T18:31:53Z", "date_only": false, "value": "2025-04-16T18:31:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RV87-H47C-M27V", "record": "GHSA-RV87-H47C-M27V", "field": "modified"}, {"timestamp": "2025-04-16T18:48:27.329Z", "date_only": false, "value": "2025-04-16T18:48:27.329712Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114349133435273045", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "e09a3744-4e38-464e-93d7-b7dbb03ac569", "url": "https://mastodon.social/users/CyberSignaler/statuses/114349133435273045"}, {"timestamp": "2025-04-16T20:14:24Z", "date_only": false, "value": "2025-04-16T20:14:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/23135", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "e21aec02-02bc-42ba-b7a1-9a1f5fe4a6ce", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-20236 - \"Cisco Webex App URL Parser Remote Command Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-20236 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user.  \n  \n This vulnerability is due to insufficient input validation when Cisco Webex App processes a meeting invite link. An attacker could exploit this vulnerability by persuading a user to click a crafted meeting invite link and download arbitrary files. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the targeted user. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/23135"}, {"timestamp": "2025-04-16T22:00:00Z", "date_only": false, "value": "2025-04-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0843", "record": "WID-SEC-W-2025-0843", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-16T22:00:00Z", "date_only": false, "value": "2025-04-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0843", "record": "WID-SEC-W-2025-0843", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-16T22:00:00Z", "date_only": false, "value": "2025-04-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0843", "record": "WID-SEC-W-2025-0843", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-16T22:00:00Z", "date_only": false, "value": "2025-04-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0843", "record": "WID-SEC-W-2025-0843", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-17T00:00:00Z", "date_only": false, "value": "2025-04-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0326", "record": "CERTFR-2025-AVI-0326", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-17T03:18:34.507Z", "date_only": false, "value": "2025-04-17T03:18:34.507447Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmy5hnuzj22l", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "3bc1bdc5-bd8a-4b48-a1c0-9f9e8ec59db1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmy5hnuzj22l"}, {"timestamp": "2025-04-17T03:55:23.959Z", "date_only": false, "value": "2025-04-17T03:55:23.959624Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-20236", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-17T03:55:23.959Z", "date_only": false, "value": "2025-04-17T03:55:23.959624Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20236", "record": "FKIE_CVE-2025-20236", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-17T04:57:28Z", "date_only": false, "value": "2025-04-17T04:57:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12187", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "e4cbd284-5d79-479b-99dc-1c237087bc84", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-20236\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user.\n\nThis vulnerability is due to insufficient input validation when Cisco Webex App processes a meeting invite link. An attacker could exploit this vulnerability by persuading a user to click a crafted meeting invite link and download arbitrary files. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the targeted user.\n\ud83d\udccf Published: 2025-04-16T16:16:23.291Z\n\ud83d\udccf Modified: 2025-04-17T03:55:22.841Z\n\ud83d\udd17 References:\n1. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-client-rce-ufyMMYLC", "url": "https://t.me/DarkWebInformer_CVEAlerts/12187"}, {"timestamp": "2025-04-17T07:11:41.369Z", "date_only": false, "value": "2025-04-17T07:11:41.369333Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0134", "record": "NCSC-2025-0134", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-17T07:11:41.369Z", "date_only": false, "value": "2025-04-17T07:11:41.369333Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0134", "record": "NCSC-2025-0134", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-17T07:11:41.369Z", "date_only": false, "value": "2025-04-17T07:11:41.369333Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0134", "record": "NCSC-2025-0134", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-17T09:23:01.995Z", "date_only": false, "value": "2025-04-17T09:23:01.995295Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmyrtdpa2k2g", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "8e7c4a53-b3e3-4967-9373-280bcb08d96d", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lmyrtdpa2k2g"}, {"timestamp": "2025-04-17T10:42:53.515Z", "date_only": false, "value": "2025-04-17T10:42:53.515+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0843", "record": "WID-SEC-W-2025-0843", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-18T13:24:15.817Z", "date_only": false, "value": "2025-04-18T13:24:15.817829Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114359183287772535", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "5eadc919-b69e-4e89-8066-d448065b8c77", "url": "https://infosec.exchange/users/cR0w/statuses/114359183287772535"}, {"timestamp": "2025-04-18T14:04:00.739Z", "date_only": false, "value": "2025-04-18T14:04:00.739740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ln3ryr3zke2t", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "85429666-4551-4563-a984-833da2f8e6e5", "url": "https://bsky.app/profile/hackingne.ws/post/3ln3ryr3zke2t"}, {"timestamp": "2025-04-18T20:11:31.726Z", "date_only": false, "value": "2025-04-18T20:11:31.726176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ln4gjwl7qk2e", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "9d4d48ae-8316-4fd8-a058-87383ec73490", "url": "https://bsky.app/profile/hackingne.ws/post/3ln4gjwl7qk2e"}, {"timestamp": "2025-04-19T02:10:47.965Z", "date_only": false, "value": "2025-04-19T02:10:47.965638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ln52mdyw472b", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "9873a418-588c-41bb-9f71-ae4266fe6843", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3ln52mdyw472b"}, {"timestamp": "2025-04-19T02:11:18.936Z", "date_only": false, "value": "2025-04-19T02:11:18.936571Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ln52nbrsyt25", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "9314f8fd-6635-4fb1-a1a6-c5ad2ec1e222", "url": "https://bsky.app/profile/hackingne.ws/post/3ln52nbrsyt25"}, {"timestamp": "2025-04-19T02:11:19.505Z", "date_only": false, "value": "2025-04-19T02:11:19.505640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ln52nbvnpz2n", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "b0571a0a-421a-4231-9866-8