https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 31 May 2026 03:50:56 +0000 https://vulnerability.circl.lu/sighting/1a7e3b5f-3e2d-4c3e-8dc4-b53b54ac0c74/export {"uuid": "1a7e3b5f-3e2d-4c3e-8dc4-b53b54ac0c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3519\n\ud83d\udd25 CVSS Score: 7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N)\n\ud83d\udd39 Description: An authorization bypass\u00a0in\u00a0Unblu Spark allows a\u00a0participant of a conversation\u00a0to replace an existing, uploaded file.\n\nEvery uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly.\n\ud83d\udccf Published: 2025-04-22T08:51:41.681Z\n\ud83d\udccf Modified: 2025-04-22T08:51:41.681Z\n\ud83d\udd17 References:\n1. https://www.unblu.com/en/docs/latest/security-bulletins/#UBL-2025-001", "creation_timestamp": "2025-04-22T09:04:15.000000Z"} {"uuid": "1a7e3b5f-3e2d-4c3e-8dc4-b53b54ac0c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3519\n\ud83d\udd25 CVSS Score: 7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N)\n\ud83d\udd39 Description: An authorization bypass\u00a0in\u00a0Unblu Spark allows a\u00a0participant of a conversation\u00a0to replace an existing, uploaded file.\n\nEvery uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly.\n\ud83d\udccf Published: 2025-04-22T08:51:41.681Z\n\ud83d\udccf Modified: 2025-04-22T08:51:41.681Z\n\ud83d\udd17 References:\n1. https://www.unblu.com/en/docs/latest/security-bulletins/#UBL-2025-001", "creation_timestamp": "2025-04-22T09:04:15.000000Z"} https://vulnerability.circl.lu/sighting/1a7e3b5f-3e2d-4c3e-8dc4-b53b54ac0c74/export Tue, 22 Apr 2025 09:04:15 +0000 https://vulnerability.circl.lu/sighting/59f9b759-d821-4d23-9531-ca97b30a479e/export {"uuid": "59f9b759-d821-4d23-9531-ca97b30a479e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "Telegram/Fkk7fCFf__vxcN9yUdFFxPMM1IoLmdN1KJ3VKQ-hEiFiNXA", "content": "", "creation_timestamp": "2025-04-22T12:00:38.000000Z"} {"uuid": "59f9b759-d821-4d23-9531-ca97b30a479e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "Telegram/Fkk7fCFf__vxcN9yUdFFxPMM1IoLmdN1KJ3VKQ-hEiFiNXA", "content": "", "creation_timestamp": "2025-04-22T12:00:38.000000Z"} https://vulnerability.circl.lu/sighting/59f9b759-d821-4d23-9531-ca97b30a479e/export Tue, 22 Apr 2025 12:00:38 +0000 https://vulnerability.circl.lu/sighting/4ddcb97a-8440-4ce5-a1c2-6b36940695b0/export {"uuid": "4ddcb97a-8440-4ce5-a1c2-6b36940695b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "https://t.me/cvedetector/23489", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-3519 - Unblu Spark Authorization Bypass File Replacement\", \n \"Content\": \"CVE ID : CVE-2025-3519 \nPublished : April 22, 2025, 9:15 a.m. | 40\u00a0minutes ago \nDescription : An authorization bypass\u00a0in\u00a0Unblu Spark allows a\u00a0participant of a conversation\u00a0to replace an existing, uploaded file. \n \nEvery uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T12:33:00.000000Z"} {"uuid": "4ddcb97a-8440-4ce5-a1c2-6b36940695b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "https://t.me/cvedetector/23489", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-3519 - Unblu Spark Authorization Bypass File Replacement\", \n \"Content\": \"CVE ID : CVE-2025-3519 \nPublished : April 22, 2025, 9:15 a.m. | 40\u00a0minutes ago \nDescription : An authorization bypass\u00a0in\u00a0Unblu Spark allows a\u00a0participant of a conversation\u00a0to replace an existing, uploaded file. \n \nEvery uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T12:33:00.000000Z"} https://vulnerability.circl.lu/sighting/4ddcb97a-8440-4ce5-a1c2-6b36940695b0/export Tue, 22 Apr 2025 12:33:00 +0000