https://vulnerability.circl.lu/sightings/feed 2026-09-17T15:45:40.868434+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/434cc78a-3d00-435c-a184-5cfc548d3362/export 2026-09-17T15:45:40.901760+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "434cc78a-3d00-435c-a184-5cfc548d3362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48757", "type": "seen", "source": "https://gist.github.com/joyelgeorge/657593108ec060655ec7dcee2b2b426e", "content": "# Our scanner called 19 apps critical. After hand-verifying all 22, seven had something worth sending.\n\n*Every number below is our own scanner's. We have not benchmarked anyone else's\ntool and are not making any claim about one. No repository or business is named,\nbecause several of these findings are real and still unfixed.*\n\n---\n\n## The short version\n\nWe built a static scanner for vibe-coded apps \u2014 the Lovable / Bolt / v0 / Cursor\nstack on Supabase. It looks for the things that actually leak: `service_role`\nkeys in client bundles, tables with Row Level Security switched off, admin routes\nwith no auth, open CORS.\n\nIt produced 22 leads, and reported **19 of them as carrying CRITICAL findings.**\n\nWe then hand-verified all 22 from fresh clones. **Five had a real exposed\nsecret. Seven had a finding compelling enough to write to the owner about** \u2014\nthose five, plus two with genuinely reachable command injection.\n\nSo: **19 CRITICAL headlines, 7 things worth sending.**\n\n**What that is not: a 68% false-positive rate.** The other fifteen were not\nclean. Most had real missing-RLS findings \u2014 genuinely unprotected tables, worth\nfixing. What failed was the **headline**: the severity ranking that put all\nnineteen in the same CRITICAL bucket as an exposed `service_role` key, and the\narithmetic underneath it. A true finding, counted wrongly and ranked wrongly, is\na different failure from a finding that isn't there, and conflating the two\nwould be the same inflation in the opposite direction.\n\nWe are publishing the gap because we have not seen anyone else publish theirs,\nand because the specific ways a scanner is wrong turn out to be more useful than\nthe fact that it is.\n\n## The four ways it lied\n\nEach row is a measurement, not an estimate. Each is our own detector.\n\n### 1. Counting findings instead of problems \u2014 70 criticals, 12 files\n\nThe missing-RLS detector emits **one finding per unprotected table.** In one\nrepository that produced **70 CRITICAL findings, spread across 12 files.**\n\nSeventy is not a lie about the code \u2014 every one of those tables really is\nunprotected. It is a lie about the *shape of the work*. The developer reading\n\"70 criticals\" is picturing seventy separate defects. The number that tells them\nwhat their afternoon looks like is **12**, and probably fewer distinct causes\nthan that, since RLS omissions cluster in whole schema files rather than\nappearing one table at a time.\n\nWe are deliberately not saying \"it was really one migration.\" We measured 70\nfindings and 12 files. We did not count distinct root causes, so we will not\nreport one.\n\n**The fix:** report distinct problems and distinct files, never the raw total. A\ncount without a unit is not a count \u2014 and if you have not counted causes, do not\nquote a cause count.\n\n### 2. Grepping for auth instead of understanding it \u2014 6 of 6 false\n\nThe unauthenticated-admin-route detector scanned admin route files for\nauth-shaped tokens: `auth`, `session`, `requireAuth`, `getServerSession`.\n\nOne codebase had six admin routes and the detector flagged **all six**. All six\nwere guarded. They called a helper:\n\n```js\nrequireSuperAdmin(req)\n```\n\n`requireSuperAdmin` contains none of the words the detector looked for, and\n\"unauthenticated\" appearing in an error string does not match a `\\bauth\\b`\npattern. The detector did not miss a subtle bypass \u2014 it missed the single most\ncommon way a competent team writes authorisation, which is **once, in a helper,\ncalled everywhere.**\n\nThe cruel part: **any codebase that centralises its auth check trips this.** The\nbetter the codebase, the more likely the false positive.\n\n**The fix:** look for delegated guards \u2014 a call to `require*`, `assert*`,\n`ensure*`, `verify*`, `check*`, `validate*`, or anything named `*Guard`,\n`*Permission`, `*Authoriz*` \u2014 before claiming a route is naked. The call matters,\nnot the import: a helper imported and never invoked protects nothing.\n\n### 3. Flagging code no attacker can reach \u2014 4 of 4 unreachable\n\nFour `command-injection` findings in one repository. All four were real string\ninterpolation into a shell command. All four interpolated **`process.env`\nvalues, in a local script that no HTTP request touches.**\n\nThere is no untrusted input. There is no request path. It is a developer's own\nenvironment variable going into a developer's own script on a developer's own\nmachine.\n\n**The fix:** a reachability check before an injection finding is reported. Can\nuntrusted input actually get here? Code in a build script, a CLI or a test\nfixture is not an attack surface, and reporting it as one is how a report earns\nthe label \"noise\".\n\nWorth being clear that this is a discriminator, not a dismissal: **two other\nrepositories had command-injection findings that were reachable**, and both are\non the list of seven worth sending. The class is not noise. The check is what\ntells the two apart.