{"vulnerability": "CVE-2025-61156", "sightings": [{"uuid": "726f6bfa-8d2d-4f7d-9231-21cbd149a281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61156", "type": "exploited", "source": "https://t.me/GithubRedTeam/57190", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDisclosure for CVE-2025-61156, an insecure access control, kernel-mode vulnerability found in ThreatFire System Monitor abused in the wild for BYOVD and EDR evasion.\nURL\uff1ahttps://github.com/D7EAD/CVE-2025-61156\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-27T16:53:52.000000Z"}, {"uuid": "12815928-0fc3-48fd-90a6-030babaac1c7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61156", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/57a227e7-1838-4f33-84e6-c25d482fe4e3", "content": "", "creation_timestamp": "2026-06-19T12:45:49.589586Z"}]}