https://vulnerability.circl.lu/sightings/feed 2026-05-09T08:58:09.933920+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5498c4a5-dbfb-4af6-9493-a544d0fa3248/export 2026-05-09T08:58:10.301518+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "5498c4a5-dbfb-4af6-9493-a544d0fa3248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4697", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16486", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4697\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-15T13:00:11.709Z\n\ud83d\udccf Modified: 2025-05-15T13:00:11.709Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308996\n2. https://vuldb.com/?ctiid.308996\n3. https://vuldb.com/?submit.567694\n4. https://github.com/lwecho/myCVE/issues/2\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-15T13:33:30.000000Z"} 2025-05-15T13:33:30+00:00 https://vulnerability.circl.lu/sighting/18103228-852b-482b-b0e2-8a9459c62ffb/export 2026-05-09T08:58:10.301423+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "18103228-852b-482b-b0e2-8a9459c62ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4697", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhdgis2t", "content": "", "creation_timestamp": "2025-05-15T15:03:15.744829Z"} 2025-05-15T15:03:15.744829+00:00 https://vulnerability.circl.lu/sighting/f2eee20d-2dc8-41b5-90f3-f7c5de43ba19/export 2026-05-09T08:58:10.301279+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "f2eee20d-2dc8-41b5-90f3-f7c5de43ba19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46971", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46971\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:20:21.887Z\n\ud83d\udccf Modified: 2025-06-10T22:20:21.887Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-10T22:32:45.000000Z"} 2025-06-10T22:32:45+00:00 https://vulnerability.circl.lu/sighting/5ff2b019-7ad0-4635-b750-b47db7c41b0f/export 2026-05-09T08:58:10.298761+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "5ff2b019-7ad0-4635-b750-b47db7c41b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-46979", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46979\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2025-06-10T22:19:58.945Z\n\ud83d\udccf Modified: 2025-06-11T18:02:37.259Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html", "creation_timestamp": "2025-06-11T18:35:09.000000Z"} 2025-06-11T18:35:09+00:00