f508f76a153", "url": "https://bsky.app/profile/hackingne.ws/post/3ln52nbvnpz2n"}, {"timestamp": "2025-04-19T08:30:10.952Z", "date_only": false, "value": "2025-04-19T08:30:10.952534Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3ln5psqqibh27", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "3527f5a8-da42-4b72-9374-ac560e1e9f7d", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3ln5psqqibh27"}, {"timestamp": "2025-04-19T14:59:01.042Z", "date_only": false, "value": "2025-04-19T14:59:01.042552Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114365217950639273", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "cabec482-21c9-41fc-a916-9300553622da", "url": "https://mstdn.ca/users/rfwaveio/statuses/114365217950639273"}, {"timestamp": "2025-04-20T23:19:56.793Z", "date_only": false, "value": "2025-04-20T23:19:56.793325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnbryoolif2b", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "9e55d901-dee5-4865-bf71-b3d8c0f6c17c", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnbryoolif2b"}, {"timestamp": "2025-04-23T02:52:16.056Z", "date_only": false, "value": "2025-04-23T02:52:16.056163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lnh6s3clwk2o", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "3c63b636-cc55-4619-97b4-09904c6bca12", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lnh6s3clwk2o"}, {"timestamp": "2025-04-23T19:49:59Z", "date_only": false, "value": "2025-04-23T19:49:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1125", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "64cd6070-2eb6-41e9-b418-e8b9b18ee719", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647 URL \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u06a9\u0646\u0641\u0631\u0627\u0646\u0633 \u0648\u0628 Cisco Webex App \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0634\u0645\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0641\u0627\u06cc\u0644 \u0631\u0627 \u0627\u0632 \u06cc\u06a9 \u0645\u0646\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631 \u062f\u0627\u0646\u0644\u0648\u062f \u06a9\u0646\u06cc\u062f. \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0631 \u0631\u0648\u06cc \u06cc\u06a9 \u067e\u06cc\u0648\u0646\u062f \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u06a9\u0644\u06cc\u06a9 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\nBDU: 2025-04707\nCVE-2025-20236\n\n\u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0647\u0627\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0631\u0627\u06cc \u062f\u0646\u0628\u0627\u0644 \u06a9\u0631\u062f\u0646 \u067e\u06cc\u0648\u0646\u062f\u0647\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u062d\u06cc\u0637 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0628\u0631\u0627\u06cc \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u0644\u06cc\u0646\u06a9 \u0647\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631.\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0622\u0646\u062a\u06cc \u0648\u06cc\u0631\u0648\u0633 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0644\u06cc\u0646\u06a9 \u0647\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631.\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0646\u0641\u0648\u0630 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u060c \u062b\u0628\u062a) \u0648 \u067e\u0627\u0633\u062e \u0628\u0647 \u062a\u0644\u0627\u0634 \u0647\u0627 \u0628\u0631\u0627\u06cc \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc.\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-client-rce-ufyMMYLC\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR", "url": "https://t.me/ics_cert/1125"}, {"timestamp": "2025-08-09T13:26:57Z", "date_only": false, "value": "2025-08-09T13:26:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "508977c6-7cbc-40fe-9d6b-1601ba28630b"}, {"timestamp": "2025-08-11T18:47:40Z", "date_only": false, "value": "2025-08-11T18:47:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "e539adcf-9287-46b9-b985-c4f4a8e1cd34"}, {"timestamp": "2026-02-26T18:28:13.508Z", "date_only": false, "value": "2026-02-26T18:28:13.508Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-20236", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:28:13.508Z", "date_only": false, "value": "2026-02-26T18:28:13.508Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-20236", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:41:09.140Z", "date_only": false, "value": "2026-06-17T08:41:09.140", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20236", "record": "FKIE_CVE-2025-20236", "field": "lastModified"}, {"timestamp": "2026-07-20T22:00:04.161Z", "date_only": false, "value": "2026-07-20T22:00:04.161168Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/333", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "1139b421-8344-4090-ac7f-ca4ac71d1bb3", "content": "Remote Code Execution Risk Emerges in Popular Communication Software\n\nCisco has released security updates addressing a high-severity vulnerability in its Webex application, identified as CVE-2025-20236. This flaw enables unauthenticated attackers to execute arbitrary code on a user's system by sending specially crafted meeting invite links. The vulnerability stems from insufficient input validation in the Webex app's custom URL parser, affecting all operating systems and configurations.\n\n\ud83d\udd17 Read More", "url": "https://t.me/pphm_HackerNews/333"}, {"timestamp": "2026-08-14T16:00:17.562Z", "date_only": false, "value": "2026-08-14T16:00:17.562760Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/534", "record": "CVE-2025-20236", "field": "creation_timestamp", "uuid": "d9796b8c-f468-4378-8a2f-a008ff14dd77", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-24054 \u2014 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 NTLM \u0432 Windows. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c relay-\u0430\u0442\u0430\u043a\u0438, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044f \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044f NTLM-\u0445\u044d\u0448\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\ud83d\udd35 CVE-2025-32433 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SSH-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 Erlang/OTP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c Erlang/OTP SSH.\n\n\ud83d\udd35 CVE-2025-20236 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Cisco Webex App, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35 CVE-2024-46986 \u0438 CVE-2024-46987 \u2014 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 Camaleon CMS. CVE \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f RCE, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 XSS.\u200b\n\n\ud83d\udd35 CVE-2025-39596 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Quentn WP \u0434\u043b\u044f WordPress, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441\u043e \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0435\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0430\u0439\u0442\u043e\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/534"}]}