{"vulnerability": "CVE-2025-14558", "sightings": [{"uuid": "796a2feb-7bd3-41a4-a43b-56bafb6b8c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/misc/rtsold_dnssl_cmdinject.rb", "content": "", "creation_timestamp": "2026-02-13T10:07:02.000000Z"}, {"uuid": "e512d480-89c4-4827-a583-737d86f13e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3merfr5mpph2q", "content": "", "creation_timestamp": "2026-02-13T21:03:06.073630Z"}, {"uuid": "9ffec2ad-206d-4450-811b-f1d2d5e04455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://bsky.app/profile/sheridan.co.uk/post/3madvt2qj622b", "content": "", "creation_timestamp": "2025-12-19T14:32:25.133992Z"}, {"uuid": "3ff36e3e-067a-44d6-a5c4-951219f2e8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-15c91c54-4e08dee4dab96bca", "content": "", "creation_timestamp": "2025-12-20T02:39:56.921248Z"}, {"uuid": "2ebba94c-3e28-4063-8bcd-827c7237a3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mahilx4ljr2l", "content": "", "creation_timestamp": "2025-12-21T00:46:25.190196Z"}, {"uuid": "15bebe2f-e4e9-4091-a99c-bbfc4317a55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3matf2vhs5u2w", "content": "", "creation_timestamp": "2025-12-25T18:15:08.884616Z"}, {"uuid": "42c2b592-4034-482e-b668-5c8c9efcce4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3maw6vxzxh22h", "content": "", "creation_timestamp": "2025-12-26T21:02:59.984976Z"}, {"uuid": "193b7b21-9f67-4321-8954-11be09dbced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116199669876804073", "content": "", "creation_timestamp": "2026-03-09T14:24:12.166864Z"}, {"uuid": "ab8f18a5-6829-4dc8-b777-11aa0c5083a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://bsky.app/profile/security.land/post/3mbtlsafebs2a", "content": "", "creation_timestamp": "2026-01-07T13:40:51.208879Z"}, {"uuid": "711473d5-d385-4203-9e15-bc9ef37f51d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "published-proof-of-concept", "source": "Telegram/L38WC5Z6StDAbVGWur3J1et47qVqp8n45yINKLUpuArTxNY", "content": "", "creation_timestamp": "2025-12-23T15:00:07.000000Z"}, {"uuid": "eb1a71b5-0c7f-4072-b498-7c540bb7cf76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://t.me/NinjaSecurity/251", "content": "A free, open source, and extensible speech-to-text application that works completely offline.\n\nhttps://github.com/cjpais/Handy\n\n\nLogging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. \n\nhttps://github.com/cisagov/LME\n\nLet's fight phishing together\n\nhttps://github.com/Duddu-Hriday/Phish-Blitz\nawesome list of cybersecurity research, RE material, exploitation write-ups, and tools. \n\nhttps://github.com/0xor0ne/awesome-list \n\nModular, guided Linux privilege escalation assistant - smarter than blind enumeration.\n\nhttps://github.com/Null0x-sh/Nullpeas\n\n\ud83d\udc7b Transparent Network Implant | L2 Bridge | WireGuard Tunnel | MAC Cloning | Stealth Persistence | NanoPi R2S | Part of MoMo Ecosystem.\n\nhttps://github.com/M0M0Sec/Momo-GhostBridge\n\nThis is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.\n\nhttps://github.com/farazsth98/poc-CVE-2025-38352\n\nNew 0 day vulnerability allowing to leak NTLM hashes from browsers with one click.\n\nhttps://github.com/rubenformation/ms-photos_NTLM_Leak\n\nCyberFind \u2014 a next-generation OSINT reconnaissance tool designed for cybersecurity professionals, penetration testers, and digital investigators. Search for users across 200+ platforms with speed and accuracy.\n\nhttps://github.com/vazor-code/cyber-find\n\nA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)\n\nhttps://github.com/gommzystudio/device-activity-tracker\n\nCVE-2025-14558\nFreeBSD rtsold DNSSL Command Injection (RCE)\n\nhttps://github.com/JohannesLks/CVE-2025-14558\n\nDiscover and explore a curated list of MCP servers, tools, and resources for AI assistants, enhancing your development and productivity.\n\nhttps://github.com/timunbasah3/awesome-mcp\n\nAutomagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator.\n\nhttps://github.com/LazyTitan33/DNS-Exfilnspector\n\nAnalyze Android APKs with AndroidBeautifest. Extract components and configurations, generating ADB commands for quick security assessment.\n\nhttps://github.com/pacomartinezea/androidBeautifest\n\nMimikatz implementation in pure Python\n\nhttps://github.com/skelsec/pypykatz\n\nContext-aware Nmap reconnaissance framework with traffic intelligence and AD awareness.\n\nhttps://github.com/lLVXX/PARANOID\n\nNext-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass.\n\nhttps://github.com/hawtsauceTR/capsaicin\n\nA collection of intel and usernames scraped from various cybercrime sources & forums. DarkForums, HackForums, Patched, Cracked, BreachForums, LeakBase, & more.\n\nhttps://github.com/spmedia/Threat-Actor-Usernames-Scrape\n\nA curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as \"React2Shell\".\n\nhttps://github.com/websecuritylabs/React2Shell-Library\n\nPlease Note: All mentioned tools are listed for educational purposes and authorized security testing only. Unauthorized use on systems you do not own or have explicit permission to test is illegal and unethical.\n\n#NinjaSecurity #HackersFactory", "creation_timestamp": "2026-08-19T21:00:03.313969Z"}, {"uuid": "5be224ea-6847-4fd6-ad33-446800adbece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "exploited", "source": "https://t.me/NinjaSecurity/251", "content": "A free, open source, and extensible speech-to-text application that works completely offline.