{"vulnerability": "cve-2025-10184", "sightings": [{"uuid": "c7765c86-5827-4294-aeed-7419a795ad78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115266248859496460", "content": "", "creation_timestamp": "2025-09-25T18:02:57.760693Z"}, {"uuid": "7fde6a4d-ae10-4bd5-b010-5ff44d55b1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://threatintel.cc/2025/09/25/threatsday-bulletin-rootkit-patch-federal.html", "content": "", "creation_timestamp": "2025-09-25T16:03:07.000000Z"}, {"uuid": "7a68b364-0fcd-4646-93aa-5ff4c795fb7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lzwdllkpkk2m", "content": "", "creation_timestamp": "2025-09-28T20:30:22.922512Z"}, {"uuid": "a0e3d303-632d-48bd-80c5-eb9861885c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m2c53pdb3i2z", "content": "", "creation_timestamp": "2025-10-03T13:06:00.631626Z"}, {"uuid": "32609399-30a4-4c22-ad67-73f175b9908c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-10184", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m2nldeuip62v", "content": "", "creation_timestamp": "2025-10-08T02:20:07.545548Z"}, {"uuid": "e28485b8-c12c-4c0f-8b41-4d270ffc8717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115253802918487557", "content": "", "creation_timestamp": "2025-09-23T13:17:48.362663Z"}, {"uuid": "500eb0ca-e57b-4e75-86c5-909d1d2f476d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-10184", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115322515766914130", "content": "", "creation_timestamp": "2025-10-05T16:32:22.641586Z"}, {"uuid": "09380a02-72f6-458a-9f43-0439be3b3107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3m2hxjt6cb72o", "content": "", "creation_timestamp": "2025-10-05T20:42:30.046389Z"}, {"uuid": "946a4840-9072-4766-96a9-00d33b2f7fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lzjsg62pcj2p", "content": "", "creation_timestamp": "2025-09-23T20:51:07.019222Z"}, {"uuid": "4f57e4f8-eb3f-4b4e-acf4-670d7388c7b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lzkp3l3f4z2d", "content": "", "creation_timestamp": "2025-09-24T05:24:10.469970Z"}, {"uuid": "c887a144-35a2-4c7a-91a8-16f68b1bda36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-10184", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115260168473544277", "content": "", "creation_timestamp": "2025-09-24T16:16:38.448716Z"}, {"uuid": "a1e8e44a-331d-4c2e-b5d8-e2dd17be568e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3lzsufxcwy72g", "content": "", "creation_timestamp": "2025-09-27T11:20:44.821082Z"}, {"uuid": "90d4af11-5b12-4cce-bcd4-f7d64565da8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "published-proof-of-concept", "source": "Telegram/o2SZz5q_HZS1oen_zY3SwJiw98MpaisoMsbpWNWHbWigKhk", "content": "", "creation_timestamp": "2025-10-04T15:00:07.000000Z"}, {"uuid": "9d298b12-5c8d-4deb-a3c5-ee1b9409b813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/55199", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd0d Identify and analyze the CVE-2025-10184 vulnerability in ColorOS, affecting SMS data access in OPPO and its sub-brands.\nURL\uff1ahttps://github.com/ENGWes/ColorOS-CVE-2025-10184\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-12T17:09:38.000000Z"}, {"uuid": "4c20152c-aa13-400a-b06c-786c3e154885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://t.me/thehackernews/7605", "content": "\ud83d\udea8 OnePlus Alert: A CVE-2025-10184 flaw (CVSS 8.2) in OxygenOS lets any malicious app read your SMS\u2014including MFA codes\u2014without permission or warning.\n\nUnpatched since OxygenOS 12 (2021). OnePlus says it\u2019s investigating.\n\nProtect your accounts now \u2192 https://thehackernews.com/2025/09/threatsday-bulletin-rootkit-patch.html#texts-laid-bare", "creation_timestamp": "2025-09-25T18:53:46.000000Z"}, {"uuid": "5ec5d29c-c5b3-4132-bacd-4c4f63184fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "published-proof-of-concept", "source": "Telegram/xJwQn50TeCdsgqwx0gkAWJe9vIjveIqW4k4TNVVPN8BgCEY", "content": "", "creation_timestamp": "2025-09-24T15:00:08.000000Z"}, {"uuid": "508c7acc-f89b-4976-9d82-c336e775d3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "published-proof-of-concept", "source": "Telegram/iPm63msdgbY2J0wlB0Mv8gSCnHS0jhxsnXp7BAPGvVi-L3Y", "content": "", "creation_timestamp": "2025-09-24T11:00:10.000000Z"}, {"uuid": "44a93cf7-7807-485b-8bad-c9d93595ed3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://t.me/ZerodayAlert/558", "content": "\ud83d\udcf1 OnePlus \u0438 \u0434\u044b\u0440\u0430 \u0432 SMS: \u0447\u0442\u043e \u043f\u043e\u0448\u043b\u043e \u043d\u0435 \u0442\u0430\u043a\n\n\ud83d\udea8 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-10184 \u0432 OxygenOS \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0432 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432. \u0414\u043e\u0431\u0430\u0432\u0438\u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0432 Android Telephony, OnePlus \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a SMS \u0432\u0441\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c.