{"vulnerability": "CVE-2025-30406", "sightings": [{"uuid": "535720dc-cb90-4ce5-8c60-23af5e03eadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmf36672w", "content": "", "creation_timestamp": "2025-04-03T21:06:32.895208Z"}, {"uuid": "35383682-5a20-4201-9269-5b4b025261f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114277646503972456", "content": "", "creation_timestamp": "2025-04-04T03:48:24.063002Z"}, {"uuid": "e72d2926-1ae2-4016-bc3c-525f4fc6279d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczpadcas2w", "content": "", "creation_timestamp": "2025-04-08T17:45:17.740222Z"}, {"uuid": "2e9afb3f-177d-45cb-8788-344d0efb5970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3754815", "content": "", "creation_timestamp": "2025-04-08T21:30:03.938032Z"}, {"uuid": "ce63d624-5878-44bc-b06b-b97b5535b4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-30406", "type": "seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/114307723998823590", "content": "", "creation_timestamp": "2025-04-09T11:17:29.306722Z"}, {"uuid": "e9d38866-326c-4f31-8567-8ba8f22e02b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://thehackernews.com/2025/04/cisa-warns-of-centrestacks-hard-coded.html", "content": "", "creation_timestamp": "2025-04-09T06:00:00.000000Z"}, {"uuid": "77a4b23a-92e6-4a5d-8ed9-f854c5e3c528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmfwnkickv42", "content": "", "creation_timestamp": "2025-04-09T21:42:01.616971Z"}, {"uuid": "35997d39-8ee8-45b8-9c11-039f719aa806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lmgtnp3wjs2x", "content": "", "creation_timestamp": "2025-04-10T06:07:42.999867Z"}, {"uuid": "f8021447-6a0a-4c38-b9cb-ea8dadda2735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/mbissey.bsky.social/post/3lmh27kelu32p", "content": "", "creation_timestamp": "2025-04-10T08:05:04.362034Z"}, {"uuid": "4904bc5c-7bdf-4ed5-8793-3eb9c5a0ff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lmh4bw2g4e2d", "content": "", "creation_timestamp": "2025-04-10T08:42:10.739443Z"}, {"uuid": "15d642be-1eac-432c-a9df-d37e9434e20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-30406", "type": "seen", "source": "https://bsky.app/profile/clustz.com/post/3lmhxxvvier2q", "content": "", "creation_timestamp": "2025-04-10T16:57:40.156708Z"}, {"uuid": "135d8006-a3d9-48f5-94e0-08a9e7928b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.bsky.social/post/3lmhziqhun227", "content": "", "creation_timestamp": "2025-04-10T17:23:29.277707Z"}, {"uuid": "65b9b1a4-20d3-4806-89a4-20ada42fa8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmihhhle222p", "content": "", "creation_timestamp": "2025-04-10T21:34:55.269167Z"}, {"uuid": "82dd22ac-046e-4425-b994-01e6bf5073f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmjh7cjqwhr2", "content": "", "creation_timestamp": "2025-04-11T07:03:38.818126Z"}, {"uuid": "5692494f-45d2-4325-8f8f-3ddf34452407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmjzbfuwwmo2", "content": "", "creation_timestamp": "2025-04-11T12:26:15.717271Z"}, {"uuid": "53a3e4d0-c673-4141-86cf-4e044bc424c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmlxsuwzkc24", "content": "", "creation_timestamp": "2025-04-12T07:05:33.910296Z"}, {"uuid": "c992b68c-3b40-4ce7-8b4d-e7b8daeba04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmlz37wgfc24", "content": "", "creation_timestamp": "2025-04-12T07:28:07.361836Z"}, {"uuid": "544638d2-9121-4bd4-9971-81b10c816844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/huntress.com/post/3lmqdxi2nq22f", "content": "", "creation_timestamp": "2025-04-14T00:53:30.255738Z"}, {"uuid": "3a773806-aa05-4d6e-a1e4-1f921f60a6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/huntress.com/post/3lmqdxi2uks2f", "content": "", "creation_timestamp": "2025-04-14T00:53:30.777421Z"}, {"uuid": "969c2022-7e47-4f82-be5e-105f3053ac6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/huntress.com/post/3lmqdxj5ixk2f", "content": "", "creation_timestamp": "2025-04-14T00:53:31.286466Z"}, {"uuid": "df4f85ba-2323-4b5c-884c-b5f182904a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmr3hougjvs2", "content": "", "creation_timestamp": "2025-04-14T07:54:14.018791Z"}, {"uuid": "f4db6522-9802-4594-9cf0-e8b7cdf52d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/intruder-io.bsky.social/post/3lmrvgcmcrc2r", "content": "", "creation_timestamp": "2025-04-14T15:38:40.846731Z"}, {"uuid": "ec937ad8-eca3-4c4f-8b9e-b0a84a98b0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/gleeda.bsky.social/post/3lmrwhit6rk2g", "content": "", "creation_timestamp": "2025-04-14T15:57:13.937858Z"}, {"uuid": "20ffd4c1-579b-4d9f-ad7f-7cba5edb792c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/huntress.com/post/3lmrwmpf4fc2s", "content": "", "creation_timestamp": "2025-04-14T16:00:10.129528Z"}, {"uuid": "51bf1b0d-99fc-41d5-b025-1cf96eb551ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lms6dj3ng22o", "content": "", "creation_timestamp": "2025-04-14T18:18:10.158260Z"}, {"uuid": "559e6558-323b-47bf-88e2-00f7696742dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmsyyq45fa2z", "content": "", "creation_timestamp": "2025-04-15T02:15:18.736853Z"}, {"uuid": "bb4f14c4-ead5-4585-a063-6b88ae7fc43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-30406.yaml", "content": "", "creation_timestamp": "2025-04-15T00:33:39.000000Z"}, {"uuid": "d49c02ad-f1da-4a45-b43b-42db4a65c5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmtdrip6tf2i", "content": "", "creation_timestamp": "2025-04-15T05:28:07.703487Z"}, {"uuid": "9bd3500c-e2bd-41b2-91af-9b1b16d2d1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://thehackernews.com/2025/04/gladinets-triofox-and-centrestack-under.html", "content": "", "creation_timestamp": "2025-04-15T02:39:00.000000Z"}, {"uuid": "0c43069e-0630-4115-a683-22ee5dc50d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmtl72k6o32g", "content": "", "creation_timestamp": "2025-04-15T07:40:58.411960Z"}, {"uuid": "8b43eb30-e9f1-4aca-9871-fa0ba494159c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmtmfpmrlm2j", "content": "", "creation_timestamp": "2025-04-15T08:02:35.550395Z"}, {"uuid": "8b9ba3dc-0f65-4b8b-8744-471218f5b730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-30406", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lmtog4gpkk2l", "content": "", "creation_timestamp": "2025-04-15T08:38:36.116049Z"}, {"uuid": "8f0e2541-fdc0-4059-817e-374beed80ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3lmtqxlwfuk24", "content": "", "creation_timestamp": "2025-04-15T09:24:15.247249Z"}, {"uuid": "a46dac4e-3221-466e-a7a3-71fee3dd2728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3lmtrdvs66k2k", "content": "", "creation_timestamp": "2025-04-15T09:31:08.755860Z"}, {"uuid": "79b8df2c-c2c1-4a8a-b9de-f5a85e50abbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114341642907951859", "content": "", "creation_timestamp": "2025-04-15T11:03:31.512491Z"}, {"uuid": "327b1b3f-4cee-4695-8be1-26cd0c747c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114341835810230280", "content": "", "creation_timestamp": "2025-04-15T11:52:34.074076Z"}, {"uuid": "129cd60c-793d-42b8-8c00-0e3a494617a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lmtzb6c5yk2t", "content": "", "creation_timestamp": "2025-04-15T11:52:42.379666Z"}, {"uuid": "64946242-c3be-4b10-a19b-50cf2a688ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lmuhxomg342p", "content": "", "creation_timestamp": "2025-04-15T16:15:48.868919Z"}, {"uuid": "3e3f5fde-4348-4ec2-a513-1eb7c9391b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/intruder-io.bsky.social/post/3lmuklq64fs25", "content": "", "creation_timestamp": "2025-04-15T17:02:50.051797Z"}, {"uuid": "cf6e5dfb-b66f-4de3-9d1c-c5a9e70bd8ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lmv5kjmxkl2j", "content": "", "creation_timestamp": "2025-04-15T22:42:09.982635Z"}, {"uuid": "2876e60a-7289-480a-bb8c-1266d7bcad79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmvjgvpaq32q", "content": "", "creation_timestamp": "2025-04-16T02:14:53.409361Z"}, {"uuid": "f5d34281-3a0d-4617-ac19-4bb13b819931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lmvmfm34lk2x", "content": "", "creation_timestamp": "2025-04-16T03:07:50.801527Z"}, {"uuid": "7acfadb3-1fc1-4adb-a609-94aea4717729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogm4m2t", "content": "", "creation_timestamp": "2025-04-17T01:03:47.672161Z"}, {"uuid": "441cc6f4-4696-4506-b60b-c459552939ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogsxe2t", "content": "", "creation_timestamp": "2025-04-17T01:03:50.805228Z"}, {"uuid": "c5a4d527-1c89-4a04-b7a6-fd3f2ab7e246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogtwm2t", "content": "", "creation_timestamp": "2025-04-17T01:03:53.981318Z"}, {"uuid": "db0aba4d-8208-41f4-9ed1-c0521c2dd252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogtwn2t", "content": "", "creation_timestamp": "2025-04-17T01:03:57.099257Z"}, {"uuid": "0fcaabb0-8898-4e37-8e45-ec505e377b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwoguvv2t", "content": "", "creation_timestamp": "2025-04-17T01:04:00.216724Z"}, {"uuid": "7ebfd5c3-8b64-4ea0-9973-81a5224f3ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv52t", "content": "", "creation_timestamp": "2025-04-17T01:04:03.295756Z"}, {"uuid": "9164fa7a-456c-4d11-8fdc-9a8deb8a16d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv62t", "content": "", "creation_timestamp": "2025-04-17T01:04:06.481370Z"}, {"uuid": "9be058c4-8b6a-49fa-9cd3-05f9e6f16f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogvv72t", "content": "", "creation_timestamp": "2025-04-17T01:04:09.723113Z"}, {"uuid": "27657935-4230-4def-8559-477531398063