\n\nhttps://github.com/cjpais/Handy\n\n\nLogging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. \n\nhttps://github.com/cisagov/LME\n\nLet's fight phishing together\n\nhttps://github.com/Duddu-Hriday/Phish-Blitz\nawesome list of cybersecurity research, RE material, exploitation write-ups, and tools. \n\nhttps://github.com/0xor0ne/awesome-list \n\nModular, guided Linux privilege escalation assistant - smarter than blind enumeration.\n\nhttps://github.com/Null0x-sh/Nullpeas\n\n\ud83d\udc7b Transparent Network Implant | L2 Bridge | WireGuard Tunnel | MAC Cloning | Stealth Persistence | NanoPi R2S | Part of MoMo Ecosystem.\n\nhttps://github.com/M0M0Sec/Momo-GhostBridge\n\nThis is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.\n\nhttps://github.com/farazsth98/poc-CVE-2025-38352\n\nNew 0 day vulnerability allowing to leak NTLM hashes from browsers with one click.\n\nhttps://github.com/rubenformation/ms-photos_NTLM_Leak\n\nCyberFind \u2014 a next-generation OSINT reconnaissance tool designed for cybersecurity professionals, penetration testers, and digital investigators. Search for users across 200+ platforms with speed and accuracy.\n\nhttps://github.com/vazor-code/cyber-find\n\nA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)\n\nhttps://github.com/gommzystudio/device-activity-tracker\n\nCVE-2025-14558\nFreeBSD rtsold DNSSL Command Injection (RCE)\n\nhttps://github.com/JohannesLks/CVE-2025-14558\n\nDiscover and explore a curated list of MCP servers, tools, and resources for AI assistants, enhancing your development and productivity.\n\nhttps://github.com/timunbasah3/awesome-mcp\n\nAutomagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator.\n\nhttps://github.com/LazyTitan33/DNS-Exfilnspector\n\nAnalyze Android APKs with AndroidBeautifest. Extract components and configurations, generating ADB commands for quick security assessment.\n\nhttps://github.com/pacomartinezea/androidBeautifest\n\nMimikatz implementation in pure Python\n\nhttps://github.com/skelsec/pypykatz\n\nContext-aware Nmap reconnaissance framework with traffic intelligence and AD awareness.\n\nhttps://github.com/lLVXX/PARANOID\n\nNext-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass.\n\nhttps://github.com/hawtsauceTR/capsaicin\n\nA collection of intel and usernames scraped from various cybercrime sources & forums. DarkForums, HackForums, Patched, Cracked, BreachForums, LeakBase, & more.\n\nhttps://github.com/spmedia/Threat-Actor-Usernames-Scrape\n\nA curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as \"React2Shell\".\n\nhttps://github.com/websecuritylabs/React2Shell-Library\n\nPlease Note: All mentioned tools are listed for educational purposes and authorized security testing only. Unauthorized use on systems you do not own or have explicit permission to test is illegal and unethical.\n\n#NinjaSecurity #HackersFactory", "creation_timestamp": "2026-08-20T00:00:09.241268Z"}, {"uuid": "b9f0a2b1-4d73-4bce-b878-c307dfe97430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://t.me/proxy_bar/2981", "content": "CVE-2025-14558 \nFreeBSD rtsold DNSSL Command Injection (RCE)\n*\nexploit", "creation_timestamp": "2026-07-20T19:00:08.904760Z"}, {"uuid": "a9a0001d-d50c-4465-a806-c582547e2b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://t.me/proxy_bar/2981", "content": "CVE-2025-14558 \nFreeBSD rtsold DNSSL Command Injection (RCE)\n*\nexploit", "creation_timestamp": "2026-07-21T00:00:27.600993Z"}, {"uuid": "fd1381ce-7898-4707-8e0f-2809efd49c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2981", "content": "CVE-2025-14558 \nFreeBSD rtsold DNSSL Command Injection (RCE)\n*\nexploit", "creation_timestamp": "2026-07-22T00:00:26.685876Z"}, {"uuid": "b05b40c0-5265-4349-8c26-ee5a5cc424c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14558", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/misc/rtsold_dnssl_cmdinject.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Lukas Johannes M\\u00f6ller\", \"Kevin Day\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability (CVE-2025-14558)\\n          in FreeBSD's rtsol(8) and rtsold(8) programs. These programs do not\\n          validate the domain search list options provided in IPv6 Router\\n          Advertisement messages; the option body is passed to resolvconf(8)\\n          unmodified. resolvconf(8) is a shell script which does not validate\\n          its input. A lack of quoting means that shell commands passed as input\\n          to resolvconf(8) may be executed, enabling command injection via $()\\n          substitution in the DNSSL domain name fields.\\n\\n          This exploit requires Layer 2 adjacency to the target (same network\\n          segment) and root privileges to send raw packets. Router advertisement\\n          messages are not routable and should be dropped by routers, so the\\n          attack does not cross network boundaries.\", \"disclosure_date\": \"2025-12-16\", \"fullname\": \"exploit/freebsd/misc/rtsold_dnssl_cmdinject\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"FreeBSD rtsold/rtsol DNSSL Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/freebsd/misc/rtsold_dnssl_cmdinject.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"freebsd/misc/rtsold_dnssl_cmdinject\", \"references\": [\"CVE-2025-14558\", \"EDB-52463\", \"URL-https://security.FreeBSD.org/advisories/FreeBSD-SA-25:12.rtsold.asc\", \"URL-https://github.com/JohannesLks/CVE-2025-14558\"], \"rport\": null, \"session_types\": false, \"targets\": [\"FreeBSD (all versions before 13.5-RELEASE-p8 / 14.3-RELEASE-p7 / 15.0-RELEASE-p1)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:19.017225Z"}]}