\n\n### 4. Being right but stale\n\nSupabase auto-revokes keys it detects as leaked. A finding can be dead before\nanyone reads it. Disclosing a key that was rotated last week is worse than saying\nnothing \u2014 it is the fastest way to be dismissed by someone who checked.\n\n**The fix:** stamp every finding with when it was observed, and re-verify before\nit reaches a human. Freshness is part of correctness.\n\n## What *was* real\n\nThis is not an argument that vibe-coded apps are fine. They are not, and our\nre-audit made the real findings sharper, not softer:\n\n- **Five repositories had a genuine exposed secret** present in the source. One\n had nine. We did not test whether any of them still worked \u2014 that would mean\n using someone else's credential, which we will not do. Present in a public\n repo is enough to report; \"exploitable\" is a claim we have not earned.\n- **The missing-RLS findings were true** \u2014 the seventy tables really were\n unprotected. Only the arithmetic was misleading.\n- **We got this piece wrong twice while writing it, and both are worth telling\n you about.** An earlier draft said the seventy findings were \"one migration\" \u2014\n our records say 70 findings across 12 files, and nobody ever counted distinct\n causes, so \"one\" was a number that felt right rather than one that was\n measured. Worse, the draft led on \"4 had a real exposed secret\", which was the\n count after re-auditing 20 of the 22. The **final** pass over all 22 found\n **five**, and seven worth sending. We nearly published the intermediate number\n as the conclusion \u2014 which is failure mode 4 above, being right but stale,\n committed by the article about it. Both were caught by re-reading the source\n notes, not by being careful. That is the argument for making the check\n procedural.\n- The independent numbers hold up: a June 2026 crawl of 1,072 Supabase-backed\n vibe-coded apps found **98% with at least one issue, 16% critical.**\n **CVE-2025-48757** hit 170+ Lovable apps on exactly the RLS pattern above.\n\n**The problem is real. The reports about it are inflated.** Those are different\nclaims and both are true at once.\n\n## Why this is worth your attention if you got a scary scan\n\nA scanner that says \"80 issues\" when you have three is not a minor annoyance. It\nis worse than silence, for a specific reason: **you cannot triage it.** You do\nnot know which three, you have no way to tell signal from padding, and after the\nsecond false alarm you stop reading the reports \u2014 including the one that\nmattered.\n\nIf you are holding a frightening report right now, three questions sort most of\nit in ten minutes:\n\n1. **How many distinct files and distinct causes?** Not how many findings. One\n migration repeated across a schema dump is one problem.\n2. **Is there a guard the tool didn't look for?** Open the route. Search for a\n helper name. Centralised auth reads as absent auth to a grep.\n3. **Can an untrusted request actually reach it?** If the code runs in a build\n script or a local CLI, nobody outside can touch it.\n\nFor a Supabase app specifically, the one query worth running before anything\nelse:\n\n```sql\nselect tablename\nfrom pg_tables\nwhere schemaname = 'public'\n and rowsecurity = false;\n```\n\nEmpty result: RLS is on everywhere. Rows returned: that list \u2014 not the scanner's\ntotal \u2014 is your actual work.\n\n## Why we published our own miss rate\n\nBecause the alternative was publishing the headline. We had a number \u2014\n\"19 critical\" \u2014 that would have looked good in exactly the way this whole\ncategory looks good, and it was wrong by 15.\n\nThe first thing a competent developer does with a security email is check the\nnumber. An inflated count is not a small embarrassment; it ends that conversation\nand, because they will say so publicly, the cheap ones after it.\n\nSo the accuracy work is not diligence around the product. **It is the product.**\nAnyone can generate findings; the market price for generating findings is now\napproximately zero. What is scarce is a report where every line survived someone\ntrying to kill it.\n\n---\n\n*We do read-only static analysis of public code. We never touch a running\nsystem, never use a credential we find, and never pull data through a hole we\nreport. Findings go to owners privately and free; no target is named here,\nbecause several of these are real and unfixed.*\n", "creation_timestamp": "2026-09-17T14:23:09.880132Z"} 2026-09-17T14:23:09.880132+00:00 https://vulnerability.circl.lu/sighting/6a04a412-8e6c-4c56-9546-44006835b5c9/export 2026-09-17T15:45:40.904805+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6a04a412-8e6c-4c56-9546-44006835b5c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48384", "type": "published-proof-of-concept", "source": "Telegram/ib9MMahsPCRJyeCDs86xmfxcef6EdR4f6p6dlsDYYZyVQG4", "content": "", "creation_timestamp": "2026-09-15T00:00:27.432167Z"} 2026-09-15T00:00:27.432167+00:00 https://vulnerability.circl.lu/sighting/54bab6c9-39b9-485b-9960-50fc1073969e/export 2026-09-17T15:45:40.904973+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "54bab6c9-39b9-485b-9960-50fc1073969e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48384", "type": "published-proof-of-concept", "source": "Telegram/ib9MMahsPCRJyeCDs86xmfxcef6EdR4f6p6dlsDYYZyVQG4", "content": "", "creation_timestamp": "2026-09-14T07:00:04.351524Z"} 2026-09-14T07:00:04.351524+00:00 https://vulnerability.circl.lu/sighting/467d96ae-b091-4a2f-93eb-71b367dfc5d5/export 2026-09-17T15:45:40.905088+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "467d96ae-b091-4a2f-93eb-71b367dfc5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48593", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/2108", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432: \u0434\u0435\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b CVE-2025-48593\n\n\u2014\n\nSummary:\n\u0412 \u043d\u043e\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-13912 \u0438 CVE-2025-48593. