<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 09 May 2026 18:14:30 +0000</lastBuildDate>
    <item>
      <title>b7409a75-22d4-47a8-8f0d-a1992be0937d</title>
      <link>https://vulnerability.circl.lu/sighting/b7409a75-22d4-47a8-8f0d-a1992be0937d/export</link>
      <description>{"uuid": "b7409a75-22d4-47a8-8f0d-a1992be0937d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2985", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9620", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2985\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udccf Published: 2025-03-31T09:00:08.985Z\n\ud83d\udccf Modified: 2025-03-31T09:00:08.985Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.302037\n2. https://vuldb.com/?ctiid.302037\n3. https://vuldb.com/?submit.523344\n4. https://github.com/LeoWSY-hashblue/cve2/blob/main/cve.md\n5. https://code-projects.org/", "creation_timestamp": "2025-03-31T09:31:08.000000Z"}</description>
      <content:encoded>{"uuid": "b7409a75-22d4-47a8-8f0d-a1992be0937d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2985", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9620", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2985\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udccf Published: 2025-03-31T09:00:08.985Z\n\ud83d\udccf Modified: 2025-03-31T09:00:08.985Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.302037\n2. https://vuldb.com/?ctiid.302037\n3. https://vuldb.com/?submit.523344\n4. https://github.com/LeoWSY-hashblue/cve2/blob/main/cve.md\n5. https://code-projects.org/", "creation_timestamp": "2025-03-31T09:31:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b7409a75-22d4-47a8-8f0d-a1992be0937d/export</guid>
      <pubDate>Mon, 31 Mar 2025 09:31:08 +0000</pubDate>
    </item>
    <item>
      <title>dd20b99c-c261-4000-9a8d-73dab42ee717</title>
      <link>https://vulnerability.circl.lu/sighting/dd20b99c-c261-4000-9a8d-73dab42ee717/export</link>
      <description>{"uuid": "dd20b99c-c261-4000-9a8d-73dab42ee717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2985", "type": "seen", "source": "https://t.me/cvedetector/21575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2985 - Code-projects Payroll Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2985 \nPublished : March 31, 2025, 9:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T13:20:22.000000Z"}</description>
      <content:encoded>{"uuid": "dd20b99c-c261-4000-9a8d-73dab42ee717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2985", "type": "seen", "source": "https://t.me/cvedetector/21575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2985 - Code-projects Payroll Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2985 \nPublished : March 31, 2025, 9:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T13:20:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd20b99c-c261-4000-9a8d-73dab42ee717/export</guid>
      <pubDate>Mon, 31 Mar 2025 13:20:22 +0000</pubDate>
    </item>
    <item>
      <title>64c92961-8aea-4a8b-a4f6-3277137e8607</title>
      <link>https://vulnerability.circl.lu/sighting/64c92961-8aea-4a8b-a4f6-3277137e8607/export</link>
      <description>{"uuid": "64c92961-8aea-4a8b-a4f6-3277137e8607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29855", "type": "seen", "source": "https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review", "content": "", "creation_timestamp": "2025-05-13T16:27:02.000000Z"}</description>
      <content:encoded>{"uuid": "64c92961-8aea-4a8b-a4f6-3277137e8607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29855", "type": "seen", "source": "https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review", "content": "", "creation_timestamp": "2025-05-13T16:27:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/64c92961-8aea-4a8b-a4f6-3277137e8607/export</guid>
      <pubDate>Tue, 13 May 2025 16:27:02 +0000</pubDate>
    </item>
  </channel>
</rss>