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuh2t", "content": "", "creation_timestamp": "2025-04-17T01:04:12.952878Z"}, {"uuid": "f35bc276-38a4-421f-ad12-9170d4c34a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwui2t", "content": "", "creation_timestamp": "2025-04-17T01:04:16.141658Z"}, {"uuid": "c0b69333-bc25-4c9f-a95f-a882572db132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogxtt2t", "content": "", "creation_timestamp": "2025-04-17T01:04:28.786993Z"}, {"uuid": "12e9b4c9-f0e1-40f4-bf45-4f117dde9f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuj2t", "content": "", "creation_timestamp": "2025-04-17T01:04:19.271584Z"}, {"uuid": "a0f9cf10-bf9b-4789-bc9f-8a74a33f791f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwuk2t", "content": "", "creation_timestamp": "2025-04-17T01:04:22.459602Z"}, {"uuid": "91aea0ef-1d00-42d2-a279-aa3f5c978470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cybersecuritybrief.bsky.social/post/3lmxvwogwul2t", "content": "", "creation_timestamp": "2025-04-17T01:04:25.633419Z"}, {"uuid": "029c2b53-f3f8-4923-af54-c65385aba4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/socprime.com/post/3lmz5ndssfc2z", "content": "", "creation_timestamp": "2025-04-17T12:54:24.503910Z"}, {"uuid": "0c9100c9-9285-44fa-9299-264651dacc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/socprime.com/post/3lmz6kr4og22k", "content": "", "creation_timestamp": "2025-04-17T13:10:57.192300Z"}, {"uuid": "ba6d15bf-3ce8-40ae-986b-7bc8a276417f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/socprime.com/post/3lmz7a2tqh22t", "content": "", "creation_timestamp": "2025-04-17T13:22:51.087891Z"}, {"uuid": "eadaa0e6-49e4-4518-af7e-e0ec347ce6f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-30406", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/114353709971806568", "content": "", "creation_timestamp": "2025-04-17T14:12:19.584483Z"}, {"uuid": "a352a06e-14d5-4234-adb6-d67aef91690f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lmzugm2znp2b", "content": "", "creation_timestamp": "2025-04-17T19:42:13.421958Z"}, {"uuid": "c918b567-5736-48d0-88ed-53874ad4cd00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/huntress.com/post/3lnfqpqfevk2z", "content": "", "creation_timestamp": "2025-04-22T13:07:47.394880Z"}, {"uuid": "4842148f-d376-4d66-8aa5-168fdd555fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/huntress.com/post/3lnfqpsfrh22z", "content": "", "creation_timestamp": "2025-04-22T13:07:47.865336Z"}, {"uuid": "1e7ed853-5c18-460c-a7ad-33f3b81fd05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3loeqte2vc523", "content": "", "creation_timestamp": "2025-05-04T21:02:16.577209Z"}, {"uuid": "4492c3c7-01c4-47c4-a03c-89cb0ae44edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqkjapzrv22h", "content": "", "creation_timestamp": "2025-06-01T14:52:55.799104Z"}, {"uuid": "ed7761fb-1a7a-430f-9426-f8a341fa3e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/gladinet_viewstate_deserialization_cve_2025_30406.rb", "content": "", "creation_timestamp": "2025-05-28T12:00:57.000000Z"}, {"uuid": "5b7aa8a1-7efe-4c17-aa83-632f7dadd79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "1cfd24d7-8384-47ff-ac40-d8e883bcbce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-30406", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lvbwyjimyy2b", "content": "", "creation_timestamp": "2025-07-31T20:10:52.824638Z"}, {"uuid": "f2fc0d3d-aabd-4574-9385-f3a57e735e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "b46c74a5-ba58-4887-b25e-6b51c5ab4e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:17.000000Z"}, {"uuid": "a114b000-f522-4bee-b5f8-d98b0cda0ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "83af7e1a-afa0-4cc3-a9d4-efe928dd435d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115389337628449931", "content": "", "creation_timestamp": "2025-10-17T11:46:03.661315Z"}, {"uuid": "d35749b0-d4dc-474b-aec7-feded3b7d8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://threatintel.cc/2025/10/17/gladinet-fixes-actively-exploited-zeroday.html", "content": "", "creation_timestamp": "2025-10-17T09:45:44.000000Z"}, {"uuid": "25c4cf85-7b89-452f-98c4-e17771352dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3m5gwnmb5wa2a", "content": "", "creation_timestamp": "2025-11-12T15:09:38.889260Z"}, {"uuid": "10f286fb-32c5-4ad0-9f8a-47824b4930e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://mastodon.social/users/leakix/statuses/115537358271023632", "content": "", "creation_timestamp": "2025-11-12T15:09:40.406230Z"}, {"uuid": "f8983f4d-0231-440d-80d2-ee4c25d346b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "699a1a3b-033d-4b28-b370-e1d5cb55d004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f92950f4-aa11-47fd-b6d0-26781769f92d", "content": "", "creation_timestamp": "2026-02-02T12:26:04.110452Z"}, {"uuid": "9fa6b46d-a10a-40d4-ad24-42defb1d19d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/46849", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExplore the CVE-2025-30406 ViewState exploit PoC for ASP.NET applications. Test security with this script and learn about deserialization vulnerabilities. \ud83d\udc19\nURL\uff1ahttps://github.com/Gersonaze/CVE-2025-30406\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-07T01:47:18.000000Z"}, {"uuid": "1726f2cd-b955-40d9-b7ff-cecca26d2e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "Telegram/UOBHIdY3ySfeHEqRgDOMD1tfqOzho_PZZkrJdvo4b1cRAqk", "content": "", "creation_timestamp": "2025-08-07T09:00:05.000000Z"}, {"uuid": "feea150f-a137-4eaf-ac68-e74bd5ca87e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://t.me/cKure/15505", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2025-30406: Zero-day in file-sharing software leads to RCE, and attacks are ongoing.\n\nRelated: CVE-2025-11371\n\nhttps://www.theregister.com/2025/10/10/zeroday_in_filesharing_software_leads/", "creation_timestamp": "2025-10-13T06:51:15.000000Z"}, {"uuid": "74a598e3-85a2-4bd0-93e6-83790c559622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30406\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, which enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution. NOTE: the CentreStack admin can manually delete the machineKey defined in portal\\web.config.\n\ud83d\udccf Published: 2025-04-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T19:24:57.413Z\n\ud83d\udd17 References:\n1. https://www.centrestack.com/p/gce_latest_release.html\n2. https://gladinetsupport.s3.us-east-1.amazonaws.com/gladinet/securityadvisory-cve-2005.pdf", "creation_timestamp": "2025-04-03T19:35:34.000000Z"}, {"uuid": "66f4a490-aca1-498e-b79b-be5e296afd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/33998", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploit for CVE-2025-30406\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2025-30406\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-04-24T08:13:06.000000Z"}, {"uuid": "fba70252-9601-494f-a61f-e658a0f89275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52799", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udcbb Demonstrate a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET, enabling remote code execution with a Proof-of-Concept script.\nURL\uff1ahttps://github.com/jaydenb546/CVE-2025-30406\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-23T15:50:12.000000Z"}, {"uuid": "72adc674-eab4-4d34-b373-da8f3c55c1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/46092", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-30406 ViewState Exploit PoC\nURL\uff1ahttps://github.com/mchklt/CVE-2025-30406\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-31T19:16:49.000000Z"}, {"uuid": "80d24bd6-2496-4916-91b0-4f35e80e4adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "Telegram/X82p3rnDkA7YM_BIDl9KsiIi12cHfOU8iO7kJHRRnMuz9iU", "content": "", "creation_timestamp": "2025-09-23T21:00:04.000000Z"}, {"uuid": "0622be47-e13c-4231-966a-d32aa150bad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "https://t.me/bhhub/867", "content": "Key Cybersecurity Insights This Week  \n\n\u2728 Stealthy Red Teaming Tip: When performing RDP-based operations, adding the \"ClearRecentDocsOnExit\" registry value can help erase activity traces. This minimizes forensic artifacts, making post-exploitation detection harder\u2014a must-know for red teamers and pentesters. Read more  \n\n\u2728 Mindset Over Skill: A critical authentication bypass was successfully triaged on HackerOne\u2014proof that persistence and creative thinking often trump raw technical skill. Authentication flaws remain a goldmine for bug hunters. Read more  \n\n\u2728 RCE via Recon: A detailed writeup explains how meticulous reconnaissance led to RCE on a high-profile target (CVE-2025-30406). Demonstrates how overlooked subsystems can escalate vulnerabilities to critical impact. Read more  \n\n\u2728 AD Training Opportunity: Altered Security\u2019s giveaway for their \"Attacking & Defending Active Directory\" course highlights the growing demand for AD-focused offensive skills\u2014key for red teams and pentesters. Read more\n\n@bhhub", "creation_timestamp": "2025-08-03T13:41:59.000000Z"}, {"uuid": "9801c75f-134b-45f3-b234-b885b284f835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "Telegram/kPRwdse26OL24RRCXFgr-20UFoPAircdPCmhtViT2fQDNms", "content": "", "creation_timestamp": "2025-08-01T03:00:05.000000Z"}, {"uuid": "59e299d2-4e0a-4f76-80aa-a60a6da9c907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/496", "content": "CVE-2025-30406\n*\nViewState deserialization in ASP.NET applications\n\n*\nPOC", "creation_timestamp": "2025-08-01T08:18:53.000000Z"}, {"uuid": "2c9ddc8e-ef9a-4084-b432-c8a6bd3cded2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/itsec_news/5770", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u0438\u043d \u043a\u043b\u044e\u0447 \u2014 \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440 CentreStack: 0Day, \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0435 \u0436\u0434\u0443\u0442\n\n\ud83d\udcac \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 Gladinet CentreStack. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e Gladinet, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0445 \u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c ASP.NET ViewState . \u041f\u0440\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e machineKey \u0432 \u0444\u0430\u0439\u043b\u0435 web.config \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 ViewState. \u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u2014 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0421\u0443\u0442\u044c CVE-2025-30406 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e machineKey, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 ViewState, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c, \u043b\u0438\u0431\u043e \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u043d, \u043b\u0438\u0431\u043e \u0441\u0447\u0438\u0442\u0430\u043d \u0445\u0430\u043a\u0435\u0440\u043e\u043c . \u0415\u0441\u043b\u0438 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 ViewState \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0439\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0443\u0434\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u0430\u044f. \u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 IIS \u0438 ASP.NET \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Zero-day \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 CentreStack \u2014 \u0441\u0431\u043e\u0440\u043a\u0438 16.4.10315.56368 , \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 machineKey \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0440\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e \u043f\u0440\u044f\u043c\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c \u0441 \u0442\u0435\u043a\u0443\u0449\u0438\u043c\u0438 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\n\n\u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u2014 \u0440\u0443\u0447\u043d\u0430\u044f \u0440\u043e\u0442\u0430\u0446\u0438\u044f machineKey. \u041e\u043d \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 IIS Manager \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 web.config \u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u043a\u043b\u044e\u0447\u0430 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043d\u043e\u0434\u0430\u0445 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0444\u0435\u0440\u043c\u0435, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0442\u0430\u0440\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e machineKey \u0438\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 portal\\web.config, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u043e\u0432. \u0417\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c IIS, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 CentreStack, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044e \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043e\u0442\u043a\u0430\u0437\u0443 \u043e\u0442 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u041e\u043d\u0430 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0441\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u0443 \u0440\u0438\u0441\u043a\u0438, \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u044e\u0447 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0435\u0434\u0438\u043d\u044b\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0443\u0437\u043b\u043e\u0432. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0441\u043b\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u044e\u0447\u0430 \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u043d\u043e\u0434\u0435, \u043e\u043d \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432\u0441\u0435\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0437\u043b\u043e\u0432. \u0411\u0435\u0437 \u044d\u0442\u043e\u0433\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u0431\u043e\u0438 \u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 ViewState \u0438 \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-11T07:55:16.000000Z"}, {"uuid": "ae059387-52c2-46a0-9ec6-aaa3b357021d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://t.me/cvedetector/22026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-30406 - Gladinet CentreStack Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-30406 \nPublished : April 3, 2025, 8:15 p.m. | 1\u00a0hour ago \nDescription : Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, which enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution. NOTE: the CentreStack admin can manually delete the machineKey defined in portal\\web.config. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T23:36:28.000000Z"}, {"uuid": "33b5b5f7-a9ec-409b-a748-8b06e127a539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "Telegram/hNIiOXc9eorghCUWNdtvRFrRD0cv6VA7bi_IAX3fmDblSA", "content": "", "creation_timestamp": "2025-04-15T09:21:34.000000Z"}, {"uuid": "d5702344-d223-4b92-b64d-b79493db25db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "Telegram/7fjGBi0bbp4-oHMMwTUvwgbgtpPjFGajS0jdJFJ6Djx1vQ", "content": "", "creation_timestamp": "2025-04-09T13:12:17.000000Z"}, {"uuid": "2b28e402-9f15-430a-b16a-90aa9c0f89b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/true_secator/6946", "content": "\u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0436\u0435 \u0432\u0441\u0435 \u043f\u0440\u043e Ivanti \u0438 Fortinet (\u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043c\u0438\u043c\u043e \u0443\u0436\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u0431\u0430\u0432\u0438\u043b\u0430\u0441\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0432 \u0432\u0438\u0434\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 0-day - \u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u043b\u044c\u0435 \u0432\u043c\u0435\u0441\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043e \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430\u00a0ThreatMon).\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Huntress \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e Gladinet CentreStack \u0438 Triofox, \u0433\u0434\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u043c\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 120 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445.\n\nCVE-2025-30406 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA\u00a0\u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9/10.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 CentreStack \u0438 Triofox. \u0412 \u0432\u0438\u0434\u0443 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\n\n\u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0449\u0438\u0442\u0443 ASPX ViewState \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0443\u043b\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 IIS \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0445\u043e\u0440\u043e\u0448\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044e.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u044b\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0443\u043c\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b PowerShell \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Huntress, \u0432 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0443\u044e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443 PowerShell, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f DLL, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u043e\u0434\u0445\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0432\u00a0\u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CrushFTP.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u0442\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0442\u0430\u043a \u0447\u0442\u043e \u0440\u0438\u0441\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0432\u044b\u0441\u043e\u043a\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430.\n\n\u0418\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u0442\u044b \u0438\u043c \u043f\u043e\u0437\u0436\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0434\u0443\u0442 Clop \u0438\u043b\u0438 \u0438\u0445 \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u043f\u043e \u0446\u0435\u0445\u0443.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-04-14T19:48:44.000000Z"}, {"uuid": "c1bd0af9-8c4b-4f84-b499-bcf5dd656188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/true_secator/6930", "content": "\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043e\u0431\u044a\u044f\u0442\u0438\u044f Clop (\u043d\u0443 \u0438\u043b\u0438 \u0438\u0445 \u043a\u043e\u043b\u043b\u0435\u0433).\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0445\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Gladinet CentreStack \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGladinet CentreStack - \u044d\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u0435\u0440\u0432\u0435\u0440\u044b Windows \u0441 \u043e\u0431\u0449\u0438\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 SMB) \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u043e\u0431\u0449\u0438\u043c \u0444\u0430\u0439\u043b\u0430\u043c, \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0441 Active Directory.