\n\n\ud83d\udd0e \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0432 \u0447\u0442\u0435\u043d\u0438\u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u043c\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0435\u043f\u0443\u044e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e. \u042d\u0442\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432 \u043b\u044e\u0431\u043e\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\n\n\u26a0\ufe0f \u0418\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443: \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043a \u043f\u043e\u0431\u043e\u0447\u043d\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443. \u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 SMS \u0432\u0441\u0451 \u0435\u0449\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u0443\u044e \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#oneplus #cve #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:11.851704Z"}, {"uuid": "1f63596c-54dc-4fe4-b768-a66a2b3eb60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://t.me/xhqcankao/23355", "content": "OnePlus\u624b\u673a\u6216\u9762\u4e34\u91cd\u5927\u77ed\u4fe1\u6f0f\u6d1e\u7684\u98ce\u9669\n\n\u76ee\u524d\u4f7f\u7528\u4e2d\u7684\u5927\u591a\u6570 OnePlus \u624b\u673a\u53ef\u80fd\u5bb9\u6613\u53d7\u5230\u4e00\u4e2a\u5b89\u5168\u6f0f\u6d1e\u5f71\u54cd\uff0c\u8be5\u6f0f\u6d1e\u4f1a\u5bfc\u81f4\u77ed\u4fe1\u548c\u5f69\u4fe1\u6570\u636e\u6cc4\u9732\uff0c\u5e76\u4e14\u8981\u5230\u5341\u6708\u4e2d\u65ec\u624d\u4f1a\u4fee\u590d\u3002\u5b89\u5168\u516c\u53f8Rapid7\u9996\u6b21\u53d1\u73b0\u4e86\u8be5\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u4e0e OnePlus \u5bf9\u5b89\u5353\u7cfb\u7edf Telephony \u670d\u52a1\u6240\u505a\u7684\u66f4\u6539\u6709\u5173\u3002\u7b80\u800c\u8a00\u4e4b\uff0c\u8fd9\u5c06\u5141\u8bb8\u5df2\u5b89\u88c5\u7684\u5e94\u7528\u5728\u65e0\u9700\u6743\u9650\u3001\u7528\u6237\u4ea4\u4e92\u6216\u540c\u610f\u7684\u60c5\u51b5\u4e0b\u8bbf\u95ee\u77ed\u4fe1\u6570\u636e\u3002Rapid7\u5728\u8fd0\u884c\u6c27OS 12\u300114 \u548c 15 \u7684\u8bbe\u5907\u4e0a\u53d1\u73b0\u4e86\u8be5\u6f0f\u6d1e\uff0c\u4f46\u62a5\u544a\u79f0\u6c27OS 11 \u5e76\u4e0d\u53d7\u5f71\u54cd\u3002\u5bf9\u6b64\uff0cOnePlus \u516c\u53f8\u79f0\u5df2\u786e\u8ba4\u8fd1\u671f\u62ab\u9732\u7684 CVE-2025-10184 \u5e76\u5df2\u5b9e\u65bd\u4fee\u590d\u3002\u53d1\u8a00\u4eba\u8868\u793a\uff0c\u8be5\u4fee\u590d\u5c06\u4ece\u5341\u6708\u4e2d\u65ec\u8d77\u901a\u8fc7\u8f6f\u4ef6\u66f4\u65b0\u5728\u5168\u7403\u8303\u56f4\u5185\u63a8\u9001\u3002\n\n\u2014\u2014 Theverge", "creation_timestamp": "2026-08-28T18:00:05.324833Z"}, {"uuid": "18e8ed1f-ba56-403b-b83b-0d891ba77eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-10184", "type": "seen", "source": "https://gist.github.com/ichintu/ab5cbbd3842997755fe279a7f768db9d", "content": "This daily threat intelligence digest highlights critical, actively exploited vulnerabilities and systemic patching gaps across enterprise, mobile, AI, and web platforms:\n\n\u2022 **Actively Exploited & High-Impact Flaws:** Adobe\u2019s AV26-808 advisory (CVE-2026-71362 added to CISA KEV) impacts multiple products; WordPress patched a critical RCE (CVE-2026-87902) exploited within 24 hours; OnePlus devices allow unprivileged apps to gain root (CVE-2025-10184); Brocade SANnav leaks IPsec pre-shared keys in container logs (CVE-2026-14443, CVSS 8.4).\n\n\u2022 **AI & Emerging Threats:** Orca Security\u2019s 2026 report reveals 81% of AI-using organizations host vulnerable packages, 50% with public exploits, and 99.9% unpatched, as defenses focus on prompt injection over basic hygiene. The Lunex info stealer now leverages Bring Your Own Vulnerable Driver (BYOVD) techniques.\n\n\u2022 **Legacy & Credential Risks:** PHP HTTP redirect credential leak (CVE-2026-91766) underscores persistent data exposure from older curl handling flaws.\n\n\u2022 **Key Takeaway:** Exploit-to-patch windows have effectively collapsed, and unmanaged/inventory-blind deployments are creating critical blind spots. Immediate patching, automated remediation workflows, and strict asset tracking are essential to mitigate active threats.", "creation_timestamp": "2026-09-25T00:00:39.000000Z"}]}