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e memcpy() \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0438 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-11 10:46 | Author: Vulner Queen\n\n#vulnerabilities__exploits #android #cve202548593\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-android-ugrozhaet-millionam-ustroystv-detali-novoy-ugrozy-cve-2025-48593_16182", "creation_timestamp": "2026-09-10T00:00:36.850905Z"} 2026-09-10T00:00:36.850905+00:00 https://vulnerability.circl.lu/sighting/67a3742b-39d9-4053-9343-94f7fcc8fc8a/export 2026-09-17T15:45:40.905228+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "67a3742b-39d9-4053-9343-94f7fcc8fc8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48593", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1671", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043b\u0438\u043a\u0430 \u0432 Android: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0430 Android \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-48593, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Android \u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a RCE...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-06 14:52 | Author: Vulner Queen\n\n#general_cyber_news #android\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-nulevogo-klika-v-android-milliony-ustroystv-pod-ugrozoy-polnogo-vzloma_16043", "creation_timestamp": "2026-09-10T00:00:34.726390Z"} 2026-09-10T00:00:34.726390+00:00 https://vulnerability.circl.lu/sighting/ce625696-d0cb-4fa3-8b31-49208578c1a7/export 2026-09-17T15:45:40.905358+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ce625696-d0cb-4fa3-8b31-49208578c1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48593", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1671", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043b\u0438\u043a\u0430 \u0432 Android: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0430 Android \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-48593, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Android \u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a RCE...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-06 14:52 | Author: Vulner Queen\n\n#general_cyber_news #android\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-nulevogo-klika-v-android-milliony-ustroystv-pod-ugrozoy-polnogo-vzloma_16043", "creation_timestamp": "2026-09-09T05:00:16.645934Z"} 2026-09-09T05:00:16.645934+00:00 https://vulnerability.circl.lu/sighting/8939159b-7dfa-48a8-a48b-87a8957409c4/export 2026-09-17T15:45:40.905489+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8939159b-7dfa-48a8-a48b-87a8957409c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48593", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2108", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432: \u0434\u0435\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b CVE-2025-48593\n\n\u2014\n\nSummary:\n\u0412 \u043d\u043e\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-13912 \u0438 CVE-2025-48593. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e memcpy() \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0438 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-11 10:46 | Author: Vulner Queen\n\n#vulnerabilities__exploits #android #cve202548593\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-android-ugrozhaet-millionam-ustroystv-detali-novoy-ugrozy-cve-2025-48593_16182", "creation_timestamp": "2026-09-09T05:00:13.727792Z"} 2026-09-09T05:00:13.727792+00:00 https://vulnerability.circl.lu/sighting/6e8c1293-7fe5-44ec-902d-c0a2f6be2452/export 2026-09-17T15:45:40.905627+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "6e8c1293-7fe5-44ec-902d-c0a2f6be2452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48565", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:49:45.225435Z"} 2026-09-09T04:49:45.225435+00:00 https://vulnerability.circl.lu/sighting/6ed9ed0c-fafc-47e6-ba64-7ee919f6c295/export 2026-09-17T15:45:40.908153+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "6ed9ed0c-fafc-47e6-ba64-7ee919f6c295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48564", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:49:15.956138Z"} 2026-09-09T04:49:15.956138+00:00 https://vulnerability.circl.lu/sighting/f868da2a-2bdb-4755-b8c6-972c13c37637/export 2026-09-17T15:45:40.908321+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "f868da2a-2bdb-4755-b8c6-972c13c37637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48566", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:45:11.975050Z"} 2026-09-09T04:45:11.975050+00:00