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 Gladinet \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 49 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows, MSP, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443, \u0431\u0435\u0437 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-30406 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u0438 Gladinet CentreStack \u0434\u043e 16.1.10296.56315.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u00a0\u0441 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e machineKey \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 CentreStack (web.config).\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043b\u044e\u0447, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u0442 ASP.NET ViewState \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nGladinet\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u00a0\u0434\u043b\u044f CVE-2025-30406 3 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 16.4.10315.56368, 16.3.4763.56357 (Windows) \u0438 15.12.434 (macOS).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c machineKey \u0432 root\\web.config \u0438 portal\\web.config.\n\n\u0414\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0440\u043e\u0442\u0430\u0446\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 machineKey \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0443\u0437\u043b\u0430\u043c\u0438 \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c IIS \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0439 \u043e\u0431 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0434\u0435\u043b\u044e\u0433\u0435 \u043d\u0435\u0442, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0432\u0441\u0435 \u0436\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 Cleo, MOVEit Transfer, GoAnywhere MFT, SolarWinds Serv-U \u0438 Accelion FTA.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-04-09T20:54:54.000000Z"}, {"uuid": "7133ca7c-631c-4aeb-9019-671fabd4d02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/ctinow/233853", "content": "Gladinet flaw CVE-2025-30406 actively exploited in the wild\nhttps://ift.tt/tnqw907", "creation_timestamp": "2025-04-15T09:34:34.000000Z"}, {"uuid": "a8a1fecd-c625-4aad-b956-6c545c621e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/information_security_channel/53391", "content": "Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities\nhttps://www.securityweek.com/huntress-documents-in-the-wild-exploitation-of-critical-gladinet-vulnerabilities/\n\nThe flaw, tagged as CVE-2025-30406, was added to CISA\u2019s Known Exploited Vulnerabilities (KEV) catalog in early April.\nThe post Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities (https://www.securityweek.com/huntress-documents-in-the-wild-exploitation-of-critical-gladinet-vulnerabilities/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-04-14T22:20:56.000000Z"}, {"uuid": "ef19f9d8-fbaa-489a-aa2d-fcf07a03aeb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/thehackernews/6637", "content": "\ud83d\udea8 New CISA Alert!\n\nGladinet CentreStack flaw (CVE-2025-30406, CVSS 9.0) is actively exploited.\n\n\u25b6\ufe0f Hard-coded machineKey enables remote code execution. \n\u25b6\ufe0f Exploited as a zero-day in March 2025.\n\n\ud83d\udd17 Details: https://thehackernews.com/2025/04/cisa-warns-of-centrestacks-hard-coded.html\n\nPatch or rotate keys now.", "creation_timestamp": "2025-04-09T11:41:41.000000Z"}, {"uuid": "63c6d33d-3a3c-44cb-9fdd-97032e1bc9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/S_E_Reborn/5540", "content": "\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043e\u0431\u044a\u044f\u0442\u0438\u044f Clop (\u043d\u0443 \u0438\u043b\u0438 \u0438\u0445 \u043a\u043e\u043b\u043b\u0435\u0433).\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0445\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Gladinet CentreStack \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGladinet CentreStack - \u044d\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u0435\u0440\u0432\u0435\u0440\u044b Windows \u0441 \u043e\u0431\u0449\u0438\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 SMB) \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u043e\u0431\u0449\u0438\u043c \u0444\u0430\u0439\u043b\u0430\u043c, \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0441 Active Directory.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 Gladinet \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 49 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows, MSP, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443, \u0431\u0435\u0437 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-30406 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u0438 Gladinet CentreStack \u0434\u043e 16.1.10296.56315.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c\u00a0\u0441 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e machineKey \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 CentreStack (web.config).\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043b\u044e\u0447, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u0442 ASP.NET ViewState \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nGladinet\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u00a0\u0434\u043b\u044f CVE-2025-30406 3 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0441 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 16.4.10315.56368, 16.3.4763.56357 (Windows) \u0438 15.12.434 (macOS).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c machineKey \u0432 root\\web.config \u0438 portal\\web.config.\n\n\u0414\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0440\u043e\u0442\u0430\u0446\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 machineKey \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0443\u0437\u043b\u0430\u043c\u0438 \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c IIS \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0439 \u043e\u0431 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0434\u0435\u043b\u044e\u0433\u0435 \u043d\u0435\u0442, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0432\u0441\u0435 \u0436\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 Cleo, MOVEit Transfer, GoAnywhere MFT, SolarWinds Serv-U \u0438 Accelion FTA.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-04-10T08:26:40.000000Z"}, {"uuid": "d3fb8fdc-b4c2-43b7-99e1-a9996a2fd2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://t.me/bhhub/1128", "content": "Key Cybersecurity Insights This Week  \n\n\u2728 Stealthy Red Teaming Tip: When performing RDP-based operations, adding the \"ClearRecentDocsOnExit\" registry value can help erase activity traces. This minimizes forensic artifacts, making post-exploitation detection harder\u2014a must-know for red teamers and pentesters. Read more  \n\n\u2728 Mindset Over Skill: A critical authentication bypass was successfully triaged on HackerOne\u2014proof that persistence and creative thinking often trump raw technical skill. Authentication flaws remain a goldmine for bug hunters. Read more  \n\n\u2728 RCE via Recon: A detailed writeup explains how meticulous reconnaissance led to RCE on a high-profile target (CVE-2025-30406). Demonstrates how overlooked subsystems can escalate vulnerabilities to critical impact. Read more  \n\n\u2728 AD Training Opportunity: Altered Security\u2019s giveaway for their \"Attacking & Defending Active Directory\" course highlights the growing demand for AD-focused offensive skills\u2014key for red teams and pentesters. Read more\n\n@bhhub", "creation_timestamp": "2025-08-03T13:41:59.000000Z"}, {"uuid": "a6015439-a0a9-470b-8b11-b3e226a87a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://infosec.exchange/users/TheDFIRReport/statuses/117094043413836373", "content": "\ud83d\udd12 Private DFIR Report: ViewState of Mind, Gladinet Exploit Opens the Door\nIn January, a threat actor gained initial access by exploiting CVE-2025-30406 on an exposed Gladinet CentreStack server, large VIEWSTATE payloads in the network traffic gave the exploitation away.\nRequest access or a demo \ud83d\udc49 https://thedfirreport.com/products/threat-intel/private-dfir-reports/\n#DFIR #ThreatIntel", "creation_timestamp": "2026-08-14T13:15:09.646237Z"}, {"uuid": "2cb36f9e-88e9-438b-91cb-de9d4b1b897a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mt2bvkpozx2z", "content": "Private DFIR Report: ViewState of Mind, Gladinet Exploit Opens the Door\n\nIn January, a threat actor gained initial access by exploiting CVE-2025-30406 on an exposed Gladinet CentreStack server, large VIEWSTATE payloads\u2026\n\n\u2014 from @TheDFIRReport (https://x.com/TheDFIRReport/status/2088253095377584261)", "creation_timestamp": "2026-08-14T13:40:35.693450Z"}, {"uuid": "5c56f6e6-79be-4493-85e8-6c97de62bcba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mt2uq6kkxj2o", "content": "CVE-2025-30406 is trending. Hype score 4, currently #4 on cvemon.