https://vulnerability.circl.lu/sightings/feed 2026-10-03T06:45:09.214454+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2e534a32-3b4e-490d-ad4a-232580389289/export 2026-10-03T06:45:09.240538+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2e534a32-3b4e-490d-ad4a-232580389289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11002", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/2787", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001)\n\n\u2014\n\nSummary:\nNHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by attackers. \u201cActive exploitation of CVE-2025-11001 has been observed in the wild,\u201d the alert says, though it does not say who detected the attacks or whether they might be targeted or widespread. CVE-2025-11001 and CVE-2025-11002 Introduced in 7-Zip v21.02, CVE-2025-11001 and CVE-2025-11002 are two...\n\n\u2014\n\nSource: Help Net Security\nPublished: 2025-11-19 14:45 | Author: Zeljka Zorz\n\n#vulnerabilities__exploits #vulnerability #7zip\n\nhttps://www.helpnetsecurity.com/2025/11/19/7-zip-vulnerability-is-being-actively-exploited-nhs-england-warns-cve-2025-11001/", "creation_timestamp": "2026-09-10T00:00:46.159402Z"} 2026-09-10T00:00:46.159402+00:00 https://vulnerability.circl.lu/sighting/e3ff2e24-0a82-424f-a76a-b08cf9d0b074/export 2026-10-03T06:45:09.243186+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e3ff2e24-0a82-424f-a76a-b08cf9d0b074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11001", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/2787", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001)\n\n\u2014\n\nSummary:\nNHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by attackers. \u201cActive exploitation of CVE-2025-11001 has been observed in the wild,\u201d the alert says, though it does not say who detected the attacks or whether they might be targeted or widespread. CVE-2025-11001 and CVE-2025-11002 Introduced in 7-Zip v21.02, CVE-2025-11001 and CVE-2025-11002 are two...\n\n\u2014\n\nSource: Help Net Security\nPublished: 2025-11-19 14:45 | Author: Zeljka Zorz\n\n#vulnerabilities__exploits #vulnerability #7zip\n\nhttps://www.helpnetsecurity.com/2025/11/19/7-zip-vulnerability-is-being-actively-exploited-nhs-england-warns-cve-2025-11001/", "creation_timestamp": "2026-09-10T00:00:46.114254Z"} 2026-09-10T00:00:46.114254+00:00 https://vulnerability.circl.lu/sighting/60dd0d15-ab6f-4b0a-9dde-88504ed1a6fd/export 2026-10-03T06:45:09.243279+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "60dd0d15-ab6f-4b0a-9dde-88504ed1a6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11001", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/2812", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 7-Zip \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0438\u0441\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-11001 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 7.0 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSSv3 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u043a\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-20 07:55 | Author: Vulner Queen\n\n#7zip #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-7-zip-podvergaet-polzovateley-risku-udalennogo-vypolneniya-koda_16447", "creation_timestamp": "2026-09-10T00:00:46.028644Z"} 2026-09-10T00:00:46.028644+00:00 https://vulnerability.circl.lu/sighting/f80d797c-e28f-4aa6-af1b-0a2649837d38/export 2026-10-03T06:45:09.243368+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f80d797c-e28f-4aa6-af1b-0a2649837d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11001", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2812", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 7-Zip \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0438\u0441\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-11001 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 7.0 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSSv3 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u043a\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7-Zip...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-20 07:55 | Author: Vulner Queen\n\n#7zip #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-7-zip-podvergaet-polzovateley-risku-udalennogo-vypolneniya-koda_16447", "creation_timestamp": "2026-09-09T05:00:09.348865Z"} 2026-09-09T05:00:09.348865+00:00 https://vulnerability.circl.lu/sighting/fda52d97-b28e-4989-8def-5d93333bf355/export 2026-10-03T06:45:09.243445+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fda52d97-b28e-4989-8def-5d93333bf355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11002", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2787", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001)\n\n\u2014\n\nSummary:\nNHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by attackers. \u201cActive exploitation of CVE-2025-11001 has been observed in the wild,\u201d the alert says, though it does not say who detected the attacks or whether they might be targeted or widespread. CVE-2025-11001 and CVE-2025-11002 Introduced in 7-Zip v21.02, CVE-2025-11001 and CVE-2025-11002 are two...\n\n\u2014\n\nSource: Help Net Security\nPublished: 2025-11-19 14:45 | Author: Zeljka Zorz\n\n#vulnerabilities__exploits #vulnerability #7zip\n\nhttps://www.helpnetsecurity.com/2025/11/19/7-zip-vulnerability-is-being-actively-exploited-nhs-england-warns-cve-2025-11001/", "creation_timestamp": "2026-09-09T05:00:09.269806Z"} 2026-09-09T05:00:09.269806+00:00 https://vulnerability.circl.lu/sighting/7e6c51c0-cc7e-43d8-ab8c-d80cb0f9c023/export 2026-10-03T06:45:09.243521+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7e6c51c0-cc7e-43d8-ab8c-d80cb0f9c023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11001", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2787", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001)\n\n\u2014\n\nSummary:\nNHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by attackers. \u201cActive exploitation of CVE-2025-11001 has been observed in the wild,\u201d the alert says, though it does not say who detected the attacks or whether they might be targeted or widespread. CVE-2025-11001 and CVE-2025-11002 Introduced in 7-Zip v21.02, CVE-2025-11001 and CVE-2025-11002 are two...