https://vulnerability.circl.lu/sightings/feed 2026-07-08T12:10:42.868528+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5ad9d3cd-6242-4b66-93c0-973ccd24551a/export 2026-07-08T12:10:42.894873+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5ad9d3cd-6242-4b66-93c0-973ccd24551a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3180", "type": "seen", "source": "https://t.me/cvedetector/22043", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-3180 - Projectworlds Online Doctor Appointment Booking System SQL Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-3180 \nPublished : April 3, 2025, 9:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor/deleteschedule.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"04 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T02:07:03.000000Z"} 2025-04-04T02:07:03+00:00 https://vulnerability.circl.lu/sighting/70a7e46c-ea84-42ec-83c5-71368e4fae2e/export 2026-07-08T12:10:42.898293+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "70a7e46c-ea84-42ec-83c5-71368e4fae2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxactp7jk26", "content": "", "creation_timestamp": "2025-04-04T01:11:45.426068Z"} 2025-04-04T01:11:45.426068+00:00 https://vulnerability.circl.lu/sighting/6d46fb20-0d2e-43f5-8eb8-3801520c2bfd/export 2026-07-08T12:10:42.898399+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6d46fb20-0d2e-43f5-8eb8-3801520c2bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31804", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31804\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DraftPress Team Follow Us Badges allows Stored XSS. This issue affects Follow Us Badges: from n/a through 3.1.11.\n\ud83d\udccf Published: 2025-04-01T14:51:36.333Z\n\ud83d\udccf Modified: 2025-04-01T20:04:23.324Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wpsite-follow-us-badges/vulnerability/wordpress-follow-us-badges-plugin-3-1-11-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-01T20:33:35.000000Z"} 2025-04-01T20:33:35+00:00 https://vulnerability.circl.lu/sighting/a5712660-4b34-437c-8c61-90fb8c885455/export 2026-07-08T12:10:42.898471+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a5712660-4b34-437c-8c61-90fb8c885455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31803", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31803\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Neteuro Turisbook Booking System allows Stored XSS. This issue affects Turisbook Booking System: from n/a through 1.3.7.\n\ud83d\udccf Published: 2025-04-01T14:51:35.752Z\n\ud83d\udccf Modified: 2025-04-01T20:04:43.108Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/turisbook-booking-system/vulnerability/wordpress-turisbook-booking-system-plugin-1-3-7-stored-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-01T20:33:34.000000Z"} 2025-04-01T20:33:34+00:00