\n\nGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-30406", "creation_timestamp": "2026-08-14T19:17:36.773371Z"}, {"uuid": "58e2cd59-f145-4b57-9268-723cfadf2432", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40791d5a-a458-447a-af61-c99950d4094b", "content": "", "creation_timestamp": "2026-06-19T12:46:23.105629Z"}, {"uuid": "b0361eea-8783-4f1e-8f39-ae2c16c94273", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/99790dcb-028d-47ce-8a80-4e4036f4b8d9", "content": "", "creation_timestamp": "2026-06-23T14:06:08.164186Z"}, {"uuid": "ea7099fc-aac1-4d3a-9b0b-1763ca8b58ab", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d330c49e-da53-44e0-9c39-da9ecbaff379", "content": "", "creation_timestamp": "2026-06-30T09:23:47.143386Z"}, {"uuid": "78d846da-64f4-45f0-bbf4-9033eb12ee91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://t.me/securixy_kz/1187", "content": "\u041a\u0442\u043e \u0437\u0430\u0431\u0438\u043b \u0438\u043b\u0438 \u0437\u0430\u0431\u044b\u043b \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 MS Windows, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043f\u044f\u0442\u043d\u0438\u0446\u0430 - \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e. \n\n\u0423\u0436 \u0431\u043e\u043b\u044c\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0434\u044b\u0440 \u043b\u0430\u0442\u0430\u044e\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u0441\u043b\u0435 DefCon \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u043e\u043d\u0444. \n\u0422\u0430\u043a\u0438\u0435 \u0434\u044b\u0440\u044b \u043a\u0430\u043a:  CVE-2025-50154, CVE-2025-50167, CVE-2025-30406, CVE-2025-50171,  CVE-2025-53772, CVE-2025-53773, CVE-2025-53783\n\u0438 \u0434\u0440\u0443\u0433\u0430\u044f \u043a\u0440\u0430\u0441\u043e\u0442\u0430 35 RCE, 44 \u043f\u0440\u0438\u0432\u0435\u0441\u043a\u0430 \u0438 \u0434\u0440.\n\n\u0425\u043e\u0442\u044f \u0435\u0441\u043b\u0438 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443 \u043f\u043e CVSS Score, \u0442\u043e \u0437\u0430\u043c\u0435\u0442\u0435\u043d \u0441\u043f\u0430\u0434 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u0445 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445, \u043a\u0430\u043d\u0438\u043a\u0443\u043b\u044b \u043d\u0435\u0431\u043e\u0441\u044c \u0438\u043b\u0438 \u0431\u0430\u043b\u044b \u0435\u0449\u0435 \u043d\u0435 \u0440\u0430\u0441\u0441\u0442\u0430\u0432\u0438\u043b\u0438\u2026", "creation_timestamp": "2026-07-12T22:00:07.029544Z"}, {"uuid": "a1c7b982-d271-4d73-827f-73867f7870f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://t.me/proxy_bar/2709", "content": "CVE-2025-30406\n*\nViewState deserialization in ASP.NET applications\n\n*\nPOC", "creation_timestamp": "2026-07-20T19:00:10.425270Z"}, {"uuid": "59216d50-a673-41f2-ab54-6efb892cee0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2709", "content": "CVE-2025-30406\n*\nViewState deserialization in ASP.NET applications\n\n*\nPOC", "creation_timestamp": "2026-07-22T00:00:24.600810Z"}, {"uuid": "575f71d4-38c6-4711-92f1-f02b1a90f50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "seen", "source": "https://t.me/ZerodayAlert/474", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Gladinet CentreStack \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\n\n\ud83d\udd25 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 Gladinet CentreStack. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0445 \u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c ASP.NET ViewState, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-30406 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0438\u043b\u0438 \u0441\u0447\u0438\u0442\u0430\u0442\u044c machineKey, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 ViewState. \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 ViewState, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0439\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udee1 \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 CentreStack 16.4.10315.56368, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0441 \u0440\u0443\u0447\u043d\u043e\u0439 \u0440\u043e\u0442\u0430\u0446\u0438\u0435\u0439 machineKey \u0447\u0435\u0440\u0435\u0437 IIS Manager.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #centrestack #zeroday\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:14.194198Z"}, {"uuid": "68f85a58-0682-458c-b9c6-b0f61070ebe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-30406", "type": "exploited", "source": "https://t.me/ZerodayAlert/474", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Gladinet CentreStack \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\n\n\ud83d\udd25 \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 Gladinet CentreStack. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0445 \u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c ASP.NET ViewState, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-30406 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0438\u043b\u0438 \u0441\u0447\u0438\u0442\u0430\u0442\u044c machineKey, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 ViewState. \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 ViewState, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0439\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udee1 \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 CentreStack 16.4.10315.56368, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0441 \u0440\u0443\u0447\u043d\u043e\u0439 \u0440\u043e\u0442\u0430\u0446\u0438\u0435\u0439 machineKey \u0447\u0435\u0440\u0435\u0437 IIS Manager.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #centrestack #zeroday\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:28.810867Z"}, {"uuid": "75fa82c2-873f-4385-8bec-a1cab4dfe447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-30406", "type": "seen", "source": "https://gist.github.com/m-q-t/6ab5b9f4cc22d934d8246fcf0b65812f", "content": "{\n  \"type\": \"bundle\",\n  \"id\": \"bundle--524cfcac-f8e3-4625-98f7-2f0913165d10\",\n  \"objects\": [\n    {\n      \"id\": \"domain-name--685142e9-f5e7-5953-9dd9-de81cc4e5669\",\n      \"type\": \"domain-name\",\n      \"value\": \"rtb.mftadsrvr.com\",\n      \"spec_version\": \"2.1\"\n    },\n    {\n      \"id\": \"domain-name--6fb7606f-c719-597d-8bcf-9c1f4e09ec62\",\n      \"type\": \"domain-name\",\n      \"value\": \"solpru.com\",\n      \"spec_version\": \"2.1\"\n    },\n    {\n      \"id\": \"file--553fdc5e-6ed0-5a68-9979-1882f8fdaeb6\",\n      \"type\": \"file\",\n      \"hashes\": {\n        \"SHA-256\": \"c3d4361939d3f6cf2fe798fef68d4713141c48dce7dd29d3838a5d0c66aa29c7\"\n      },\n      \"spec_version\": \"2.1\"\n    },\n    {\n      \"id\": \"file--a6e7344f-4f56-5fb8-9bc5-6a3dd5e795d2\",\n      \"type\": \"file\",\n      \"hashes\": {\n        \"SHA-256\": \"48b006cb17e75ecdb707dc40dd654f449b94abe49f97a808b35cabca1c5fabbf\"\n      },\n      \"spec_version\": \"2.1\"\n    },\n    {\n      \"id\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"name\": \"Mallory\",\n      \"type\": \"identity\",\n      \"created\": \"2026-09-17T17:53:45.136704Z\",\n      \"modified\": \"2026-09-17T17:53:45.136704Z\",\n      \"description\": \"Persistent sandbox producer identity; not a production identity.\",\n      \"spec_version\": \"2.1\",\n      \"identity_class\": \"organization\"\n    },\n    {\n      \"id\": \"indicator--046f0048-f112-4f17-981f-da2404a9cf84\",\n      \"name\": \"elastic_security_labs: solpru.com\",\n      \"type\": \"indicator\",\n      \"created\": \"2026-09-17T17:53:45.162265Z\",\n      \"pattern\": \"[domain-name:value = 'solpru.com']\",\n      \"modified\": \"2026-09-17T17:53:45.162265Z\",\n      \"valid_from\": \"2026-03-19T00:00:00.000000Z\",\n      \"description\": \"Compromised legitimate website hosting a fake DocuSign portal that delivers a preconfigured ScreenConnect MSI.\",\n      \"pattern_type\": \"stix\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"indicator_types\": [\n        \"malicious-activity\"\n      ],\n      \"pattern_version\": \"2.1\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.elastic.co/security-labs/threat-command/silentconnect-delivers-screenconnect\",\n          \"source_name\": \"elastic_security_labs\"\n        }\n      ]\n    },\n    {\n      \"id\": \"indicator--0d0e2908-cbbf-42f6-b263-7516177edd5b\",\n      \"name\": \"huntress_blog: 165.227.7.206\",\n      \"type\": \"indicator\",\n      \"created\": \"2026-09-17T17:53:45.153006Z\",\n      \"pattern\": \"[ipv4-addr:value = '165.227.7.206']\",\n      \"modified\": \"2026-09-17T17:53:45.153006Z\",\n      \"valid_from\": \"2025-04-11T00:00:00.000000Z\",\n      \"description\": \"Attacker IP address listed in the article's IOC table for exploitation of CVE-2025-30406 against Gladinet CentreStack/Triofox.\",\n      \"pattern_type\": \"stix\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"indicator_types\": [\n        \"malicious-activity\"\n      ],\n      \"pattern_version\": \"2.1\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild\",\n          \"source_name\": \"huntress_blog\"\n        }\n      ]\n    },\n    {\n      \"id\": \"indicator--2c3c072a-ab47-4cb8-bcc2-f343dac535d4\",\n      \"name\": \"huntress_blog: 48b006cb17e75ecdb707dc40dd654f449b94abe49f97a808b35cabca1c5fabbf\",\n      \"type\": \"indicator\",\n      \"created\": \"2026-09-17T17:53:45.156615Z\",\n      \"pattern\": \"[file:hashes.'SHA-256' = '48b006cb17e75ecdb707dc40dd654f449b94abe49f97a808b35cabca1c5fabbf']\",\n      \"modified\": \"2026-09-17T17:53:45.156615Z\",\n      \"valid_from\": \"2025-04-11T00:00:00.000000Z\",\n      \"description\": \"SHA-256 hash of d3d11.dll, listed in the IOC table and described as a Cobalt Strike-related payload used during post-exploitation.\",\n      \"pattern_type\": \"stix\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"indicator_types\": [\n        \"malicious-activity\"\n      ],\n      \"pattern_version\": \"2.1\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild\",\n          \"source_name\": \"huntress_blog\"\n        }\n      ]\n    },\n    {\n      \"id\": \"indicator--38fda90c-8cbc-4946-8988-3b4d7706b181\",\n      \"name\": \"elastic_security_labs: 86.38.225.59\",\n      \"type\": \"indicator\",\n      \"created\": \"2026-09-17T17:53:45.167579Z\",\n      \"pattern\": \"[ipv4-addr:value = '86.38.225.59']\",\n      \"modified\": \"2026-09-17T17:53:45.167579Z\",\n      \"valid_from\": \"2026-03-19T00:00:00.000000Z\",\n      \"description\": \"Adversary-controlled ScreenConnect command-and-control server used in the SILENTCONNECT campaign.