\n\n\u2014\n\nSource: Help Net Security\nPublished: 2025-11-19 14:45 | Author: Zeljka Zorz\n\n#vulnerabilities__exploits #vulnerability #7zip\n\nhttps://www.helpnetsecurity.com/2025/11/19/7-zip-vulnerability-is-being-actively-exploited-nhs-england-warns-cve-2025-11001/", "creation_timestamp": "2026-09-09T05:00:09.224928Z"} 2026-09-09T05:00:09.224928+00:00 https://vulnerability.circl.lu/sighting/e9c51a70-db3a-43c9-9bb5-9e2da9cf4d6b/export 2026-10-03T06:45:09.243594+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e9c51a70-db3a-43c9-9bb5-9e2da9cf4d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11001", "type": "seen", "source": "https://t.me/CyberDispatch/15", "content": "A critical security flaw (CVE-2025-11001) in 7-Zip has a public exploit. Learn why this high-risk vulnerability is dangerous and how to manually update to version 25.01 now.", "creation_timestamp": "2026-08-19T21:00:07.721727Z"} 2026-08-19T21:00:07.721727+00:00 https://vulnerability.circl.lu/sighting/acbc7a95-342d-4b58-b225-481edf667333/export 2026-10-03T06:45:09.243663+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "acbc7a95-342d-4b58-b225-481edf667333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11001", "type": "seen", "source": "https://t.me/purp_sec/1215", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435\n\n\ud83d\udd35 CVE-2025-9242 \u2014 \u0431\u0430\u0433 \u0432 WatchGuard Fireware OS. \u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 IKEv2 \u0444\u0443\u043d\u043a\u0446\u0438\u044f ike2_ProcessPayload_CERT \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u043b\u0435 Identification \u0432 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0442\u0435\u043a\u043e\u0432\u044b\u0439 \u0431\u0443\u0444\u0435\u0440 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043b\u0438\u043d\u044b. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 IKE_SA_INIT+IKE_SA_AUTH \u043f\u043e\u0442\u043e\u043a \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c stack-based buffer overflow \u2014 out-of-bounds write \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE \u043d\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 (IKEv2 VPN).\n\n\ud83d\udd35 CVE-2025-11001 \u2014 \u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 Linux/WSL \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u043e\u0432 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 ZIP. \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043c\u0435\u0442\u0438\u0442\u044c \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 C:\\... \u043a\u0430\u043a \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0437\u0430\u0442\u0435\u043c \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043c\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0440\u0435\u0444\u0438\u043a\u0441 \u0438\u0437 \u0430\u0440\u0445\u0438\u0432\u0430 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 IsSafePath. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u0449\u0438\u043a \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0432 \u043d\u0435\u0436\u0435\u043b\u0430\u043d\u043d\u0443\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0442\u0443\u0434\u0430 \u0444\u0430\u0439\u043b. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 Windows \u043f\u0440\u0438 \u043f\u0440\u0430\u0432\u0430\u0445 elevated \u0438\u043b\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\ud83d\udd35 CVE-2025-55315 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u043c \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Kestrel (ASP.NET Core). \u041d\u0435\u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0446\u0438\u044f \u0433\u0440\u0430\u043d\u0438\u0446 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0442\u0430\u0449\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u0440\u043e\u043a\u0441\u0438\u2014\u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u0440\u044f\u0434\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u0442\u044c CSRF-\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u043b\u0438 \u0438\u043d\u0436\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c.\n\n\ud83d\udd35 GHSL-2025-094 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ag2ai/faststream \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 .github/workflows/pr_autoupdate.yaml. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 pull_request_target \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0447\u0435\u043a\u0430\u043b out \u043a\u043e\u0434 \u0438\u0437 \u0441\u0430\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 PR \u0438 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b pip install/\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u0430 AUTOMERGE_TOKEN \u0438 \u043f\u0440\u0430\u0432 contents: write. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u0432\u0435\u0442\u043a\u0443 PR \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 setup.py \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u0430.\n\n\ud83d\udd35 GHSL-2025-090 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 harvester/harvester \u0432 workflow .github/workflows/issue-management-link-backport-pr.yaml. \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 pull_request_target \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 github.event.pull_request.title \u0432 shell-heredoc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u0434\u0430 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 PR \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043a\u0440\u0430\u0436\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:05.774198Z"} 2026-08-14T16:00:05.774198+00:00 https://vulnerability.circl.lu/sighting/c8619a4f-e74d-43fa-8e1d-7ff15d263685/export 2026-10-03T06:45:09.243771+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c8619a4f-e74d-43fa-8e1d-7ff15d263685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11001", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/8560", "content": "Hackers Actively Exploiting 7-Zip Symbolic Link\u2013Based RCE Vulnerability (CVE-2025-11001) \u2013 thehackernews.com\n\nThu, 20 Nov 2025 00:27:00", "creation_timestamp": "2026-07-22T00:00:30.644253Z"} 2026-07-22T00:00:30.644253+00:00 https://vulnerability.circl.lu/sighting/7cd736c4-956e-4f22-a9cd-8e3888e82b5f/export 2026-10-03T06:45:09.243840+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7cd736c4-956e-4f22-a9cd-8e3888e82b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11002", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2804", "content": "Exploiting 7-zip\n*\nCVE-2025-11001 / CVE-2025-11002 \n\nExploit", "creation_timestamp": "2026-07-22T00:00:25.473977Z"} 2026-07-22T00:00:25.473977+00:00