\",\n      \"pattern_type\": \"stix\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"indicator_types\": [\n        \"malicious-activity\"\n      ],\n      \"pattern_version\": \"2.1\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.elastic.co/security-labs/threat-command/silentconnect-delivers-screenconnect\",\n          \"source_name\": \"elastic_security_labs\"\n        }\n      ]\n    },\n    {\n      \"id\": \"indicator--5baac882-c81d-473e-a461-d42bb3d19782\",\n      \"name\": \"huntress_blog: rtb.mftadsrvr.com\",\n      \"type\": \"indicator\",\n      \"created\": \"2026-09-17T17:53:45.159442Z\",\n      \"pattern\": \"[domain-name:value = 'rtb.mftadsrvr.com']\",\n      \"modified\": \"2026-09-17T17:53:45.159442Z\",\n      \"valid_from\": \"2025-04-11T00:00:00.000000Z\",\n      \"description\": \"Domain used by the MeshCentral agent installed during post-exploitation; the article ties it to the same infrastructure as Centre.exe.\",\n      \"pattern_type\": \"stix\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"indicator_types\": [\n        \"malicious-activity\"\n      ],\n      \"pattern_version\": \"2.1\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild\",\n          \"source_name\": \"huntress_blog\"\n        }\n      ]\n    },\n    {\n      \"id\": \"indicator--de10d7ff-31fa-406e-bf5b-93967af6c17f\",\n      \"name\": \"elastic_security_labs: c3d4361939d3f6cf2fe798fef68d4713141c48dce7dd29d3838a5d0c66aa29c7\",\n      \"type\": \"indicator\",\n      \"created\": \"2026-09-17T17:53:45.164982Z\",\n      \"pattern\": \"[file:hashes.'SHA-256' = 'c3d4361939d3f6cf2fe798fef68d4713141c48dce7dd29d3838a5d0c66aa29c7']\",\n      \"modified\": \"2026-09-17T17:53:45.164982Z\",\n      \"valid_from\": \"2026-03-19T00:00:00.000000Z\",\n      \"description\": \"SHA-256 of the malicious ScreenConnect.ClientSetup.msi installer deployed by the campaign.\",\n      \"pattern_type\": \"stix\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"indicator_types\": [\n        \"malicious-activity\"\n      ],\n      \"pattern_version\": \"2.1\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.elastic.co/security-labs/threat-command/silentconnect-delivers-screenconnect\",\n          \"source_name\": \"elastic_security_labs\"\n        }\n      ]\n    },\n    {\n      \"id\": \"ipv4-addr--872cf221-6429-5424-a644-711ca013c260\",\n      \"type\": \"ipv4-addr\",\n      \"value\": \"86.38.225.59\",\n      \"spec_version\": \"2.1\"\n    },\n    {\n      \"id\": \"ipv4-addr--a6cbba3c-d2ec-5833-b87d-8b64727216a5\",\n      \"type\": \"ipv4-addr\",\n      \"value\": \"165.227.7.206\",\n      \"spec_version\": \"2.1\"\n    },\n    {\n      \"id\": \"malware--a4558ada-8da1-428b-bb17-16c1851c841b\",\n      \"name\": \"SILENTCONNECT\",\n      \"type\": \"malware\",\n      \"created\": \"2026-09-17T17:53:45.148995Z\",\n      \"modified\": \"2026-09-17T17:53:45.148995Z\",\n      \"is_family\": true,\n      \"spec_version\": \"2.1\",\n      \"malware_types\": [\n        \"downloader\"\n      ],\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\"\n    },\n    {\n      \"id\": \"relationship--05ac3c7f-64c8-44bc-9cd7-c1af7d2570f3\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.176005Z\",\n      \"modified\": \"2026-09-17T17:53:45.176005Z\",\n      \"source_ref\": \"indicator--046f0048-f112-4f17-981f-da2404a9cf84\",\n      \"target_ref\": \"tool--1cddfda9-41b2-45d6-9b22-b849a7d91a44\",\n      \"description\": \"Reviewed tool association from the selected source verdict.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"indicates\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.elastic.co/security-labs/threat-command/silentconnect-delivers-screenconnect\",\n          \"source_name\": \"elastic_security_labs\"\n        }\n      ]\n    },\n    {\n      \"id\": \"relationship--208c41e1-fe2e-40b9-9b58-2e2321f6e326\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.178343Z\",\n      \"modified\": \"2026-09-17T17:53:45.178343Z\",\n      \"source_ref\": \"tool--1c09172f-2254-46c2-a5eb-f985b182d6b0\",\n      \"target_ref\": \"vulnerability--c3efd23a-65e5-4f7e-87fc-34e32cb7fe5f\",\n      \"description\": \"Threat actors have also been observed performing lateral movement and performing installation of remote access tooling, namely MeshCentral.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild\",\n          \"source_name\": \"huntress_blog\"\n        }\n      ]\n    },\n    {\n      \"id\": \"relationship--34c5a11a-9c97-4d48-b99b-8c64d16158a3\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.158016Z\",\n      \"modified\": \"2026-09-17T17:53:45.158016Z\",\n      \"source_ref\": \"indicator--2c3c072a-ab47-4cb8-bcc2-f343dac535d4\",\n      \"target_ref\": \"file--a6e7344f-4f56-5fb8-9bc5-6a3dd5e795d2\",\n      \"description\": \"This atomic indicator pattern matches this cyber observable.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"relationship--3e61c55d-3f1d-48d8-84b2-d822a4460d4d\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.160797Z\",\n      \"modified\": \"2026-09-17T17:53:45.160797Z\",\n      \"source_ref\": \"indicator--5baac882-c81d-473e-a461-d42bb3d19782\",\n      \"target_ref\": \"domain-name--685142e9-f5e7-5953-9dd9-de81cc4e5669\",\n      \"description\": \"This atomic indicator pattern matches this cyber observable.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"relationship--4aaf66d8-1f25-45de-90ed-6753bbe9cef5\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.172005Z\",\n      \"modified\": \"2026-09-17T17:53:45.172005Z\",\n      \"source_ref\": \"indicator--38fda90c-8cbc-4946-8988-3b4d7706b181\",\n      \"target_ref\": \"malware--a4558ada-8da1-428b-bb17-16c1851c841b\",\n      \"description\": \"Aggregate Mallory association; no stronger predicate inferred.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"relationship--54149a90-14b5-44c0-b28e-46397d5b2b93\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.175047Z\",\n      \"modified\": \"2026-09-17T17:53:45.175047Z\",\n      \"source_ref\": \"indicator--de10d7ff-31fa-406e-bf5b-93967af6c17f\",\n      \"target_ref\": \"malware--a4558ada-8da1-428b-bb17-16c1851c841b\",\n      \"description\": \"Aggregate Mallory association; no stronger predicate inferred.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"relationship--5bb05c53-95c3-406d-892a-e0e3fbdecbb1\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.174075Z\",\n      \"modified\": \"2026-09-17T17:53:45.174075Z\",\n      \"source_ref\": \"indicator--2c3c072a-ab47-4cb8-bcc2-f343dac535d4\",\n      \"target_ref\": \"tool--9ac8dc3e-e11f-48b4-add3-0be14b9c26b1\",\n      \"description\": \"Reviewed tool association from the selected source verdict.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"indicates\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild\",\n          \"source_name\": \"huntress_blog\"\n        }\n      ]\n    },\n    {\n      \"id\": \"relationship--7171d538-2980-4e6e-ae9a-1a5c6e577249\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.170924Z\",\n      \"modified\": \"2026-09-17T17:53:45.170924Z\",\n      \"source_ref\": \"indicator--de10d7ff-31fa-406e-bf5b-93967af6c17f\",\n      \"target_ref\": \"tool--1cddfda9-41b2-45d6-9b22-b849a7d91a44\",\n      \"description\": \"Reviewed tool association from the selected source verdict.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"indicates\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.elastic.co/security-labs/threat-command/silentconnect-delivers-screenconnect\",\n          \"source_name\": \"elastic_security_labs\"\n        }\n      ]\n    },\n    {\n      \"id\": \"relationship--9fbde642-362a-4b18-ade9-0e31be730828\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.154592Z\",\n      \"modified\": \"2026-09-17T17:53:45.154592Z\",\n      \"source_ref\": \"indicator--0d0e2908-cbbf-42f6-b263-7516177edd5b\",\n      \"target_ref\": \"ipv4-addr--a6cbba3c-d2ec-5833-b87d-8b64727216a5\",\n      \"description\": \"This atomic indicator pattern matches this cyber observable.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"relationship--b5a9f7a5-56a3-4282-9c29-358edfc45b4a\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.169819Z\",\n      \"modified\": \"2026-09-17T17:53:45.169819Z\",\n      \"source_ref\": \"indicator--38fda90c-8cbc-4946-8988-3b4d7706b181\",\n      \"target_ref\": \"tool--1cddfda9-41b2-45d6-9b22-b849a7d91a44\",\n      \"description\": \"Reviewed tool association from the selected source verdict.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"indicates\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.elastic.co/security-labs/threat-command/silentconnect-delivers-screenconnect\",\n          \"source_name\": \"elastic_security_labs\"\n        }\n      ]\n    },\n    {\n      \"id\": \"relationship--c601e955-d987-47e8-85e3-9136ee825946\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.177022Z\",\n      \"modified\": \"2026-09-17T17:53:45.177022Z\",\n      \"source_ref\": \"tool--9ac8dc3e-e11f-48b4-add3-0be14b9c26b1\",\n      \"target_ref\": \"vulnerability--c3efd23a-65e5-4f7e-87fc-34e32cb7fe5f\",\n      \"description\": \"CVE-2025-30406 is a 9.0 critical severity vulnerability pertaining to hardcoded keys set by default in the CentreStack and Triofox configuration files. This weakness can be leveraged to abuse the ASPX ViewState ... with ViewState deserialization ... Exploitation leads to remote code execution. | The Centre.exe process was removed by Windows Defender within minutes with the following Threat Name: Behavior:Win32/CobaltStrike.H!sms\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild\",\n          \"source_name\": \"huntress_blog\"\n        }\n      ]\n    },\n    {\n      \"id\": \"relationship--ce16e3f6-8fc9-48c8-b85b-5bcec7b35d5d\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.163617Z\",\n      \"modified\": \"2026-09-17T17:53:45.163617Z\",\n      \"source_ref\": \"indicator--046f0048-f112-4f17-981f-da2404a9cf84\",\n      \"target_ref\": \"domain-name--6fb7606f-c719-597d-8bcf-9c1f4e09ec62\",\n      \"description\": \"This atomic indicator pattern matches this cyber observable.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"relationship--e87c8f5a-b222-412a-a3da-76160c748ed7\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.166341Z\",\n      \"modified\": \"2026-09-17T17:53:45.166341Z\",\n      \"source_ref\": \"indicator--de10d7ff-31fa-406e-bf5b-93967af6c17f\",\n      \"target_ref\": \"file--553fdc5e-6ed0-5a68-9979-1882f8fdaeb6\",\n      \"description\": \"This atomic indicator pattern matches this cyber observable.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"relationship--f68ba0d7-a305-45aa-a1cb-cfe3c9d8418a\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.173055Z\",\n      \"modified\": \"2026-09-17T17:53:45.173055Z\",\n      \"source_ref\": \"indicator--5baac882-c81d-473e-a461-d42bb3d19782\",\n      \"target_ref\": \"tool--1c09172f-2254-46c2-a5eb-f985b182d6b0\",\n      \"description\": \"Reviewed tool association from the selected source verdict.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"indicates\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild\",\n          \"source_name\": \"huntress_blog\"\n        }\n      ]\n    },\n    {\n      \"id\": \"relationship--fd01fc79-fbac-48cb-b73e-5e71eeccdc06\",\n      \"type\": \"relationship\",\n      \"created\": \"2026-09-17T17:53:45.168822Z\",\n      \"modified\": \"2026-09-17T17:53:45.168822Z\",\n      \"source_ref\": \"indicator--38fda90c-8cbc-4946-8988-3b4d7706b181\",\n      \"target_ref\": \"ipv4-addr--872cf221-6429-5424-a644-711ca013c260\",\n      \"description\": \"This atomic indicator pattern matches this cyber observable.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"relationship_type\": \"related-to\"\n    },\n    {\n      \"id\": \"tool--1c09172f-2254-46c2-a5eb-f985b182d6b0\",\n      \"name\": \"MeshCentral\",\n      \"type\": \"tool\",\n      \"created\": \"2026-09-17T17:53:45.148001Z\",\n      \"modified\": \"2026-09-17T17:53:45.148001Z\",\n      \"tool_types\": [\n        \"remote-access\"\n      ],\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\"\n    },\n    {\n      \"id\": \"tool--1cddfda9-41b2-45d6-9b22-b849a7d91a44\",\n      \"name\": \"ScreenConnect\",\n      \"type\": \"tool\",\n      \"created\": \"2026-09-17T17:53:45.146908Z\",\n      \"modified\": \"2026-09-17T17:53:45.146908Z\",\n      \"tool_types\": [\n        \"remote-access\"\n      ],\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\"\n    },\n    {\n      \"id\": \"tool--9ac8dc3e-e11f-48b4-add3-0be14b9c26b1\",\n      \"name\": \"Cobalt Strike\",\n      \"type\": \"tool\",\n      \"created\": \"2026-09-17T17:53:45.145740Z\",\n      \"modified\": \"2026-09-17T17:53:45.145740Z\",\n      \"tool_types\": [\n        \"remote-access\"\n      ],\n      \"description\": \"[Cobalt Strike](https://attack.mitre.org/software/S0154) is a commercial, full-featured, remote access tool that bills itself as \u201cadversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors\u201d. Cobalt Strike\u2019s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system.(Citation: cobaltstrike manual)\\n\\nIn addition to its own capabilities, [Cobalt Strike](https://attack.mitre.org/software/S0154) leverages the capabilities of other well-known tools such as Metasploit and [Mimikatz](https://attack.mitre.org/software/S0002).(Citation: cobaltstrike manual)\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\"\n    },\n    {\n      \"id\": \"vulnerability--c3efd23a-65e5-4f7e-87fc-34e32cb7fe5f\",\n      \"name\": \"CVE-2025-30406\",\n      \"type\": \"vulnerability\",\n      \"created\": \"2026-09-17T17:53:45.149994Z\",\n      \"modified\": \"2026-09-17T17:53:45.149994Z\",\n      \"description\": \"Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution. NOTE: a CentreStack admin can manually delete the machineKey defined in portal\\\\web.config.\",\n      \"spec_version\": \"2.1\",\n      \"created_by_ref\": \"identity--17d3dc12-f291-41e5-a0a3-e8b3f450b92e\",\n      \"external_references\": [\n        {\n          \"url\": \"https://www.cve.org/CVERecord?id=CVE-2025-30406\",\n          \"external_id\": \"CVE-2025-30406\",\n          \"source_name\": \"cve\"\n        }\n      ]\n    }\n  ]\n}\n\n\n{\n    \"type\": \"bundle\",\n    \"id\": \"bundle--865c7574-60a0-4f3b-8f83-73879f641d69\",\n    \"objects\": [\n        {\n            \"type\": \"identity\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.505342Z\",\n            \"modified\": \"2026-09-17T14:55:51.505342Z\",\n            \"name\": \"ThreatCluster\",\n            \"description\": \"Automated threat intelligence aggregation and clustering platform\",\n            \"identity_class\": \"organization\",\n            \"sectors\": [\n                \"technology\"\n            ],\n            \"contact_information\": \"https://threatcluster.io\"\n        },\n        {\n            \"type\": \"attack-pattern\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"attack-pattern--06e64cc6-003a-5fb8-ac6a-bac4778c2f78\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.506427Z\",\n            \"modified\": \"2026-09-17T14:55:51.506427Z\",\n            \"name\": \"Sql Injection\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"vulnerability\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"vulnerability--d4dd3367-e862-54dd-928a-f388e5c85e40\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.507109Z\",\n            \"modified\": \"2026-09-17T14:55:51.507109Z\",\n            \"name\": \"CVE-2010-2075\",\n            \"external_references\": [\n                {\n                    \"source_name\": \"cve\",\n                    \"url\": \"https://nvd.nist.gov/vuln/detail/CVE-2010-2075\",\n                    \"external_id\": \"CVE-2010-2075\"\n                }\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"vulnerability\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"vulnerability--b676f0de-e8ad-5025-b266-9339712f1df7\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.507473Z\",\n            \"modified\": \"2026-09-17T14:55:51.507473Z\",\n            \"name\": \"CVE-2014-3704\",\n            \"external_references\": [\n                {\n                    \"source_name\": \"cve\",\n                    \"url\": \"https://nvd.nist.gov/vuln/detail/CVE-2014-3704\",\n                    \"external_id\": \"CVE-2014-3704\"\n                }\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"vulnerability\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"vulnerability--874a5ee4-6794-51a3-8cb5-d6300404abd1\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.507716Z\",\n            \"modified\": \"2026-09-17T14:55:51.507716Z\",\n            \"name\": \"Drupageddon\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--2a363e7c-c142-5444-9bcb-106836c86f5e\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.507988Z\",\n            \"modified\": \"2026-09-17T14:55:51.507988Z\",\n            \"name\": \"VMware\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--3c1d870f-0646-506e-9626-25461fe1d69d\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.508248Z\",\n            \"modified\": \"2026-09-17T14:55:51.508248Z\",\n            \"name\": \"Curl\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--99ac6ee6-6415-57f0-8743-583045c0bda7\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.508513Z\",\n            \"modified\": \"2026-09-17T14:55:51.508513Z\",\n            \"name\": \"Gobuster\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--13b952fe-ad59-5216-bcf5-7fda84a981c1\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.508762Z\",\n            \"modified\": \"2026-09-17T14:55:51.508762Z\",\n            \"name\": \"Metasploit\",\n            \"tool_types\": [\n                \"exploitation\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--39a89892-ed14-5808-9e97-a0d2a329d5f3\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.509002Z\",\n            \"modified\": \"2026-09-17T14:55:51.509002Z\",\n            \"name\": \"Msfconsole\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--6e0efbae-cfa1-59e2-85de-ff552d345e9f\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.509264Z\",\n            \"modified\": \"2026-09-17T14:55:51.509264Z\",\n            \"name\": \"Msfvenom\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--9f361cac-8efd-5267-9185-4e9b3973af4b\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.509489Z\",\n            \"modified\": \"2026-09-17T14:55:51.509489Z\",\n            \"name\": \"Nmap\",\n            \"tool_types\": [\n                \"information-gathering\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--2b73fcda-b127-5cf1-b0d6-6b9c4533c119\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.509867Z\",\n            \"modified\": \"2026-09-17T14:55:51.509867Z\",\n            \"name\": \"Openssl\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--249779c5-82b6-5a4b-8f23-c7d0a5f4467e\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.510218Z\",\n            \"modified\": \"2026-09-17T14:55:51.510218Z\",\n            \"name\": \"SCP\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--4d1f8a2f-f12d-5d8c-95c9-abd15ae81c99\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.510452Z\",\n            \"modified\": \"2026-09-17T14:55:51.510452Z\",\n            \"name\": \"Sed\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"tool\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"tool--83fade07-eaa2-5b09-8620-c78529c2a385\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.51073Z\",\n            \"modified\": \"2026-09-17T14:55:51.51073Z\",\n            \"name\": \"SSH\",\n            \"tool_types\": [\n                \"unknown\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"report\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.511222Z\",\n            \"modified\": \"2026-09-17T14:55:51.511222Z\",\n            \"name\": \"Critical SQL Injection Vulnerabilities in Drupal Exploited\",\n            \"description\": \"Recent penetration tests revealed multiple critical vulnerabilities in Drupal, specifically CVE-2014-3704, which allows remote code execution. The tests were conducted in a controlled lab environment, demonstrating exploitation methods including SQL injection and privilege escalation. The affected systems include Drupal 7.5, which was found to be vulnerable to 'Drupageddon', leading to a full database dump. Tools such as Metasploit and manual SQL injection techniques were employed during the tests. The exploitation resulted in unauthorized access to sensitive data, including plaintext passwords. Additionally, misconfigured SSH credentials were identified, further increasing the risk. The findings underscore the need for immediate remediation and security hardening for Drupal installations. Current status indicates that these vulnerabilities remain critical and require urgent attention from system administrators.\\n\\nKey Points:\\n\\u2022 CVE-2014-3704 allows remote code execution in Drupal 7.5.\\n\\u2022 Penetration tests demonstrated successful exploitation via SQL injection.\\n\\u2022 Immediate remediation is necessary to secure affected Drupal installations.\",\n            \"report_types\": [\n                \"threat-report\",\n                \"vulnerability\",\n                \"attack-pattern\"\n            ],\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ],\n            \"published\": \"2026-09-16T16:14:51Z\",\n            \"object_refs\": [\n                \"attack-pattern--06e64cc6-003a-5fb8-ac6a-bac4778c2f78\",\n                \"vulnerability--d4dd3367-e862-54dd-928a-f388e5c85e40\",\n                \"vulnerability--b676f0de-e8ad-5025-b266-9339712f1df7\",\n                \"vulnerability--874a5ee4-6794-51a3-8cb5-d6300404abd1\",\n                \"tool--2a363e7c-c142-5444-9bcb-106836c86f5e\",\n                \"tool--3c1d870f-0646-506e-9626-25461fe1d69d\",\n                \"tool--99ac6ee6-6415-57f0-8743-583045c0bda7\",\n                \"tool--13b952fe-ad59-5216-bcf5-7fda84a981c1\",\n                \"tool--39a89892-ed14-5808-9e97-a0d2a329d5f3\",\n                \"tool--6e0efbae-cfa1-59e2-85de-ff552d345e9f\",\n                \"tool--9f361cac-8efd-5267-9185-4e9b3973af4b\",\n                \"tool--2b73fcda-b127-5cf1-b0d6-6b9c4533c119\",\n                \"tool--249779c5-82b6-5a4b-8f23-c7d0a5f4467e\",\n                \"tool--4d1f8a2f-f12d-5d8c-95c9-abd15ae81c99\",\n                \"tool--83fade07-eaa2-5b09-8620-c78529c2a385\"\n            ],\n            \"labels\": [\n                \"drupal\",\n                \"penetration\",\n                \"drupal-penetration-testing\",\n                \"exploit\",\n                \"injection\",\n                \"complete\",\n                \"testing\"\n            ],\n            \"confidence\": 70,\n            \"external_references\": [\n                {\n                    \"source_name\": \"ThreatCluster\",\n                    \"url\": \"https://threatcluster.io/cluster/critical-sql-injection-vulnerabilities-in-drupal-exploited-31e826cb\",\n                    \"external_id\": \"8568345c-c910-447b-890d-f6ae31e826cb\"\n                },\n                {\n                    \"source_name\": \"Sploitus\",\n                    \"url\": \"https://sploitus.com/exploit?id=AD4457C9-F24C-5AC0-9548-721DEFF4A69B&utm_source=rss&utm_medium=rss\"\n                },\n                {\n                    \"source_name\": \"Sploitus\",\n                    \"url\": \"https://sploitus.com/exploit?id=C6D824DB-20E7-5DED-8E2A-668235BF6B65&utm_source=rss&utm_medium=rss\"\n                }\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--9ab53ff3-a476-5410-b501-7915b5dece39\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.511655Z\",\n            \"modified\": \"2026-09-17T14:55:51.511655Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"attack-pattern--06e64cc6-003a-5fb8-ac6a-bac4778c2f78\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--15097aca-02e1-52bb-ad5c-7b51bc335f95\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.511954Z\",\n            \"modified\": \"2026-09-17T14:55:51.511954Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"vulnerability--d4dd3367-e862-54dd-928a-f388e5c85e40\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--0cadb32a-2b6f-50e0-9dd5-f4bf26337b09\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.51285Z\",\n            \"modified\": \"2026-09-17T14:55:51.51285Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"vulnerability--b676f0de-e8ad-5025-b266-9339712f1df7\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--df875b78-933a-5eb6-8839-ca7794af0198\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.513186Z\",\n            \"modified\": \"2026-09-17T14:55:51.513186Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"vulnerability--874a5ee4-6794-51a3-8cb5-d6300404abd1\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--2f22d159-7d7a-5d7a-85e1-615634583321\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.513524Z\",\n            \"modified\": \"2026-09-17T14:55:51.513524Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--2a363e7c-c142-5444-9bcb-106836c86f5e\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--a6f76931-818e-557b-bb05-d5d7e3af721c\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.513866Z\",\n            \"modified\": \"2026-09-17T14:55:51.513866Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--3c1d870f-0646-506e-9626-25461fe1d69d\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--e453bdb1-db68-5652-a9a3-34a8ba02c866\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.514325Z\",\n            \"modified\": \"2026-09-17T14:55:51.514325Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--99ac6ee6-6415-57f0-8743-583045c0bda7\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--e7a4703a-0df9-5733-bbd9-f406b2d036b1\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.514755Z\",\n            \"modified\": \"2026-09-17T14:55:51.514755Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--13b952fe-ad59-5216-bcf5-7fda84a981c1\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--8e5e6749-0b85-53a0-b25d-248fca2f8641\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.515046Z\",\n            \"modified\": \"2026-09-17T14:55:51.515046Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--39a89892-ed14-5808-9e97-a0d2a329d5f3\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--209b01e1-9f85-5939-ad30-fc87cd955b75\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.515418Z\",\n            \"modified\": \"2026-09-17T14:55:51.515418Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--6e0efbae-cfa1-59e2-85de-ff552d345e9f\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--a10b623d-9e68-537d-b4da-025ca69929e3\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.515767Z\",\n            \"modified\": \"2026-09-17T14:55:51.515767Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--9f361cac-8efd-5267-9185-4e9b3973af4b\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--359cb62e-bee1-5c4f-8810-a0a65cebbeeb\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.516082Z\",\n            \"modified\": \"2026-09-17T14:55:51.516082Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--2b73fcda-b127-5cf1-b0d6-6b9c4533c119\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--e9ad5928-96a2-5eae-a4f4-bcda99f54803\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.516432Z\",\n            \"modified\": \"2026-09-17T14:55:51.516432Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--249779c5-82b6-5a4b-8f23-c7d0a5f4467e\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--39acb819-cd62-51f6-affa-189fbf0b960f\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.516805Z\",\n            \"modified\": \"2026-09-17T14:55:51.516805Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--4d1f8a2f-f12d-5d8c-95c9-abd15ae81c99\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        },\n        {\n            \"type\": \"relationship\",\n            \"spec_version\": \"2.1\",\n            \"id\": \"relationship--7b08880e-a2e7-5fac-9d38-b95fabd41b32\",\n            \"created_by_ref\": \"identity--a1b2c3d4-e5f6-4a5b-8c9d-0e1f2a3b4c5d\",\n            \"created\": \"2026-09-17T14:55:51.517148Z\",\n            \"modified\": \"2026-09-17T14:55:51.517148Z\",\n            \"relationship_type\": \"mentions\",\n            \"source_ref\": \"report--c2f033c4-3e56-5dd3-9326-2955160800e1\",\n            \"target_ref\": \"tool--83fade07-eaa2-5b09-8620-c78529c2a385\",\n            \"object_marking_refs\": [\n                \"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9\"\n            ]\n        }\n    ]\n}", "creation_timestamp": "2026-09-17T19:18:21.817209Z"}]}